Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa
File:                     a3f07b56-eec9-37b7-ad92-ca847a17047b.roa (raw, json)
Hash identifier:          8IFxnmtDJfydOAp3Og7fK1GAZ8Tf+jaxZEGWu5Ne5Pw=
Subject key identifier:   CD:3E:87:3C:A1:27:5E:EF:2D:1D:CA:D1:B0:02:CC:A9:04:D8:E8:51
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F43285848116FBC71531321D80E6F9580
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     2914
IP address blocks:        68.170.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:bc:71:53:13:21:d8:0e:6f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=a10f2666-0cb8-44e8-a537-6df997e62aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:50:84:d4:c6:6c:7d:b5:ef:47:7e:57:a2:
                    05:cb:7a:24:35:75:2b:bb:9f:71:60:ce:8a:0f:46:
                    45:84:1d:c9:be:2e:f4:96:b3:a3:4c:a4:72:3a:d1:
                    e8:4a:a9:d4:ce:19:bc:1f:41:9a:5d:28:cc:63:d3:
                    a4:38:75:2a:42:ca:d5:1c:a4:36:a3:cd:20:36:02:
                    62:2f:7d:19:f9:0a:b5:28:4b:ac:5e:a4:0d:63:ae:
                    1d:7e:09:95:fa:8b:fb:67:33:08:c5:a7:e8:dc:7c:
                    ac:f3:95:28:67:ef:51:52:a0:b5:21:32:a9:bd:8f:
                    80:f8:ac:ee:76:b5:b8:ea:5e:e3:38:cc:4c:b7:35:
                    62:55:37:89:7f:ca:58:84:1d:4b:7d:fc:1e:6c:34:
                    f0:cd:c9:34:6b:ef:fc:0f:20:37:96:fc:f6:85:a2:
                    f6:03:db:50:dd:36:e7:ce:4b:23:f7:e1:99:70:8a:
                    67:5b:aa:0e:4c:3c:4b:a5:fb:14:93:6d:ee:9f:84:
                    e7:9a:7f:71:18:29:a0:45:3e:e7:22:42:68:1d:2e:
                    d4:52:6a:9e:e5:c4:eb:94:85:f0:a1:f1:df:0a:f4:
                    69:1c:96:81:ee:08:52:49:6a:e4:63:50:a6:f5:8a:
                    63:5d:e4:ec:89:72:73:89:a2:31:f6:5c:1c:7c:b1:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:87:3C:A1:27:5E:EF:2D:1D:CA:D1:B0:02:CC:A9:04:D8:E8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/a3f07b56-eec9-37b7-ad92-ca847a17047b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:a0:c8:0a:cd:c1:7e:a3:69:87:58:a8:b3:b4:b1:92:27:
         18:e7:91:84:b4:a8:c3:dc:63:94:3f:bd:2a:85:14:2e:b0:c5:
         c0:4f:c6:88:6f:00:dd:a8:4d:3e:96:5d:7e:78:6d:7f:26:47:
         53:42:de:a1:66:41:6f:00:5b:a4:8b:08:a8:d4:09:b6:9f:6b:
         ef:d7:f7:6f:56:a8:35:ee:54:cd:d6:10:b9:26:51:26:d9:69:
         49:fb:63:cd:71:03:75:6a:ec:52:c0:06:ff:a1:47:0e:e1:c4:
         5b:1e:f8:49:61:7e:00:93:31:19:f8:af:66:f5:46:8d:c9:6a:
         7e:fd:9d:7c:e9:9d:85:62:fc:99:4a:0c:3e:a1:86:91:6e:6c:
         2f:ff:00:7e:6c:16:3a:3f:c9:2c:b2:bf:ee:29:a2:19:c5:be:
         02:08:dd:fa:a0:d7:5b:da:51:1e:a0:d0:3a:6f:71:4b:1f:00:
         7d:b1:fe:f0:7e:51:31:ed:5c:29:fc:11:40:14:d4:4d:cf:4d:
         7b:cc:a0:6f:bc:b1:e0:32:04:49:33:cd:95:4f:54:1b:dd:31:
         f8:36:ec:0f:fc:d3:1a:6e:c4:d6:bb:3d:31:26:07:8a:6e:db:
         ec:11:91:de:43:9e:4a:1d:34:c3:a5:1c:3e:7b:48:46:49:9a:
         25:b1:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:57 2025 by rpki-client