Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/697ce66a-f2f3-301c-ba81-cae9aed46102.roa
File:                     697ce66a-f2f3-301c-ba81-cae9aed46102.roa (raw, json)
Hash identifier:          s02jssc/ikfstTgLrxmvS6am9s1VZgEJukFb4yuBzg8=
Subject key identifier:   A0:0F:23:E3:90:B9:07:A6:A6:57:79:AF:C7:A2:52:FA:3F:FE:30:D6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1FFF83AFF1F2291DAAC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/697ce66a-f2f3-301c-ba81-cae9aed46102.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.187.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ff:f8:3a:ff:1f:22:91:da:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=aa9dcb39-1ee4-4021-8f58-d9ab8060b09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:db:f1:41:a6:f2:bc:df:82:a1:1b:a2:f9:
                    61:be:89:fd:a3:cf:0d:32:5e:ba:64:9e:ff:c4:60:
                    6c:a5:5e:99:59:15:03:c1:48:40:ab:5a:78:83:bf:
                    c8:46:a0:f5:62:30:9a:fd:e9:46:f9:dc:37:ab:68:
                    8d:c9:ba:1a:d3:61:19:3d:3a:b9:6e:63:9b:df:7e:
                    1c:b0:4d:dc:1d:48:19:e1:64:4c:1a:04:23:06:77:
                    81:fb:33:27:ae:53:5e:5e:61:0f:7b:ae:b7:5f:95:
                    d5:b1:72:19:45:2e:99:0c:e8:ca:9c:b8:c7:3a:39:
                    b8:29:f7:43:36:c2:fb:39:d0:09:0c:17:7b:42:d3:
                    7d:cf:13:c4:d2:b7:a3:01:08:54:74:3f:3b:e0:53:
                    db:26:8b:5d:ec:e4:3f:ce:f2:51:49:b7:f4:d1:0e:
                    e2:e9:8e:6f:f9:9c:65:53:07:46:f8:36:bd:47:4e:
                    09:5e:26:69:df:4a:52:e2:96:d2:0f:27:54:7d:b1:
                    eb:81:16:5c:06:c3:0e:84:6e:2d:b1:b2:26:05:0a:
                    5d:0c:25:06:89:a5:33:f5:71:68:88:42:4d:98:ab:
                    f9:2e:13:61:17:af:ff:7c:8a:7f:a8:f0:b5:54:5b:
                    ba:cf:20:d2:f9:4a:92:f1:15:00:db:5c:b7:16:3d:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0F:23:E3:90:B9:07:A6:A6:57:79:AF:C7:A2:52:FA:3F:FE:30:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/697ce66a-f2f3-301c-ba81-cae9aed46102.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.187.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:b6:e4:ae:36:54:27:b5:77:de:34:21:f4:31:73:0f:a4:
         18:b4:c5:f9:55:35:b8:1f:46:11:a8:8e:37:a3:d9:e5:fd:a6:
         c6:d1:57:92:da:4b:cd:b1:c6:e4:47:8e:b0:0d:d9:d1:8f:16:
         2a:6f:8c:dc:7d:8d:ed:5b:70:b0:43:23:7b:0c:72:29:46:8a:
         47:73:5c:7d:51:48:9b:ec:b6:0b:14:68:b1:a2:41:cd:d7:f5:
         8e:bd:c0:da:b2:72:78:b3:24:2c:24:4d:c4:f3:90:9d:9e:d5:
         2e:46:d8:71:f1:24:79:22:42:3d:c5:10:50:f8:82:69:fc:ff:
         31:f8:05:67:d9:da:8e:01:e4:d0:b3:1b:5b:9c:ee:96:63:29:
         58:7c:96:ac:cd:8b:ed:98:40:83:30:d5:b6:80:11:ba:ff:af:
         e9:bc:93:28:c8:c7:71:8f:4b:a8:0a:38:71:a4:bf:65:0b:22:
         f5:5d:db:e0:55:9c:bb:3b:66:5d:c1:46:62:69:ca:26:42:14:
         1e:ca:dd:cb:1a:f4:1a:a2:2e:01:f2:db:9e:93:18:2b:45:77:
         f2:2c:d2:f8:65:66:70:ad:a9:23:3c:77:61:38:d9:03:73:37:
         c7:22:69:39:f6:65:f0:6d:e4:1d:95:79:5e:7b:3d:e6:dd:20:
         fe:4c:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:15 2025 by rpki-client