Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
File:                     7a374813-872b-39b6-8d07-7b6319971a35.roa (raw, json)
Hash identifier:          dUtRcoMq2eVk9RDrAgTA0bnRvbus+tXGhkO9JvVchLY=
Subject key identifier:   10:91:F4:D0:E3:42:D9:B2:88:C7:67:07:60:9F:65:25:93:AF:D3:48
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F43285849552952D19B6867287B953380
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     396239
IP address blocks:        68.69.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:52:d1:9b:68:67:28:7b:95:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=a9a808ab-3eb2-4080-ad6f-56e9a3048644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:d1:d4:63:38:f8:0d:46:8a:96:f5:1f:19:
                    1d:76:f1:25:1d:fb:87:13:c2:fa:1c:3e:ee:1c:53:
                    cd:a3:57:fb:3c:d2:01:e5:9e:29:85:1e:f7:04:fa:
                    e7:b9:71:3a:10:55:e1:f6:75:51:fd:63:a4:79:a6:
                    63:48:29:a7:a7:4f:40:22:32:20:62:39:94:eb:5d:
                    e6:ff:85:c4:ce:a9:39:7f:e3:3c:f8:8a:2a:42:ef:
                    51:4f:e7:cd:e0:30:e1:c9:6a:b5:90:16:73:e6:02:
                    16:70:4c:cb:cd:ab:52:1c:03:36:2c:96:34:ec:70:
                    5d:15:d5:e0:46:20:60:0b:f5:03:4c:6a:4f:13:f5:
                    60:dc:6b:87:a6:25:30:05:6e:ec:52:ab:70:64:36:
                    02:01:ea:9a:2e:2b:5e:eb:33:78:d7:87:61:5e:86:
                    c0:23:d7:f0:31:31:6f:f4:9c:fa:ae:77:03:e7:32:
                    ce:66:f4:cf:02:73:f4:45:b8:b2:fa:3c:19:c9:67:
                    88:b1:10:9e:22:6c:4e:b1:d5:3e:64:f9:35:bc:10:
                    6a:a0:a3:75:cc:0f:33:77:27:5d:15:97:c6:13:44:
                    c5:dd:5a:5e:0d:14:bb:d9:1f:23:b4:f0:49:0c:cb:
                    68:4f:09:6e:e1:90:6b:04:56:47:c5:53:fc:3f:a2:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:91:F4:D0:E3:42:D9:B2:88:C7:67:07:60:9F:65:25:93:AF:D3:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:04:ed:81:ce:fa:07:7b:0c:85:fc:01:82:5c:d8:5a:ab:
         10:ee:0e:fe:5f:97:38:4d:9b:4d:ac:cc:b6:2a:32:1c:40:3a:
         b7:92:22:05:86:8e:d0:1e:02:7f:05:0f:d8:86:9c:2f:f2:68:
         b9:02:74:e6:5a:ec:57:5e:db:5e:c7:17:db:20:e1:ea:ea:05:
         45:02:c4:5d:25:4e:2e:15:98:68:3e:25:9d:43:82:22:28:4c:
         4b:f7:98:0e:6b:21:32:ef:3a:67:4f:3a:aa:35:a6:6f:01:07:
         38:51:f3:70:54:bc:61:0e:f9:33:69:e7:fc:47:4d:38:b5:c5:
         b0:17:61:b1:13:94:a7:38:e7:7a:d4:e5:91:85:40:87:47:8d:
         c7:e0:1a:d0:f9:29:aa:a2:35:d3:1c:4c:10:f9:56:0b:aa:a8:
         f9:75:1b:b1:bf:23:db:f4:1f:4e:81:ca:a4:4d:15:6e:d0:82:
         fa:43:a4:d4:66:44:93:77:9d:fc:ed:d2:c8:6d:fa:06:e2:86:
         d3:3f:1f:29:1d:66:4f:ef:90:28:45:57:24:32:71:bb:4f:ac:
         ef:41:0b:1d:8a:43:25:30:57:89:7c:b9:9e:75:ee:18:2e:0d:
         8d:da:fb:89:86:13:02:78:88:32:64:60:f6:50:ea:6f:e6:56:
         73:6f:b4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:26 2025 by rpki-client