Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/addd5439-207e-3b9c-9b31-b88c1f388cfe.roa
File:                     addd5439-207e-3b9c-9b31-b88c1f388cfe.roa (raw, json)
Hash identifier:          A26617ABQTcNwd5/byVt1/G6uaivYXpvMnnLzmjph40=
Subject key identifier:   74:E2:C7:20:A5:05:A6:34:B1:C4:F7:D6:6F:4F:1C:43:21:36:84:E8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D205D6E6D14BEF152D2C60
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/addd5439-207e-3b9c-9b31-b88c1f388cfe.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.119.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d2:05:d6:e6:d1:4b:ef:15:2d:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b7ef672c-c545-4952-aab1-f0141701fecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:35:0d:f6:7e:86:1c:27:cf:d9:71:19:cd:
                    8d:a5:16:59:59:4b:8e:85:cc:bf:66:d0:52:32:c8:
                    00:17:11:e9:44:b2:14:e1:fa:0c:39:9c:47:66:b3:
                    3c:0c:f5:34:19:2e:0e:b1:c9:d7:3d:b1:33:a0:4a:
                    8e:d6:46:3f:fd:ce:b2:cd:0b:a1:76:c7:45:d0:3f:
                    4c:fa:be:c6:7b:74:62:16:67:94:0a:2b:68:c5:d9:
                    23:04:89:04:d3:9e:45:46:23:ce:f8:80:d8:8c:94:
                    98:5d:58:f9:bb:4d:5e:7b:a5:3f:21:d9:dc:39:46:
                    ff:88:32:cd:df:0f:4d:7c:98:93:6f:b7:96:c4:85:
                    4f:61:54:f8:9b:16:b3:35:d6:de:f5:49:41:ea:cd:
                    95:be:cd:12:a7:8a:fe:fc:cf:ca:03:89:36:b3:f7:
                    3e:3c:c0:72:af:30:d0:89:d6:aa:23:02:8a:37:5a:
                    53:54:3b:07:ab:7a:de:fe:d8:2e:08:29:6a:aa:f9:
                    1f:c0:d4:f6:36:cd:05:16:b2:99:a1:66:78:36:0f:
                    c2:25:42:6e:33:bb:af:f7:9c:66:41:e6:37:8c:79:
                    4a:8b:2f:41:7f:59:0a:5b:9a:af:ab:b6:12:70:ba:
                    4c:c9:d5:5b:97:83:db:4b:26:1d:0f:b7:19:63:74:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:C7:20:A5:05:A6:34:B1:C4:F7:D6:6F:4F:1C:43:21:36:84:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/addd5439-207e-3b9c-9b31-b88c1f388cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.119.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cf:af:78:fe:cd:bf:aa:90:88:85:bc:36:5d:c4:81:0c:c5:
         22:f5:0a:8f:b8:de:c7:a5:fb:cb:3d:5e:4e:3d:0b:04:2f:54:
         7a:1a:e7:3d:01:7b:e6:31:e1:54:f2:18:b0:3a:59:d5:35:1d:
         c1:c6:77:1f:39:61:67:22:91:99:db:be:ae:39:be:99:34:ea:
         00:1e:69:60:88:da:4e:43:b5:0a:34:dc:f5:63:58:92:60:a9:
         b3:48:63:44:96:ba:10:1c:55:e5:b5:47:94:d8:06:25:48:76:
         07:0f:9f:1e:02:c4:d7:be:37:f2:dd:7c:b7:ed:f3:dc:53:b6:
         64:2d:c6:c2:e6:d5:42:b1:87:3a:54:d0:ae:35:db:5e:60:05:
         04:cf:2a:92:46:8f:63:8c:1d:52:b2:19:6f:31:96:ff:a2:e4:
         72:1e:bf:10:b6:4f:2b:94:bd:a1:e9:f7:35:67:6e:2d:ff:e9:
         40:93:54:e7:56:43:3c:1b:cd:61:bd:5b:47:29:0d:62:8f:7e:
         d3:86:59:e5:3f:93:9e:ba:99:0c:47:a1:fe:8d:cb:06:74:71:
         f7:00:4e:9b:59:97:a6:28:b1:de:a7:28:be:68:ff:d7:ef:c8:
         03:ef:8d:00:e0:ae:c5:52:eb:ee:ec:57:58:18:82:12:c7:a4:
         1f:af:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:24 2025 by rpki-client