Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa
File:                     1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa (raw, json)
Hash identifier:          fg67EzeKTBbJVS18zoJe7aKtWbaUFUEqwvPMGgAyT+c=
Subject key identifier:   A2:6F:6C:ED:A2:9F:3F:12:82:2B:3E:28:E1:71:6C:F8:A8:74:74:04
Certificate issuer:       /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial:       010D0C9F43285847DC64C57CDB88928E22F7E1E0
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     149522
IP address blocks:        68.69.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:c5:7c:db:88:92:8e:22:f7:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=0c5248fa-3b4c-40e6-8792-ea809187736b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:fe:61:5b:1a:41:7a:c9:2b:ed:a5:ca:4a:
                    42:dd:97:8e:29:d1:eb:c3:a4:0b:f4:21:c8:13:4b:
                    ea:f7:d1:1a:9d:67:9e:2f:7e:a7:b3:1f:89:2e:49:
                    70:45:35:9c:4a:7f:0c:ec:a8:de:25:cb:ad:9b:31:
                    26:f1:b0:24:b3:40:d1:c5:1f:cb:96:4c:a2:52:0e:
                    75:68:aa:f5:7f:00:f3:aa:be:84:c3:9d:14:9f:23:
                    a6:f3:88:16:3a:a6:21:e6:d7:3c:11:9f:d1:ec:48:
                    4e:10:91:91:53:41:6c:f3:db:f0:d3:90:1c:62:6f:
                    ef:78:f9:59:69:9f:5c:22:a8:4c:40:4d:1b:13:08:
                    4f:28:74:3b:8a:37:22:a3:75:47:7a:5b:26:09:1d:
                    56:03:d6:ab:d9:6f:11:d7:a0:45:35:5d:4a:51:6f:
                    fa:f5:b4:d0:af:7d:94:bc:63:65:79:49:98:cf:63:
                    4b:b9:34:c9:0e:2b:2a:4b:74:3a:24:90:e5:a8:35:
                    49:2c:c6:9e:9d:38:dc:50:3a:ae:53:23:0a:a0:cc:
                    0f:16:6a:3b:42:33:5b:44:43:ab:e2:1f:5f:3d:1b:
                    79:dd:5a:a8:dc:c3:47:6c:b0:72:cf:d7:f2:07:87:
                    18:4e:c1:13:41:71:b9:c5:1b:27:ef:45:40:a2:74:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:6C:ED:A2:9F:3F:12:82:2B:3E:28:E1:71:6C:F8:A8:74:74:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/1ee5d5ef-3cf0-36e2-bf8d-0281942fcf99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl

            X509v3 Authority Key Identifier:
                keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:43:32:6d:bb:0e:82:11:66:ce:bd:28:de:db:27:d0:35:
         4f:64:54:5f:5e:bb:0d:e2:0d:df:26:33:0c:70:97:98:0e:90:
         d9:c8:e1:8f:4f:af:6b:90:ae:33:28:a2:3d:3c:20:68:46:76:
         c8:f2:9c:98:70:01:00:c9:e8:b3:5e:09:86:28:1f:14:0d:8e:
         a4:85:bc:60:51:e6:75:75:43:11:7c:33:1e:1b:03:86:5c:a7:
         2e:db:b6:fb:df:3f:92:b5:bc:1a:37:93:de:d3:18:8f:ea:2c:
         4f:c0:c5:63:a8:7f:eb:90:fa:6c:eb:b6:78:8f:90:57:68:b4:
         70:9d:c6:4d:ad:84:6c:22:8e:7a:9a:1a:57:f9:5f:18:a1:34:
         3d:70:17:95:04:33:cd:ba:31:dd:56:3e:23:ba:a8:b9:ff:9e:
         b3:72:ec:8d:37:72:3e:39:96:1c:5f:4a:92:5d:1b:b1:95:bd:
         7a:29:f1:b4:1f:46:18:7e:83:64:1c:d0:b7:a9:a3:05:f1:77:
         b9:7d:ae:6f:69:21:b6:bf:05:64:65:25:22:11:6c:a2:5c:d3:
         ba:b1:76:fa:e7:b5:69:8d:b8:51:c5:3f:fa:98:2f:45:f4:c5:
         3a:15:f3:d5:9b:2d:f3:8d:81:aa:9d:17:77:c3:cd:2b:0e:0e:
         93:59:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 19:03:31 2024 by rpki-client on console.sobornost.net