Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/74b9431a-15ab-31a7-946f-7f534a9af808.roa
File:                     74b9431a-15ab-31a7-946f-7f534a9af808.roa (raw, json)
Hash identifier:          BospgJKQEsdl2tfaAKJQ7jl3/ycS24iERJhjmOklb/I=
Subject key identifier:   EB:7F:58:52:DC:2A:81:D9:B6:1E:4C:B1:8F:D8:B7:FB:32:8F:9B:03
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848F4F69C3B24BD4A85B893BF00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/74b9431a-15ab-31a7-946f-7f534a9af808.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     16550
IP address blocks:        137.75.122.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9c:3b:24:bd:4a:85:b8:93:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8a44a332-8501-444b-ac80-1004392c9ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:ee:a5:50:fc:6e:7e:2d:36:73:5d:a3:26:
                    fa:56:aa:a5:ca:46:21:00:87:7a:c0:da:44:06:09:
                    f6:8c:49:59:75:af:60:60:8e:61:33:54:61:94:93:
                    5b:40:ff:43:bb:bb:21:c4:8b:57:46:28:80:bf:86:
                    e6:0f:8c:7a:3b:29:e0:4b:06:29:7c:5d:05:bf:9d:
                    a9:0b:d0:78:8a:6e:c3:bf:c3:2f:19:bf:c0:b7:87:
                    c7:8b:26:66:20:4b:c7:ac:6b:65:69:e4:ac:eb:f4:
                    f5:e8:e5:d0:ae:3c:8a:82:47:33:06:be:28:49:f7:
                    b6:12:0a:18:68:e0:0c:b2:93:29:68:1a:ad:99:df:
                    9f:55:ed:1a:02:31:f1:85:38:ae:a9:4f:bf:5a:cb:
                    54:fe:76:39:e9:84:2e:62:ca:45:03:c6:93:44:63:
                    15:30:78:5a:f1:67:d1:50:9f:6f:80:cc:17:ac:9c:
                    7a:3b:9e:1f:fc:b0:92:c0:af:a0:45:9c:4b:a0:28:
                    62:3e:8b:87:66:a9:1d:d2:97:d7:49:3e:93:44:51:
                    36:92:43:1c:15:66:d9:05:fd:4d:4d:a0:d2:91:44:
                    19:48:c4:08:13:2a:89:cf:2e:b1:36:2d:f1:ad:d6:
                    e3:48:db:f9:5a:1a:b9:68:ad:53:ef:8c:93:49:08:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7F:58:52:DC:2A:81:D9:B6:1E:4C:B1:8F:D8:B7:FB:32:8F:9B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/74b9431a-15ab-31a7-946f-7f534a9af808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a8:0d:a4:5d:29:9f:9b:c3:54:f1:0f:75:db:f6:e0:03:5f:
         75:12:39:51:cc:71:1f:8d:82:bf:b3:52:2b:9b:81:a0:7e:01:
         f5:c3:2c:1a:52:98:f6:c7:a7:71:2c:cb:62:d7:25:f3:f7:f2:
         ad:74:98:48:e9:b0:af:b8:99:10:66:9d:d4:38:93:0d:0a:e0:
         b3:70:bd:aa:9e:22:1e:91:83:9f:d8:9e:4c:a2:d5:a0:25:50:
         c2:c4:46:52:6a:ca:42:35:bf:06:14:04:b1:31:e5:2a:c5:06:
         25:a9:c1:56:52:26:d4:08:da:2b:7e:d0:e9:3b:e2:03:ab:07:
         bf:a7:ac:1b:4e:a1:8e:6c:47:fa:f1:b8:d6:af:90:82:61:ce:
         bd:2d:33:41:aa:33:8f:fb:88:6d:b7:30:b9:30:a2:b0:61:cc:
         04:c2:d4:3f:8a:b8:1f:aa:ee:d2:9f:17:ca:60:78:a1:e9:c4:
         ee:7b:5b:55:9c:a9:05:22:a0:45:cb:38:5e:33:98:82:79:75:
         29:e3:08:df:41:dd:9f:68:8e:f8:3d:06:8b:bb:30:bf:86:83:
         5f:d1:21:f0:07:54:a5:1e:d2:0f:2a:19:fc:8b:d4:b8:ff:96:
         ac:99:5c:85:c8:37:0b:e0:08:80:ff:f1:8b:bd:11:54:f6:35:
         6f:73:43:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:14 2025 by rpki-client