Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c1135c-2c8b-3f20-a9d6-c5af57bb3418.roa
File:                     56c1135c-2c8b-3f20-a9d6-c5af57bb3418.roa (raw, json)
Hash identifier:          pFYaesLjdHxvU28xwdo0/M5a413b7hZffgbQ2qXFpdg=
Subject key identifier:   08:FD:C7:10:5A:9C:AC:C7:00:B5:B4:79:10:A0:08:93:51:E8:F4:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6B835DF8731C3E83E19300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c1135c-2c8b-3f20-a9d6-c5af57bb3418.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        68.84.80.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:83:5d:f8:73:1c:3e:83:e1:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=e3a84b31-f390-48e6-b16f-83f1b84bd3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:52:d3:ff:1a:b7:a0:1e:f1:dc:63:7c:3e:
                    5d:1f:ca:87:c4:6c:0f:36:59:4b:63:ed:6c:20:76:
                    a5:22:1d:e6:52:79:80:74:0a:f1:b6:e6:82:4f:16:
                    fd:c7:17:24:62:76:8b:be:c4:f5:09:e7:8e:5c:59:
                    49:2c:0e:43:28:51:b9:1e:9f:26:1a:3b:1b:ca:44:
                    ce:25:84:af:40:00:76:0f:9a:0f:6c:18:43:9d:79:
                    5e:2f:cb:2b:71:74:08:85:22:ac:0c:02:47:c4:1d:
                    a2:de:33:b7:9e:b0:9f:c8:20:be:67:a3:f0:77:af:
                    1f:87:3b:cd:fa:97:91:fc:47:f7:c2:6b:8f:95:45:
                    d5:92:63:98:05:ef:d8:35:16:fe:bc:bb:d0:77:5d:
                    d9:56:3c:87:55:9d:f0:ac:c1:9d:ce:9e:a8:3d:35:
                    bd:73:39:4e:94:3c:74:0a:72:b4:96:94:a2:f4:56:
                    a9:71:50:6d:35:48:3a:ef:16:9d:0b:ba:37:96:54:
                    56:f9:90:34:42:b4:c4:b4:d6:8f:a4:dc:bf:38:5a:
                    6d:3d:09:60:6a:f7:82:ae:a8:9f:73:07:70:d8:ad:
                    2e:a4:22:5e:89:e2:24:ea:a5:19:57:bb:8c:dd:b7:
                    84:1f:7e:c4:88:8c:52:14:a5:29:db:10:c8:3f:73:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:C7:10:5A:9C:AC:C7:00:B5:B4:79:10:A0:08:93:51:E8:F4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56c1135c-2c8b-3f20-a9d6-c5af57bb3418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.84.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:c8:38:15:9d:60:20:42:a3:ec:5c:8d:f3:d3:1e:72:dd:
         f4:4a:b3:44:96:7d:aa:f9:bf:b0:fd:ce:f2:54:ab:97:24:ae:
         9a:b8:ac:6a:c5:3f:af:a3:43:8d:e2:84:d6:aa:d2:5c:cd:5a:
         6c:d2:89:0c:e3:ba:dc:6c:7d:ad:7c:51:4d:bb:4e:3a:fa:b8:
         cf:32:36:97:f9:4e:47:4f:4a:cb:d8:8e:73:5d:74:53:05:27:
         44:c5:cf:d7:ff:73:e8:2f:77:cd:4c:4c:a5:e9:e7:11:2a:41:
         ce:79:b2:fb:de:e9:02:14:0e:dd:d7:6b:16:f0:6e:c7:ed:90:
         5e:a7:9a:a3:e1:9d:15:2f:38:20:21:b8:0a:99:a5:61:fe:0e:
         f3:0c:93:0d:4f:9d:92:04:a5:66:2b:1d:67:d2:c5:d6:57:be:
         cd:74:3a:16:47:15:52:5f:b5:32:55:2c:cd:f5:b6:47:4f:01:
         b5:74:f4:d4:a5:ca:bb:d2:74:9f:a6:43:d0:3b:d8:04:9f:e3:
         11:bb:99:46:70:b1:a9:cd:87:42:11:31:32:78:69:f6:47:e0:
         f2:15:ec:ad:88:15:09:45:f9:4f:9e:85:e8:45:05:ce:2d:cc:
         81:09:d1:ef:09:19:2b:63:44:16:5a:de:73:15:fe:77:85:1b:
         81:53:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:37 2025 by rpki-client