Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f95d715-e6c3-3ab8-ae69-4c18d71112b7.roa
File:                     6f95d715-e6c3-3ab8-ae69-4c18d71112b7.roa (raw, json)
Hash identifier:          AUPpymUxRddUDnfR6E6qhtolbScbJ8kIUgQZye8hzLA=
Subject key identifier:   66:56:65:41:7E:4C:CC:95:3F:D2:56:59:08:9A:12:35:F6:16:FE:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8F2BC6FFB1ECE6D28A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f95d715-e6c3-3ab8-ae69-4c18d71112b7.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.61.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:f2:bc:6f:fb:1e:ce:6d:28:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=7c2bff2b-8d0f-4416-a7db-af41e157c543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:3b:64:a1:2c:ef:d1:ac:27:2d:58:f0:72:
                    1c:37:4a:51:3f:0f:1e:ec:85:ca:e4:c0:2b:18:7e:
                    6d:d3:40:77:1e:5b:5a:e6:f6:f5:50:fc:e6:06:5b:
                    56:60:85:5e:4f:b9:4c:3c:b1:13:ee:6a:55:a2:7b:
                    5b:d0:87:39:de:d7:74:45:e7:86:6f:58:c7:f4:ce:
                    40:08:ac:38:06:f9:14:17:c0:2b:2d:42:a3:ca:de:
                    23:d1:bf:b1:d1:7c:54:af:32:e3:9d:ab:f4:8f:1e:
                    31:9e:dd:c7:7a:ad:90:ab:53:0f:ec:76:d6:ad:ad:
                    21:77:07:84:ad:ee:87:2d:f3:82:86:6b:d3:c6:48:
                    2d:72:2c:fb:5a:fe:82:ab:21:71:96:e4:8c:9b:fd:
                    6c:4d:35:75:01:0a:3f:96:a4:3f:ac:bb:36:65:6c:
                    ae:ce:86:37:ec:0b:6e:06:57:de:6a:87:7a:c5:d4:
                    a7:42:62:33:96:9b:74:0c:ad:a7:f0:15:92:3a:e3:
                    04:33:42:21:8a:64:7f:8b:46:55:8b:f6:ae:89:c0:
                    12:30:3e:3c:5b:a0:c3:34:e6:e1:ba:f5:65:50:40:
                    1c:ba:3f:59:a5:ba:29:ba:d4:3a:19:6f:6f:f3:20:
                    0b:17:d6:80:3c:b1:ce:b5:ad:6e:2f:73:b3:57:84:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:56:65:41:7E:4C:CC:95:3F:D2:56:59:08:9A:12:35:F6:16:FE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f95d715-e6c3-3ab8-ae69-4c18d71112b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:ab:57:62:b2:09:13:a5:4a:c8:f5:78:b4:ad:50:21:a5:
         37:19:d5:f1:c8:cc:6d:14:87:20:c9:29:84:a4:24:09:6d:75:
         b1:13:fb:fb:5b:0b:ac:e6:80:81:08:ea:6c:4f:5c:d5:90:92:
         d7:a1:6a:ff:a7:0d:c6:4a:7f:07:62:8c:a7:a9:c2:d6:60:c1:
         af:ff:41:7e:b5:da:c7:38:e6:95:c4:9c:b2:e8:6a:2e:16:3a:
         76:70:1d:78:23:d4:25:29:bc:8f:6f:34:1d:39:c8:9c:5d:e7:
         bd:4b:7b:4e:af:13:49:b4:e8:97:62:ba:69:a0:37:f1:e5:ac:
         70:6f:91:dc:15:be:b4:8a:c1:3b:3f:11:d2:cd:8c:34:15:37:
         e6:be:80:c4:e8:04:5b:20:f5:95:f8:89:ce:fa:77:38:f5:56:
         14:d1:f2:25:c9:e0:b1:14:e5:40:03:c5:27:52:bb:fa:cd:6b:
         97:54:24:0d:7c:6a:1d:78:cd:15:a9:0f:fd:69:01:5f:63:ca:
         24:98:e9:e4:ab:fa:8c:36:90:d1:d1:40:94:f1:32:b7:69:f9:
         b4:f8:46:63:49:78:d9:f9:72:40:f9:a2:0c:3e:a4:20:71:6c:
         ef:53:23:f4:0c:fd:18:5f:17:44:86:fa:64:d1:89:41:b4:a5:
         17:59:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:04 2025 by rpki-client