Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
File:                     c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa (raw, json)
Hash identifier:          WUMCHx6+IyyGMQAzWki9iVh/QIS5tieIbc9+gZvHJaw=
Subject key identifier:   28:9A:F1:5D:D4:14:ED:E6:E6:6B:DD:CE:73:46:ED:16:34:4E:AA:F3
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858488DAB489241618A9CC8884280
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     36103
IP address blocks:        68.70.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:48:92:41:61:8a:9c:c8:88:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=fc9fa51e-8a53-4ce4-8082-55b81823239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:34:14:82:25:53:62:9b:e1:29:e8:e6:21:
                    30:41:34:32:61:30:e1:d7:9a:94:da:85:3c:1a:cf:
                    14:21:2a:47:3b:66:b2:0d:5c:56:25:8e:2e:bc:05:
                    6a:65:ac:38:72:72:ad:3f:1a:87:07:0e:e7:e4:d0:
                    25:a0:d5:79:c5:66:bb:c3:e9:27:a0:54:43:4c:21:
                    0c:a3:d3:12:56:54:aa:48:26:b6:54:5d:36:f9:32:
                    93:bf:52:48:19:68:86:02:f1:ac:9c:93:b0:c3:b4:
                    81:3e:85:7e:13:bd:ff:2e:dd:5c:cb:dd:0d:b2:ec:
                    87:dc:a1:5d:c7:b0:a7:ec:a0:a8:58:a6:34:fa:f1:
                    a6:17:44:10:1c:47:9f:34:8e:7c:5a:34:54:a3:70:
                    b5:27:99:3a:3c:ea:c4:6f:af:94:fd:d3:84:5d:6d:
                    1b:a1:41:51:01:aa:66:d5:53:03:0d:6e:7d:18:a7:
                    3c:32:c2:96:b3:0b:30:c2:3b:79:9f:ea:81:56:95:
                    bb:d9:85:d7:3f:4e:a0:cd:89:fb:be:88:40:5e:a1:
                    9d:2c:45:42:29:86:0f:c7:8e:17:0d:6b:66:7b:b3:
                    d5:01:f3:cc:de:c1:25:72:44:7e:ef:91:5e:11:4f:
                    1d:1a:94:1e:08:fa:1c:63:38:6c:c3:51:15:41:f1:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9A:F1:5D:D4:14:ED:E6:E6:6B:DD:CE:73:46:ED:16:34:4E:AA:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:97:4e:40:8f:45:67:00:86:f2:a6:ab:09:ad:fb:de:cb:
         be:8c:0a:2d:b6:4c:a8:a9:a8:21:bd:b1:e0:d3:81:a8:15:b1:
         f6:98:a4:4b:4d:9f:b7:df:9d:57:88:61:ee:10:01:8b:b0:08:
         49:e8:d4:a9:16:3c:6b:2a:25:bb:90:30:75:31:5a:43:c5:2a:
         ef:2d:5b:e6:82:f8:dd:9a:30:d2:56:41:23:e7:05:10:ca:b1:
         02:f4:35:69:9a:27:3d:9c:e2:85:5c:e7:7c:e7:d5:9d:08:99:
         61:e6:25:08:d7:37:d4:08:26:99:e5:b7:16:f9:e3:a7:12:c5:
         43:fb:a7:29:07:1b:0e:01:e3:58:03:4a:9d:45:da:53:73:87:
         20:e6:ff:72:26:2d:27:89:72:cb:a7:d2:59:97:9a:4c:e3:fb:
         8e:50:ba:b6:f9:30:74:0f:54:80:bb:f7:ac:f9:af:fe:ea:a7:
         73:f0:94:e4:e3:a9:fc:6f:4e:55:82:62:9e:36:47:00:12:b0:
         06:ad:27:c4:08:d4:09:ea:cf:6e:83:c3:73:c9:67:8f:4f:d3:
         f7:c9:71:47:15:d3:14:ce:17:08:0a:78:48:31:2e:3c:4d:84:
         1a:07:0b:a5:d7:a0:87:5c:43:17:10:5a:6f:ac:ce:8b:35:3a:
         03:0d:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:03 2025 by rpki-client