Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc24df7a-1254-3be0-b20f-89439c00c6d0.roa
File:                     fc24df7a-1254-3be0-b20f-89439c00c6d0.roa (raw, json)
Hash identifier:          EIgfVJdANo6R5AvSmWqw576K7vI08uZLLb0i73AVTYw=
Subject key identifier:   EB:99:E6:40:28:F3:31:C1:06:31:0C:D8:E4:C1:04:FE:C7:C8:F7:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F77D1A8047F83F3C8C1000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc24df7a-1254-3be0-b20f-89439c00c6d0.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        68.32.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:7d:1a:80:47:f8:3f:3c:8c:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=03202f22-6567-48db-b823-0b520e376b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:f0:fb:c1:26:d5:26:be:4d:b5:0d:74:b9:
                    3a:26:3c:17:02:b5:86:87:0e:be:a6:73:a1:26:a5:
                    a8:4a:6e:87:d7:67:10:b5:80:c6:96:10:5d:af:f0:
                    ff:75:40:44:c4:4a:1c:ec:58:24:58:14:29:b6:dc:
                    82:41:53:fa:e5:6a:32:f4:9b:6e:31:42:36:67:46:
                    bd:7a:d2:43:9c:ff:67:4b:37:b9:eb:a1:0b:9f:2e:
                    d4:dd:05:f8:41:57:6d:36:f3:4f:c7:8f:d1:01:75:
                    cc:4d:03:5d:43:e6:ef:12:75:79:0e:6a:83:0b:e2:
                    f6:36:77:cb:f7:64:1f:3f:54:cf:5d:4b:85:75:5a:
                    bc:20:00:3b:5f:62:0b:12:65:cb:12:1f:96:83:13:
                    08:bf:29:1a:92:1d:b8:9f:b2:2d:cf:67:de:91:97:
                    7d:d3:ca:de:48:86:4f:c6:48:49:3e:a0:ec:0f:3d:
                    0d:cd:86:3c:22:07:4d:16:30:3a:ea:f9:ad:23:39:
                    81:aa:58:c6:46:44:6c:4c:86:8d:5a:97:97:f1:74:
                    7c:10:ab:88:41:42:4f:b9:a3:a7:f9:f1:38:4c:d5:
                    45:2d:2e:9b:af:f7:85:b8:6e:26:a4:53:ea:3c:43:
                    cb:a6:20:d6:d3:66:65:49:6b:4b:9c:0d:c4:7c:f4:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:E6:40:28:F3:31:C1:06:31:0C:D8:E4:C1:04:FE:C7:C8:F7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc24df7a-1254-3be0-b20f-89439c00c6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:c7:50:b5:a7:77:c2:27:52:6c:f0:35:75:62:5d:e1:b0:ab:
         aa:69:f0:54:40:ab:2a:8e:bd:46:58:db:b9:5f:d4:8c:b0:ed:
         84:34:0f:68:20:06:99:19:db:84:d2:ed:2b:e5:61:21:fe:cd:
         04:4b:5f:09:2e:20:56:96:8c:52:d5:2f:94:2f:89:57:d5:e0:
         78:73:e2:16:14:2b:93:11:8b:ef:53:ff:cb:99:81:6e:5a:c6:
         66:9e:88:0d:b8:42:78:43:e3:5c:bc:10:d9:76:96:22:b4:3e:
         d3:d4:c8:14:b7:93:8f:b0:fe:bf:1e:87:49:b6:d5:35:5c:93:
         70:95:1f:0a:56:c3:83:8a:95:04:7d:43:d6:74:08:0b:a7:95:
         dd:31:76:c9:46:92:11:f7:11:c6:33:92:1a:05:d3:38:fa:41:
         c5:3b:27:5a:9b:95:62:e5:a9:37:da:c3:e5:10:9d:67:90:91:
         5e:38:7d:0f:b6:44:3e:1d:4b:2f:6c:29:d0:0a:fa:f3:1a:5b:
         41:24:cb:b0:fe:82:d1:b2:29:03:e8:8f:89:74:7b:62:79:a3:
         2e:1a:2c:5a:b8:91:3e:96:48:8f:d7:b2:82:e0:4e:a5:fa:3a:
         5c:98:09:ea:a6:d0:be:9b:09:2f:57:cc:44:9b:80:2d:20:7d:
         75:94:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:16 2025 by rpki-client