Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa
File:                     734ca13e-dcbf-3086-8d93-d83e559240e6.roa (raw, json)
Hash identifier:          lSNOIeuzDQyR9BW4Jl1HKeD4i5O4JR0aQzxsHed1Lm4=
Subject key identifier:   1F:F5:ED:B0:E6:1A:EE:C6:9D:B4:B5:AB:EF:75:53:F9:7E:17:06:62
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285848E59BD1047D9AAE390E0C3200
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16417
IP address blocks:        68.232.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d1:04:7d:9a:ae:39:0e:0c:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=a3eefe52-da32-4eb2-88f9-58be450e16c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:03:58:f4:9d:2d:a9:2f:fb:48:a4:6c:a3:
                    cd:7b:71:ba:69:d5:24:aa:c4:e7:6b:60:ba:d8:0d:
                    ea:1f:39:89:22:df:23:6f:06:86:48:1a:3b:a5:e4:
                    28:80:bb:c6:2e:eb:3e:7c:b8:7d:10:d0:f0:c7:58:
                    a5:3d:b4:78:f8:5c:af:70:b3:23:b0:29:fd:26:03:
                    30:28:c6:14:73:27:0c:c1:f0:59:47:2c:f3:43:f5:
                    37:e1:ad:c2:a9:86:10:77:e7:ea:05:36:89:df:09:
                    e4:01:1e:62:24:b8:1a:39:11:38:9f:65:99:29:64:
                    a6:1e:98:4c:d3:39:97:d8:72:6a:b6:2c:dc:9d:06:
                    b1:20:19:07:b7:25:a7:fd:5e:bc:15:00:3e:43:27:
                    50:4d:b2:94:93:d7:e5:d8:9c:f9:2a:21:03:13:19:
                    43:80:58:57:b1:a5:a2:3d:1a:34:94:fa:0c:9c:a0:
                    f3:9f:84:76:1c:e5:c4:26:84:89:30:d4:62:eb:ad:
                    3e:e6:98:c7:48:16:26:50:c3:b0:7a:7f:69:38:fd:
                    6b:d7:fe:1a:cc:a9:8c:31:6f:90:0d:a4:3a:5b:6b:
                    f5:17:92:3e:ca:69:f2:eb:6f:71:aa:ba:87:7d:bc:
                    e8:10:6c:31:bb:77:ba:0a:0b:d0:61:2e:bf:95:f2:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F5:ED:B0:E6:1A:EE:C6:9D:B4:B5:AB:EF:75:53:F9:7E:17:06:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/734ca13e-dcbf-3086-8d93-d83e559240e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5c:dd:f2:de:58:a7:bf:fe:92:a0:99:62:eb:da:5e:05:8b:
         4d:34:e6:14:e3:2d:c5:fa:68:0c:d7:fe:33:25:c0:4f:8a:a6:
         7e:d0:a1:3e:a0:89:5f:52:5e:1a:6d:83:0b:4f:66:d4:02:cc:
         41:1d:09:c4:2c:d2:5e:07:eb:4c:90:8c:fa:f2:5f:73:8c:0b:
         0a:41:17:9e:47:37:c1:1d:ad:88:49:6d:14:ef:41:ec:6b:36:
         ba:53:d3:08:f3:28:cd:c0:a3:76:5f:e3:57:1b:d3:d5:38:87:
         9f:a6:76:d3:72:df:ca:95:6d:cb:7e:0a:63:8b:af:a8:4b:90:
         92:98:be:52:64:92:28:e8:b6:79:58:e1:79:f2:c9:75:84:0d:
         f7:0c:52:9b:bf:da:43:5c:8a:90:f1:84:98:5f:73:fd:1a:10:
         bf:f0:d7:65:95:a6:e6:20:dc:fd:0c:1b:2e:c0:b3:3f:11:28:
         72:02:6d:07:d5:0f:93:8f:f0:e3:b2:18:81:f1:88:1f:0c:f6:
         34:ce:9a:71:5e:aa:f6:1a:de:c5:ac:ca:7e:80:5d:8d:c8:f3:
         95:70:bd:66:73:65:18:60:87:96:23:1a:cb:63:f7:19:5f:57:
         b6:f5:82:71:13:57:f6:df:3b:0a:89:0f:14:f1:8e:74:0c:2b:
         8c:33:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:25 2025 by rpki-client