Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa
File:                     65ede538-d23e-3756-95dc-e6dbd41373e3.roa (raw, json)
Hash identifier:          lG7qzTE8VhEqeVScWGoiWaMZIsdlI0uIl6nVQKxqoEU=
Subject key identifier:   DF:4A:ED:93:D6:83:58:13:20:C5:0D:18:4B:2B:EE:73:DB:19:0C:54
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584957F3F13E0CC3E4338657FAA0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        68.64.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f1:3e:0c:c3:e4:33:86:57:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=c488d3d3-ed63-411d-b221-fab3ac92a267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:85:cc:71:4d:56:be:a8:c3:21:13:e0:82:
                    9d:a8:4f:b4:7f:f7:ca:4c:24:09:5d:c1:52:bf:0a:
                    ec:7f:0a:ba:e4:ad:99:a5:f7:cd:9e:f0:3d:b5:19:
                    f2:62:09:53:42:5a:eb:fe:05:4b:06:db:17:4c:07:
                    c4:a0:57:9d:74:37:28:5e:14:7c:ea:87:48:c6:16:
                    6e:d1:f3:ee:21:b2:07:08:a0:b7:a0:98:de:ff:82:
                    47:2b:97:b7:c9:01:ff:74:ca:b1:d4:de:9c:e0:a5:
                    9a:0d:39:fd:3d:88:16:c5:c6:78:f0:bf:60:4e:95:
                    fe:a8:76:26:15:c0:01:c7:ea:1b:6b:fb:36:19:61:
                    62:3e:fb:32:a9:44:01:3d:52:49:1f:14:bd:fd:40:
                    95:0c:57:11:74:a3:aa:a2:66:ef:1b:60:f4:02:ba:
                    34:e9:18:ff:f0:2b:de:37:05:98:e6:cb:61:cb:63:
                    ec:bc:04:67:2f:03:ef:7f:3d:cf:d1:0c:f0:e9:0e:
                    28:bc:e6:36:e4:35:0f:ac:3e:b7:3b:e1:f2:9d:03:
                    af:6c:23:39:e5:99:41:36:ba:8f:37:00:33:14:49:
                    dc:4b:b5:5e:48:ee:ab:62:57:4f:8f:83:27:3e:95:
                    6b:c5:02:9e:7b:0e:b2:1c:6f:3f:10:0e:0c:98:92:
                    17:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4A:ED:93:D6:83:58:13:20:C5:0D:18:4B:2B:EE:73:DB:19:0C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:28:14:42:33:18:cb:84:50:eb:16:da:89:03:26:41:49:
         ef:da:25:07:7b:a6:a3:14:88:a3:e0:2a:61:b0:9a:6b:9d:66:
         85:bb:a9:ba:db:f2:bf:f1:d5:d1:a9:98:40:14:67:75:83:9e:
         bd:04:53:a9:ff:f9:df:82:5f:6b:2b:d5:c7:21:aa:88:83:33:
         99:2a:df:9d:4e:bc:cc:78:52:d0:ef:27:cc:b0:41:4c:02:a7:
         c0:75:9e:0a:b8:02:98:49:f9:1f:75:79:8e:17:31:4e:57:d2:
         94:e9:9e:b3:cb:53:98:4a:7e:a4:c7:f1:88:c2:0a:27:9e:26:
         37:99:ad:da:47:10:99:64:f1:4d:63:34:59:d0:dd:9d:4a:c9:
         ce:07:f9:9b:dc:8b:23:d4:9b:93:e9:9f:8d:c1:8c:50:66:01:
         9b:40:42:1e:b3:ac:1b:c5:66:3e:5d:ef:62:81:0b:93:34:50:
         09:16:ad:71:b4:fe:7e:32:b3:58:25:81:84:75:a0:d2:c2:4b:
         31:4a:28:57:d0:6a:29:a4:8c:7d:20:1d:35:80:18:e0:a6:ba:
         d0:7a:ce:77:45:db:12:f5:2d:7b:8a:75:10:b8:4a:f8:f4:f3:
         9d:82:6c:e9:bc:95:a2:b0:f5:bd:38:f9:25:3b:39:10:1b:2f:
         22:9f:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:25:21 2025 by rpki-client