Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/f5e91097-7f84-3630-81fb-8cff6cea5635.roa
File:                     f5e91097-7f84-3630-81fb-8cff6cea5635.roa (raw, json)
Hash identifier:          QuGIWiFS/qdRxj7mQiPK8xoP+p0DMwqrrcjyBgB+Uak=
Subject key identifier:   74:FB:46:81:5F:4B:09:0E:BA:D0:04:75:3E:D1:AC:38:AC:1B:D7:72
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285849350EA4D4B1BA64CAB6D89DC0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/f5e91097-7f84-3630-81fb-8cff6cea5635.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     60602
IP address blocks:        68.67.202.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a4:d4:b1:ba:64:ca:b6:d8:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=a548b0ba-d59a-48c8-bc30-8552ad3e87be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:73:af:4d:15:2f:70:ed:a7:30:2e:90:f3:
                    41:9e:15:4d:74:c0:09:6c:4d:42:e1:6b:d5:64:77:
                    9b:29:40:fa:d9:e4:0d:f0:57:e1:86:67:a6:1d:28:
                    af:c1:45:c7:df:5f:4d:05:ba:e5:5c:d1:74:82:fe:
                    fb:6a:22:46:08:a1:75:cf:dc:b1:01:0e:a1:b8:0c:
                    5e:d8:76:8e:49:ec:04:09:82:2a:e0:3b:5b:4c:e8:
                    d6:1a:e6:0a:39:fc:6c:f2:4c:0f:fd:89:a1:63:e1:
                    48:3a:39:d8:af:49:9f:c9:a8:6c:61:5c:8c:84:12:
                    a0:8d:e7:a2:f5:27:7b:00:ff:1f:3f:5b:de:3e:9a:
                    83:5a:eb:cf:2e:76:a8:b2:b8:58:ae:23:35:a1:4b:
                    be:d6:cf:87:9b:a8:bc:dc:11:e7:71:1c:d7:ff:0c:
                    d2:c2:96:7e:6f:b5:46:b2:b8:b1:c9:08:b0:1b:6a:
                    fc:d6:81:9e:d4:3c:2b:65:1a:07:b4:3a:7d:dc:36:
                    1b:b7:52:c3:82:c4:6f:df:b0:80:54:e1:a9:b2:7b:
                    cc:ed:7d:11:a1:9f:72:ce:8d:69:5e:e2:00:42:a6:
                    cc:62:5f:62:74:26:3b:c8:60:c9:f9:60:17:ba:8f:
                    b0:80:08:d4:a7:b0:b5:34:98:5a:b9:23:93:d4:f9:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:46:81:5F:4B:09:0E:BA:D0:04:75:3E:D1:AC:38:AC:1B:D7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/f5e91097-7f84-3630-81fb-8cff6cea5635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:98:a4:88:7a:2b:a9:88:5a:23:1f:5b:22:8a:0c:0d:07:
         79:1e:ec:5f:92:1d:ee:38:ad:99:41:bc:6e:cf:a9:a6:5a:23:
         72:dd:d1:f9:b2:35:ad:7c:74:99:dd:a3:ce:9d:79:d0:5a:ef:
         57:6c:47:a7:7b:c1:6d:78:e6:ef:7d:e0:68:50:8c:28:2c:a8:
         df:7f:97:55:49:d6:a1:70:92:cb:83:1f:86:01:6d:cc:52:66:
         c4:54:b5:41:29:30:e2:a2:83:e0:ae:00:b1:e2:4a:53:e8:e7:
         53:6d:b9:63:db:c2:cb:4a:e2:60:6d:59:75:f1:71:ed:1f:25:
         10:6e:cc:8a:f8:89:da:c4:5e:e2:b6:60:7b:9f:fa:3e:0e:f2:
         67:56:0e:e7:92:a3:8c:0f:80:07:d3:da:36:e0:a1:c7:67:8c:
         04:49:f7:07:a8:ae:91:e6:4f:02:47:3b:59:93:24:0a:80:87:
         49:ef:91:ba:85:65:d2:4b:f4:a7:cc:d8:9e:02:f6:23:15:6d:
         84:93:00:b6:a1:15:3a:7d:2f:c6:09:1f:db:52:ad:53:2b:e6:
         63:69:68:39:96:51:d8:9a:a0:a1:8b:4e:19:96:6f:bd:d7:96:
         a0:d6:82:b5:23:54:51:1a:67:16:71:2c:7c:a0:c4:85:8f:8d:
         fd:3e:2d:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqTUsbpkyrbYncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
YTU0OGIwYmEtZDU5YS00OGM4LWJjMzAtODU1MmFkM2U4N2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsZzr00VL3DtpzAukPNBnhVNdMAJbE1C4WvV
ZHebKUD62eQN8FfhhmemHSivwUXH319NBbrlXNF0gv77aiJGCKF1z9yxAQ6huAxe
2HaOSewECYIq4DtbTOjWGuYKOfxs8kwP/YmhY+FIOjnYr0mfyahsYVyMhBKgjeei
9Sd7AP8fP1vePpqDWuvPLnaosrhYriM1oUu+1s+Hm6i83BHncRzX/wzSwpZ+b7VG
srixyQiwG2r81oGe1DwrZRoHtDp93DYbt1LDgsRv37CAVOGpsnvM7X0RoZ9yzo1p
XuIAQqbMYl9idCY7yGDJ+WAXuo+wgAjUp7C1NJhauSOT1PmlZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHT7RoFfSwkOutAEdT7RrDisG9dyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvZjVlOTEwOTctN2Y4NC0z
NjMwLTgxZmItOGNmZjZjZWE1NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREPKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/4mKSIeiupiFojH1siigwNB3ke7F+SHe44rZlBvG7PqaZaI3Ld0fmy
Na18dJndo86dedBa71dsR6d7wW145u994GhQjCgsqN9/l1VJ1qFwksuDH4YBbcxS
ZsRUtUEpMOKig+CuALHiSlPo51NtuWPbwstK4mBtWXXxce0fJRBuzIr4idrEXuK2
YHuf+j4O8mdWDueSo4wPgAfT2jbgocdnjARJ9weorpHmTwJHO1mTJAqAh0nvkbqF
ZdJL9KfM2J4C9iMVbYSTALahFTp9L8YJH9tSrVMr5mNpaDmWUdiaoKGLThmWb73X
lqDWgrUjVFEaZxZxLHygxIWPjf0+LTc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:15 2025 by rpki-client