Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/fe0e9d15-5766-3fab-a41f-78d85c5e9703.roa
File:                     fe0e9d15-5766-3fab-a41f-78d85c5e9703.roa (raw, json)
Hash identifier:          Sp+Gm3pm2bLr7CSLVrrucfo816Exwn6AK/RzK1bRrus=
Subject key identifier:   7B:65:5F:03:77:B7:74:CD:41:05:4B:2B:4C:61:D5:E0:6A:85:05:0C
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584867424A1A644A81ED2AADFBD0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/fe0e9d15-5766-3fab-a41f-78d85c5e9703.roa
Signing time:             Wed 01 Jan 2025 19:48:43 +0000
ROA not before:           Wed 01 Jan 2025 19:48:43 +0000
ROA not after:            Tue 01 Apr 2025 18:48:43 +0000
asID:                     834
IP address blocks:        68.67.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:42:4a:1a:64:4a:81:ed:2a:ad:fb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jan  1 19:48:43 2025 GMT
            Not After : Apr  1 18:48:43 2025 GMT
        Subject: CN=84dfd2cf-b752-4f1e-81ab-079c335b76d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:b8:51:e8:fd:09:b8:57:56:f9:b6:33:c0:
                    b8:8f:a4:20:2a:fc:4f:46:e2:4a:75:2c:45:ce:36:
                    b5:d1:37:1b:f5:f2:b4:61:f4:ae:d1:e2:f5:fa:c0:
                    dc:86:53:44:29:4a:8b:46:d5:99:36:d5:b3:b9:c9:
                    9b:08:67:71:aa:ab:aa:dd:0b:40:3a:89:b1:bb:38:
                    89:82:c9:a2:7e:d5:85:7f:f1:13:7b:ca:68:fe:da:
                    08:ef:87:e8:bb:e3:3d:8b:66:d5:11:df:12:19:14:
                    76:08:cf:60:66:3e:f3:c4:5c:4f:1f:56:45:0b:97:
                    d4:ab:15:2a:c9:81:59:19:cf:d1:ac:b9:a0:3c:7c:
                    a1:d9:21:eb:25:4d:ad:41:00:f6:ce:8f:8b:21:31:
                    6b:43:a5:64:af:31:df:58:47:95:cd:49:80:2e:6f:
                    2b:93:a4:8e:a9:88:f7:96:73:cc:83:d4:d8:66:a8:
                    6e:1b:d9:95:6e:5d:e5:50:f9:ed:1e:c1:fc:23:5f:
                    55:de:fe:b5:74:2f:db:bf:7b:75:bf:52:4c:c1:d2:
                    a6:51:7e:77:e3:74:b0:e3:71:6b:dc:45:10:52:54:
                    f2:e8:8f:1b:2e:47:ab:35:81:cb:c9:03:39:1f:d7:
                    45:d7:69:ed:f8:8b:3b:1f:94:5a:ad:ec:95:77:68:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:5F:03:77:B7:74:CD:41:05:4B:2B:4C:61:D5:E0:6A:85:05:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/fe0e9d15-5766-3fab-a41f-78d85c5e9703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0d:5e:79:2b:37:8d:7e:6c:7f:b6:7b:22:d9:2c:22:60:05:
         4e:d0:19:28:70:06:c2:03:96:40:7d:2a:03:3c:cc:f7:bd:ae:
         e9:a2:a7:8e:be:92:a3:87:f4:02:a9:98:25:86:7f:33:cc:e0:
         5c:14:e2:e2:1a:1e:6a:5c:88:60:bd:bf:23:5c:08:23:9f:cc:
         de:7d:af:09:ea:c1:43:bf:d9:cb:97:62:2c:bd:e2:6d:07:78:
         e4:ba:df:66:f5:35:c7:fe:59:41:ce:6b:80:d8:12:c0:08:dc:
         5a:06:43:5b:00:27:3d:9b:a2:62:11:71:be:1e:5c:ca:e8:db:
         7f:fd:00:f1:c2:e0:9d:87:92:a1:56:1e:dd:e0:e4:0a:90:1f:
         a0:bf:0f:03:bb:d8:54:4c:d4:36:05:46:9e:c8:85:fd:ed:2f:
         04:50:f1:53:63:b8:3e:c5:ed:f7:ae:29:0a:35:14:53:4e:fa:
         81:75:e9:2a:6d:28:5a:bd:6a:4b:5b:43:d5:c5:c7:2a:57:e6:
         57:5f:d6:e1:84:39:b9:a7:f1:1d:c1:f2:fb:bf:a5:cc:f8:68:
         11:89:98:db:1b:6d:0d:05:8f:39:f8:e4:23:0e:02:38:4a:72:
         63:8a:68:8d:ef:db:56:d3:af:7d:1d:31:70:35:bd:13:d4:bb:
         1e:0a:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:23:57 2025 by rpki-client