Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cb6f9115-77ba-3bf4-8f77-7a27d9baa291.roa
File:                     cb6f9115-77ba-3bf4-8f77-7a27d9baa291.roa (raw, json)
Hash identifier:          0VLD0TK4L5RndFua+uIhCo6GQ4kxy+6/AmIZQ0VJ2jw=
Subject key identifier:   EB:5A:4F:97:87:C3:37:46:B5:E9:3A:C6:D9:8F:13:60:25:1C:E9:10
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F432858492E13BB21078FDA4C9F9CD600
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cb6f9115-77ba-3bf4-8f77-7a27d9baa291.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     38621
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bb:21:07:8f:da:4c:9f:9c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=f0b15323-2e78-4389-bf5f-61ef54582585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:24:57:15:28:7a:02:ff:83:24:60:2d:73:
                    c6:18:51:48:4b:95:53:fe:75:a0:1f:46:1c:bf:f0:
                    1a:0f:f9:80:4c:04:39:d8:0e:6e:42:4c:69:ee:55:
                    bd:44:f6:97:65:7f:98:d7:b4:1d:c8:6e:78:85:4a:
                    c4:bf:28:a6:f0:4f:9e:15:fa:2f:04:58:3a:bd:b9:
                    12:dd:9a:be:27:ac:22:7d:7f:92:f1:bc:57:3c:ae:
                    06:83:7b:13:87:a6:fb:d5:d3:9e:be:94:0e:62:81:
                    92:f1:ba:63:0c:d6:1d:53:89:cc:0c:92:99:e5:64:
                    20:14:df:9e:3f:25:4d:ea:85:08:63:ee:54:07:cb:
                    10:5f:83:59:30:cc:33:69:0c:6f:8e:7c:3e:16:7c:
                    a8:d2:df:a3:2c:ee:fc:c7:7e:cb:7a:e6:fe:6f:3b:
                    34:5d:0d:a2:2b:6d:0d:79:f6:5a:5a:a9:a2:84:b2:
                    81:91:ad:08:c9:56:b4:e4:06:94:e0:69:8a:48:26:
                    07:f9:8b:b4:9e:b5:ea:cd:dd:7e:d0:f4:89:eb:07:
                    2a:2a:79:e9:f8:b2:e6:a6:83:cb:54:48:99:17:96:
                    ad:7e:47:98:a0:a6:8d:82:24:e0:36:c2:d3:b3:59:
                    23:b1:a1:1b:7b:ec:df:3c:fd:e6:d6:d9:1c:76:88:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5A:4F:97:87:C3:37:46:B5:E9:3A:C6:D9:8F:13:60:25:1C:E9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cb6f9115-77ba-3bf4-8f77-7a27d9baa291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:79:a0:66:9b:82:fc:c0:a3:a5:c5:37:9e:53:cc:f1:d0:dd:
         ee:49:ff:46:13:0b:86:48:c4:b6:0f:27:04:ff:7a:ec:dd:cf:
         8a:0b:37:c8:b8:30:d0:ee:ab:a7:c1:48:19:a6:54:fa:72:96:
         40:b4:97:80:38:29:a8:09:ea:7f:3d:8e:48:0a:2e:43:e0:bf:
         d2:6a:2e:fc:67:49:57:63:75:fa:8d:c6:73:ab:b0:dc:b5:0e:
         54:f0:82:f3:f3:2b:bd:19:c0:96:5b:a0:44:bb:34:1c:19:4e:
         d0:8e:6a:4e:df:5f:6f:34:96:f0:26:b9:69:14:67:5b:6b:3c:
         ef:f2:d9:30:ac:24:d3:ff:71:ef:5a:33:3d:7b:2a:d8:52:5e:
         b1:55:e3:11:56:39:78:bc:27:20:3c:83:62:92:94:4f:f5:66:
         50:98:bb:4b:68:3c:a7:61:5f:b3:ca:e2:00:aa:5c:32:09:3a:
         18:4e:d8:dc:64:6e:64:32:1d:11:86:e7:c6:df:a2:9d:43:c5:
         42:7b:f8:21:30:cc:84:cf:b9:fb:5e:cb:e2:23:19:21:a3:35:
         94:cd:9a:a2:9d:7a:8d:a4:31:23:d0:73:d1:a9:db:da:80:18:
         de:5c:b4:6b:9c:33:31:ec:98:56:34:43:03:68:30:00:d3:f5:
         d5:50:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----