Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa
File:                     8892a56b-b42f-3e9e-9415-db3e66493158.roa (raw, json)
Hash identifier:          3IMKnpQJQKZFy7MW8mHsn56+tMVpRKFkEQrelzqkXJ8=
Subject key identifier:   65:00:9A:4D:9C:E8:9E:F7:2E:2F:EE:14:87:34:86:1C:9D:BC:1E:16
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B7CCE6891A7DC23F9E259740
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa
Signing time:             Thu 30 Jan 2025 16:12:40 +0000
ROA not before:           Thu 30 Jan 2025 16:12:40 +0000
ROA not after:            Wed 30 Apr 2025 15:12:40 +0000
asID:                     54004
IP address blocks:        68.182.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:cc:e6:89:1a:7d:c2:3f:9e:25:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 16:12:40 2025 GMT
            Not After : Apr 30 15:12:40 2025 GMT
        Subject: CN=0d0eaf49-f025-48b6-b06c-13377978382a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:9a:b4:68:29:d9:5d:33:92:ca:4e:a1:4a:
                    a4:04:ce:6c:9a:e0:12:72:7f:80:1b:95:06:d0:67:
                    51:2e:05:b3:1e:4d:5d:84:e6:e2:ba:06:c5:a7:d1:
                    ca:2e:f7:fb:c8:d3:9c:36:a3:b9:dd:67:eb:08:d7:
                    6d:ad:ab:63:c1:26:e9:c1:ec:73:41:9a:e0:5f:55:
                    88:b5:bf:df:cf:21:9a:67:bb:44:f7:40:50:1c:49:
                    f4:d5:39:49:25:fc:94:85:da:34:9f:05:d2:55:a9:
                    0b:b0:09:38:19:05:5c:5d:39:1f:8f:39:e7:4d:ee:
                    6a:a3:56:51:9d:c6:d7:e6:28:74:43:e4:7f:28:43:
                    42:bd:73:d7:ba:57:6e:a9:85:4e:00:01:c6:28:ce:
                    ff:16:50:58:ca:d6:31:0b:67:d1:18:c3:58:2c:b6:
                    84:7b:fa:21:28:40:42:c1:9d:8a:9d:a5:69:1a:eb:
                    7c:8f:77:32:3c:17:db:c9:89:8d:84:e7:a9:3f:81:
                    e8:80:ce:b3:57:45:de:42:b8:d9:4e:96:d6:f0:86:
                    72:a5:82:20:8e:95:00:7c:3c:58:3d:85:74:7f:c5:
                    32:ee:50:be:84:d1:5e:bd:4c:ad:4f:e8:9b:da:cc:
                    5e:d0:f6:f9:c4:b9:c2:b5:c1:9a:e1:d9:e4:9a:15:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:9A:4D:9C:E8:9E:F7:2E:2F:EE:14:87:34:86:1C:9D:BC:1E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8892a56b-b42f-3e9e-9415-db3e66493158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:76:8e:2b:d6:ad:30:f9:31:bf:75:50:05:00:2e:bc:79:
         50:7d:24:6f:2a:da:7a:1c:07:f5:b4:96:a4:56:f1:12:0a:5b:
         ae:58:8b:57:19:ef:93:69:35:78:66:b8:f5:ce:7b:82:3f:85:
         f4:28:7e:15:64:e2:a3:b3:e6:e9:7f:ac:3b:4b:d7:9c:95:7f:
         cc:67:8e:75:f9:a7:0a:17:66:d4:f8:77:9d:f5:4f:ea:38:5d:
         07:30:6a:67:11:51:d6:e1:00:0b:03:8d:bf:26:e4:c3:d6:37:
         35:10:a9:3d:45:c0:31:8c:d9:65:e6:0c:dc:70:70:b0:30:e5:
         46:9b:06:f3:ee:45:a5:5b:20:af:68:40:05:03:af:f5:14:d5:
         55:c2:a0:4b:b8:b8:f9:d4:64:60:11:7b:b9:24:8e:74:1e:98:
         bd:4b:c3:3d:7a:50:7f:31:fb:33:76:55:87:a6:d9:52:4c:ac:
         e7:57:f6:2b:e7:44:48:2b:5b:1a:fb:2a:47:1b:10:ef:aa:ab:
         6a:28:b3:62:67:f2:f2:82:dc:58:71:15:8c:70:75:dc:62:ad:
         04:67:48:f0:d1:f2:b1:03:a2:86:38:71:18:5b:bc:f6:b4:06:
         e0:f6:d6:40:58:a6:c9:ba:93:8a:00:00:50:94:67:84:91:50:
         4a:62:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:12 2025 by rpki-client