Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d00136d1-e52e-36d3-806d-5ca2ad3e0c2b.roa
File:                     d00136d1-e52e-36d3-806d-5ca2ad3e0c2b.roa (raw, json)
Hash identifier:          PpGhcRqWMSW1oBVJCG0CW88gMuVco1woySmAbSyyEYo=
Subject key identifier:   1F:FF:1F:10:27:AC:9C:72:53:ED:1C:C9:DD:4C:15:5C:75:04:C3:05
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584FBD8F81F2968F9D064A9DDD00
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d00136d1-e52e-36d3-806d-5ca2ad3e0c2b.roa
Signing time:             Thu 05 Nov 2026 15:12:23 +0000
ROA not before:           Thu 05 Nov 2026 15:12:23 +0000
ROA not after:            Wed 03 Feb 2027 15:12:23 +0000
asID:                     394365
IP address blocks:        68.68.164.0/24 maxlen: 24
                          97.75.228.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:bd:8f:81:f2:96:8f:9d:06:4a:9d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Nov  5 15:12:23 2026 GMT
            Not After : Feb  3 15:12:23 2027 GMT
        Subject: CN=3e1866f2-e1f2-4ad7-b94c-de0c7ec07156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:12:5a:07:b9:28:7c:98:50:c2:f1:a9:93:
                    5b:a9:5d:a4:eb:3f:07:dc:e8:27:aa:03:a2:a6:a8:
                    a5:ac:16:aa:f5:c1:eb:a9:7e:a6:94:23:26:1a:06:
                    17:ed:53:28:39:f2:c6:c2:d3:0f:e3:c2:a2:86:82:
                    d3:4d:83:c9:f3:36:84:4d:97:a9:ba:1e:2e:4c:13:
                    8e:e2:18:9c:15:7d:14:eb:11:30:02:81:a5:18:b2:
                    07:6c:15:ed:93:b4:64:f8:53:6f:78:be:38:b0:dc:
                    62:47:94:b9:77:60:61:65:cc:84:84:9c:a9:a9:78:
                    c4:1f:e0:e9:85:ef:15:49:5c:a8:f2:a1:d3:7d:fd:
                    26:2d:6a:c6:8c:e4:c8:5f:62:06:71:0c:57:44:e3:
                    f5:f6:6f:08:5d:f7:30:18:30:bc:9e:fc:a1:33:57:
                    a7:cf:81:7f:26:45:0a:e5:a7:fa:b4:9a:9a:68:26:
                    04:6f:d3:7f:61:67:28:8e:05:83:f3:3b:59:d0:96:
                    64:0b:a2:5e:fc:87:7a:5c:8a:3f:41:61:ec:22:10:
                    e1:08:02:33:a8:4e:1f:6f:65:c0:2a:2d:4f:ca:6b:
                    5d:df:cc:4e:a1:1b:b5:75:9b:62:aa:58:ed:bf:be:
                    fa:fc:1f:da:29:bf:48:c0:19:68:10:a3:f5:8b:f5:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:1F:10:27:AC:9C:72:53:ED:1C:C9:DD:4C:15:5C:75:04:C3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d00136d1-e52e-36d3-806d-5ca2ad3e0c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.164.0/24
                  97.75.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:91:48:1a:80:2d:9a:26:a4:98:94:73:ad:70:9f:ee:16:ef:
         c1:67:a6:81:7f:60:7a:96:a0:62:de:cd:47:6e:a3:6b:5c:ec:
         cc:b4:f1:83:8e:e9:c0:fd:23:6d:9b:c5:72:dc:52:18:8e:dc:
         ea:ce:c7:fd:09:66:db:8a:05:35:b0:22:a9:33:f8:cb:a9:c6:
         20:63:65:ba:73:ad:5d:85:3a:21:e3:bd:f8:5d:bf:3c:d8:d4:
         44:e1:8a:8d:ae:e7:70:fe:92:0e:7c:1c:48:8f:46:86:39:f3:
         90:28:b5:36:8f:5a:ed:98:90:3e:da:5f:63:ab:eb:2d:85:ef:
         34:eb:2b:c4:76:d1:87:22:fa:b1:be:b5:d3:be:df:5a:0b:62:
         43:49:30:7e:bd:ac:db:30:bf:d9:e6:f5:ed:b5:64:3d:58:de:
         86:b3:ab:f2:ca:1b:d5:e5:54:29:d7:43:5b:19:10:b9:24:62:
         d4:4d:c6:da:eb:7c:1c:f9:9a:50:57:7f:fe:7f:4d:73:2e:1b:
         00:7f:7a:c8:b8:28:d7:27:f3:59:0a:82:0c:0f:ed:56:3f:2a:
         4d:73:7c:0f:f3:bc:a9:aa:ff:eb:37:3a:42:97:94:c2:ed:04:
         a8:cd:02:f8:0c:9c:ec:60:b5:2f:7f:d1:fb:53:35:af:01:a7:
         9e:43:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----