Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b91f98d-abb5-375a-97db-d262b6c53f59.roa
File:                     8b91f98d-abb5-375a-97db-d262b6c53f59.roa (raw, json)
Hash identifier:          v4G4Bm76p8GDUCHzRcV0t7q5FQGmCyf4H+rZqpzLiCc=
Subject key identifier:   D5:DF:00:59:51:D4:B9:04:EA:D3:86:77:A9:A4:61:2C:3C:27:E1:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8D9B6624BED26DAF3DAB8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b91f98d-abb5-375a-97db-d262b6c53f59.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.34.20.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:d9:b6:62:4b:ed:26:da:f3:da:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=449188b9-4c68-46b8-8aa2-7aaed4fb6af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:c5:dc:76:6d:b9:e5:8b:96:66:5c:be:57:
                    1a:da:d1:89:0c:b7:4c:69:58:7f:8d:42:3d:e4:ae:
                    c5:c0:57:b9:b1:92:72:8d:33:8b:69:a2:d2:6e:c5:
                    7b:02:a4:4f:cf:39:e5:ff:a0:87:b0:e6:ab:4a:c0:
                    a7:73:a8:cd:35:70:61:5c:9a:8b:89:86:73:09:60:
                    68:07:a4:e7:b6:b4:84:ca:10:21:3c:a0:71:9a:63:
                    f8:78:8d:27:67:56:4a:28:c0:30:54:28:ef:28:54:
                    5a:9c:dd:62:05:ca:44:df:9f:3a:fd:ee:22:89:1f:
                    69:15:9c:aa:f2:85:a6:d1:fb:11:ea:13:f8:1d:d2:
                    19:2c:c8:9d:93:fc:1d:fb:13:00:00:e5:e0:be:86:
                    bf:e4:23:00:97:a7:aa:6a:5a:96:47:2a:a2:be:cb:
                    f9:7e:38:73:80:c5:a6:34:f4:5b:52:c8:64:ec:5f:
                    eb:cf:0a:83:db:f7:c5:71:b0:54:d1:2c:00:89:94:
                    94:df:76:e0:f5:9d:79:7c:f3:5f:0c:f8:8c:95:10:
                    bf:24:e0:12:ae:d8:2f:3b:ce:2e:bf:43:45:19:a9:
                    98:e6:15:6b:ae:b7:f8:a9:54:66:c4:f9:b9:86:88:
                    4d:9d:18:03:47:0b:a7:33:ad:f8:de:44:81:53:da:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:00:59:51:D4:B9:04:EA:D3:86:77:A9:A4:61:2C:3C:27:E1:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b91f98d-abb5-375a-97db-d262b6c53f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f1:f4:84:2c:81:ee:56:99:95:b4:70:00:08:62:72:1e:37:
         01:9f:6f:02:d2:95:6b:53:3d:e5:2f:69:e1:9a:fe:f5:26:ad:
         7c:c2:d7:ad:26:03:79:66:27:97:a7:2c:2e:86:01:74:c7:8b:
         79:b3:ce:7e:4c:cf:f9:87:09:de:b1:88:ee:39:21:c5:3d:67:
         ec:dd:22:a6:38:10:4f:18:a3:7e:6f:3d:3d:2d:e8:df:ca:cf:
         b5:73:a3:01:e7:49:02:f7:c3:1f:61:e9:62:2e:f6:29:64:d5:
         68:05:ae:80:2f:bd:df:ed:a7:e7:ff:69:bb:5e:0b:5e:6b:e1:
         2a:18:fb:1c:2d:6d:fd:b6:3a:db:96:fe:e2:86:80:7c:5f:f0:
         e9:36:f4:26:3b:d4:a8:c1:2d:91:1b:bc:c6:6c:3c:49:98:c2:
         07:67:84:d8:5c:e4:1a:1d:c9:98:1a:89:ba:df:0d:03:ca:65:
         16:10:a1:a9:cb:59:bc:3b:e5:19:bb:0a:8c:5a:23:10:bf:4d:
         76:df:94:3c:a0:06:11:b4:02:f6:c0:05:ad:82:c9:5d:aa:1e:
         72:5e:90:ff:e9:07:52:ea:a1:1d:3b:ef:7f:4f:c6:92:72:f3:
         98:2e:8a:79:29:eb:f5:15:cd:4f:4f:e7:c8:48:6a:1a:c2:b8:
         96:59:5d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----