Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd0de56-482d-3c78-86c6-b04a980e335f.roa
File:                     8dd0de56-482d-3c78-86c6-b04a980e335f.roa (raw, json)
Hash identifier:          XLMQtcqLv3BI+OmO2MLNVk+TMDMuxzyVKc82aR8LjlE=
Subject key identifier:   67:04:A9:87:1A:DC:9A:F4:82:9C:37:2E:A4:52:75:13:B3:A5:68:72
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B56C1B671D497288E0A408
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd0de56-482d-3c78-86c6-b04a980e335f.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     855
IP address blocks:        142.68.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:6c:1b:67:1d:49:72:88:e0:a4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=2a706529-164c-48c4-a578-8aca3a4353b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:93:32:d4:1e:9c:75:c7:b2:3e:b4:18:d3:
                    0a:f3:b0:f3:4f:9a:6d:26:28:53:84:21:91:91:87:
                    8c:34:99:cf:ec:a2:a2:d0:0d:84:f9:65:57:f6:82:
                    b5:86:78:ac:6d:7a:15:8f:e1:76:fd:e4:43:29:42:
                    00:f3:1b:11:f4:7c:5d:47:36:76:c5:2a:3b:65:5e:
                    22:ad:6a:3e:26:3b:5d:0a:50:f6:80:1f:f4:86:51:
                    ac:3f:61:97:36:7f:90:9d:d8:0e:42:98:d6:5b:17:
                    fa:2d:37:fc:23:d1:3f:cd:9e:a9:89:62:6e:0b:f0:
                    b9:f9:b3:18:c8:4d:35:eb:9b:70:eb:2b:fb:8f:97:
                    71:3b:58:05:7e:68:15:81:42:1d:bf:7f:eb:c8:40:
                    56:d7:5c:77:d0:15:69:8e:f5:66:60:19:fb:0d:fc:
                    c8:d2:a3:20:71:d9:42:30:fb:1d:34:ad:b3:30:ad:
                    b4:af:7b:aa:2a:e2:b5:19:45:db:e6:c3:02:69:ec:
                    8a:4f:a1:a4:29:30:9f:d5:01:d9:d5:2d:28:ed:66:
                    92:3d:39:b8:2a:47:47:80:42:cb:aa:c5:cf:4b:c2:
                    e7:72:66:04:f9:e2:cb:cf:40:2b:2b:4f:13:9d:c5:
                    de:95:01:24:a8:41:88:2c:dc:51:d2:70:e3:d2:2d:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:A9:87:1A:DC:9A:F4:82:9C:37:2E:A4:52:75:13:B3:A5:68:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dd0de56-482d-3c78-86c6-b04a980e335f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:f4:e7:5d:18:30:b8:c7:5e:8b:34:7c:dd:ce:ea:7b:b1:
         81:84:62:7c:0b:00:60:a1:71:0b:be:f3:44:88:ea:44:cd:e5:
         96:d2:92:42:f4:af:53:ec:ce:eb:61:6a:93:dc:f3:53:4d:7a:
         aa:c8:e7:08:ea:37:cb:44:d4:91:c2:10:6f:18:b1:e4:d2:83:
         a6:60:11:f0:0a:48:05:f2:2c:0e:4c:a9:86:88:49:eb:d2:77:
         3b:74:20:1a:71:00:36:af:f5:e1:10:1f:b3:7c:94:22:56:d8:
         73:69:b4:67:8d:cf:41:30:be:61:92:7a:cb:6d:f7:da:a9:1a:
         04:fc:d2:07:c3:01:8b:89:4a:03:b7:e3:7f:c3:f7:cf:99:4c:
         10:4c:58:17:79:ba:0c:9d:33:b2:c6:7d:27:64:37:29:21:7b:
         d0:c0:86:49:f1:3c:c3:e5:49:51:4d:b1:39:14:0e:c6:30:78:
         b3:49:87:86:9b:7c:c0:de:67:8f:8c:27:61:53:1b:98:5d:7d:
         07:95:55:d9:4b:40:50:be:b3:e5:80:de:81:33:51:8e:0a:d5:
         cb:6f:70:b0:d3:c3:7b:23:e4:95:59:54:8c:13:28:55:16:39:
         d9:f1:bd:90:3f:d0:ff:c8:fb:5d:78:b3:f3:33:32:4b:49:f2:
         01:79:30:2c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtWwbZx1JcojgpAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MmE3MDY1MjktMTY0Yy00OGM0LWE1NzgtOGFjYTNhNDM1M2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KWTMtQenHXHsj60GNMK87DzT5ptJihThCGR
kYeMNJnP7KKi0A2E+WVX9oK1hnisbXoVj+F2/eRDKUIA8xsR9HxdRzZ2xSo7ZV4i
rWo+JjtdClD2gB/0hlGsP2GXNn+QndgOQpjWWxf6LTf8I9E/zZ6piWJuC/C5+bMY
yE0165tw6yv7j5dxO1gFfmgVgUIdv3/ryEBW11x30BVpjvVmYBn7DfzI0qMgcdlC
MPsdNK2zMK20r3uqKuK1GUXb5sMCaeyKT6GkKTCf1QHZ1S0o7WaSPTm4KkdHgELL
qsXPS8LncmYE+eLLz0ArK08TncXelQEkqEGILNxR0nDj0i12LwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGcEqYca3Jr0gpw3LqRSdROzpWhyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGRkMGRlNTYtNDgyZC0z
Yzc4LTg2YzYtYjA0YTk4MGUzMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjkQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAL2b0510YMLjHXos0fN3O6nuxgYRifAsAYKFxC77zRIjqRM3lltKSQvSv
U+zO62Fqk9zzU016qsjnCOo3y0TUkcIQbxix5NKDpmAR8ApIBfIsDkyphohJ69J3
O3QgGnEANq/14RAfs3yUIlbYc2m0Z43PQTC+YZJ6y2332qkaBPzSB8MBi4lKA7fj
f8P3z5lMEExYF3m6DJ0zssZ9J2Q3KSF70MCGSfE8w+VJUU2xORQOxjB4s0mHhpt8
wN5nj4wnYVMbmF19B5VV2UtAUL6z5YDegTNRjgrVy29wsNPDeyPklVlUjBMoVRY5
2fG9kD/Q/8j7XXiz8zMyS0nyAXkwLA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:20 2025 by rpki-client