Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95dd321b-641a-3e0d-814e-9b302975ccab.roa
File:                     95dd321b-641a-3e0d-814e-9b302975ccab.roa (raw, json)
Hash identifier:          V0BShCvN7U6Vbo9el72gpGzCoclBXoFLgqJyTZuhx08=
Subject key identifier:   30:CC:F6:BC:0E:64:F0:67:8C:95:5A:2E:37:BD:5B:27:2A:7B:03:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB435438369AB659246E2E
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95dd321b-641a-3e0d-814e-9b302975ccab.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     701
IP address blocks:        68.161.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:43:54:38:36:9a:b6:59:24:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=daa1cd64-3088-4c26-97e0-d0f6c7048735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:26:c6:7d:28:96:66:28:6f:d1:59:6b:72:
                    17:49:e8:a1:cd:2b:ef:a6:ea:7b:08:fe:c9:6c:f5:
                    7c:06:d1:a4:da:51:50:29:bc:62:ab:4c:87:b3:43:
                    17:83:70:4a:89:6a:72:81:2a:34:33:ec:ad:04:e3:
                    28:fe:bb:e2:a0:0c:af:47:8f:48:d8:31:4e:54:09:
                    89:4f:5d:31:b6:9b:4f:dc:ef:84:94:21:16:fb:49:
                    60:0c:7a:28:03:12:fe:71:4d:c2:60:96:f3:33:bd:
                    6a:b4:18:5a:8c:a5:55:82:31:6e:3e:f0:62:36:f4:
                    21:58:57:62:1b:48:fc:8f:50:68:bf:70:df:51:86:
                    d1:a8:24:86:dd:49:3c:51:c6:61:55:20:a7:3c:77:
                    00:df:3e:be:d2:41:6c:97:cd:ea:08:84:20:12:d1:
                    85:67:ac:c7:32:f2:86:96:bd:20:d7:ae:0a:3c:54:
                    e6:77:0d:57:43:d7:0b:c6:82:e5:ac:3b:05:1a:07:
                    e3:9b:a1:74:a7:29:59:59:ec:0d:60:65:ce:a8:09:
                    af:07:f8:b5:20:e9:5e:df:58:ca:23:de:b0:0a:8a:
                    3f:6f:d2:37:3b:32:c5:68:49:93:1f:c8:56:5b:71:
                    33:69:e1:ce:04:e3:5c:61:9f:72:f0:f5:88:c0:aa:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:F6:BC:0E:64:F0:67:8C:95:5A:2E:37:BD:5B:27:2A:7B:03:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95dd321b-641a-3e0d-814e-9b302975ccab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.161.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:06:04:f2:3f:fb:4f:5e:2b:e6:4e:c7:ed:7e:58:20:d5:
         01:fd:ee:e4:e2:97:9c:88:75:b0:27:ee:74:54:51:41:91:3d:
         6e:77:b5:b2:ff:50:85:c2:81:e0:c0:2e:3f:63:cc:b3:71:bf:
         f0:50:bd:02:c3:37:b8:c9:e5:1e:14:e4:11:6f:18:97:de:1d:
         5d:46:fa:02:74:cd:6b:c3:80:ac:cd:9d:40:06:f9:0d:31:39:
         74:c9:10:a2:18:58:56:dc:ae:1a:2f:5d:e8:82:44:1b:32:99:
         c5:6e:c1:d3:8a:61:00:a4:67:3f:26:93:73:da:4c:a8:71:10:
         98:a8:93:c6:e0:10:fb:15:ca:56:29:51:11:c0:b0:47:00:27:
         2c:98:15:6f:c2:57:1e:61:98:9f:42:74:36:03:53:b6:c7:e9:
         2e:c0:34:2c:35:d3:81:5a:70:a8:2a:2a:81:13:bc:a5:2d:40:
         c6:02:38:9c:3e:84:68:9e:51:fc:63:c6:72:93:44:ff:27:d4:
         d5:c9:18:95:8b:d3:ac:30:6c:ad:26:15:d1:8a:57:18:a2:30:
         e1:e7:85:81:8a:5e:f2:cf:37:1a:c3:9b:d2:60:1c:ed:ed:ea:
         67:ef:84:c4:f3:94:68:ca:f3:95:be:8f:a7:eb:3f:6f:f6:9f:
         0f:45:e5:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh860NUODaatlkkbi4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGFhMWNkNjQtMzA4OC00YzI2LTk3ZTAtZDBmNmM3MDQ4NzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV4mxn0olmYob9FZa3IXSeihzSvvpup7CP7J
bPV8BtGk2lFQKbxiq0yHs0MXg3BKiWpygSo0M+ytBOMo/rvioAyvR49I2DFOVAmJ
T10xtptP3O+ElCEW+0lgDHooAxL+cU3CYJbzM71qtBhajKVVgjFuPvBiNvQhWFdi
G0j8j1Bov3DfUYbRqCSG3Uk8UcZhVSCnPHcA3z6+0kFsl83qCIQgEtGFZ6zHMvKG
lr0g164KPFTmdw1XQ9cLxoLlrDsFGgfjm6F0pylZWewNYGXOqAmvB/i1IOle31jK
I96wCoo/b9I3OzLFaEmTH8hWW3EzaeHOBONcYZ9y8PWIwKonOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDM9rwOZPBnjJVaLje9WycqewNsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTVkZDMyMWItNjQxYS0z
ZTBkLTgxNGUtOWIzMDI5NzVjY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1OBgTyP/tPXivmTsftflgg1QH97uTil5yIdbAn7nRUUUGRPW53tbL/
UIXCgeDALj9jzLNxv/BQvQLDN7jJ5R4U5BFvGJfeHV1G+gJ0zWvDgKzNnUAG+Q0x
OXTJEKIYWFbcrhovXeiCRBsymcVuwdOKYQCkZz8mk3PaTKhxEJiok8bgEPsVylYp
URHAsEcAJyyYFW/CVx5hmJ9CdDYDU7bH6S7ANCw104FacKgqKoETvKUtQMYCOJw+
hGieUfxjxnKTRP8n1NXJGJWL06wwbK0mFdGKVxiiMOHnhYGKXvLPNxrDm9JgHO3t
6mfvhMTzlGjK85W+j6frP2/2nw9F5dA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:15 2025 by rpki-client