Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/97e89dd8-32f5-3611-b2d2-c14bc883c76d.roa
File:                     97e89dd8-32f5-3611-b2d2-c14bc883c76d.roa (raw, json)
Hash identifier:          YkkjkMqib2BPPZkZmswZG7omxYrgueXaxl39wQWcHYU=
Subject key identifier:   07:68:78:8E:80:16:6A:2E:66:A4:B1:62:7F:22:D8:17:07:E2:5F:3A
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F432858414D72B2B826407A12F3F3DE40
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/97e89dd8-32f5-3611-b2d2-c14bc883c76d.roa
Signing time:             Tue 25 Oct 2022 12:07:42 +0000
ROA not before:           Tue 25 Oct 2022 12:07:42 +0000
ROA not after:            Mon 27 Jan 2025 05:00:00 +0000
asID:                     63203
IP address blocks:        68.168.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4d:72:b2:b8:26:40:7a:12:f3:f3:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Oct 25 12:07:42 2022 GMT
            Not After : Jan 27 05:00:00 2025 GMT
        Subject: CN=57ad0b9b-33de-422a-824d-c6f0a2ff96d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:88:71:0f:d5:c8:80:35:ac:b8:d3:34:7e:
                    e9:94:f4:9c:b8:9a:02:0c:c6:b4:25:6c:6e:0c:07:
                    76:85:17:63:75:c0:5b:85:e8:1b:86:70:19:02:b3:
                    17:57:a2:6b:41:bd:43:07:bb:c8:c8:97:22:e0:20:
                    47:ef:ff:c6:e6:fb:53:78:68:6c:0f:b4:e6:71:fd:
                    e5:49:80:9e:8c:c1:fa:79:9e:95:5a:39:86:ae:ac:
                    0f:16:66:a0:ab:c7:65:59:53:3e:5b:0a:5d:a4:0e:
                    64:7b:46:76:32:7f:93:09:77:c3:66:1b:8c:d0:47:
                    54:62:ba:70:47:c2:d8:df:1e:78:64:5f:2e:cf:f1:
                    85:60:e5:79:00:3f:b5:f1:37:7a:56:8b:04:f2:04:
                    64:23:bb:15:cf:bb:24:7f:35:c0:ed:9f:c6:6c:54:
                    9b:b2:0d:38:4a:24:88:4f:40:2b:cf:bb:3d:44:5c:
                    7c:12:59:21:78:14:76:90:8b:49:dc:54:b0:0e:01:
                    09:51:bd:1b:bd:1a:aa:0e:69:6d:54:3f:29:42:a9:
                    e6:db:8a:bb:fc:26:ec:fa:aa:c6:be:cb:4f:a4:9a:
                    26:ba:0b:71:aa:21:72:56:07:bc:59:18:c7:01:02:
                    88:3d:90:6f:d4:ce:f6:85:fa:68:3c:d6:21:82:75:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:68:78:8E:80:16:6A:2E:66:A4:B1:62:7F:22:D8:17:07:E2:5F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/97e89dd8-32f5-3611-b2d2-c14bc883c76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:70:83:fa:78:ff:3c:67:85:12:18:88:a3:ab:0c:28:3b:fd:
         88:a3:12:3a:1b:83:b2:b6:b6:7e:b4:d4:2c:cc:be:25:75:16:
         73:22:2c:1f:0c:34:21:df:91:43:45:dd:1d:16:f3:f4:1c:9e:
         3c:23:a9:99:f8:12:26:6d:bb:5d:9a:ef:b1:e5:32:eb:8a:1c:
         b4:bc:eb:af:df:1e:31:cd:20:94:0e:9a:5e:d5:3f:36:0a:cb:
         9e:b5:90:37:6e:b3:51:a3:d2:c2:93:ff:95:c2:4f:e4:f8:40:
         1a:24:08:50:9f:aa:e8:8b:c1:d0:9c:70:e8:84:6f:1d:29:ef:
         0c:ce:a3:5f:be:8b:e8:58:cb:27:92:83:ff:34:f3:72:d3:f1:
         af:33:46:e9:15:ca:25:81:7a:9d:27:69:14:3e:ac:66:6e:6c:
         63:31:2f:dc:59:58:05:36:f2:63:a4:a5:ac:54:e8:24:c3:e9:
         74:7a:1a:d4:8c:95:43:5a:62:ce:05:c5:17:1b:97:f9:7d:93:
         d8:12:59:f5:a4:d1:b9:fc:5a:ef:98:f7:e6:41:5c:b8:6a:2b:
         41:07:30:db:80:b1:4b:02:4d:44:88:84:46:76:e3:ba:47:ab:
         d1:b9:63:3e:ee:f4:62:93:c3:8e:9f:94:b0:32:99:66:e2:31:
         47:ec:9e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:17 2025 by rpki-client