Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37751b56-9110-3400-a6ac-644bf9cd3b7d.roa
File:                     37751b56-9110-3400-a6ac-644bf9cd3b7d.roa (raw, json)
Hash identifier:          fSmNlQOhBMZiHr2ScW3vazx66RHINlJv00Og3YEipQc=
Subject key identifier:   4D:03:2C:80:F3:95:C4:46:76:16:67:97:8C:7D:33:B0:29:1C:F4:1B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581447645E4B4129D1D4F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37751b56-9110-3400-a6ac-644bf9cd3b7d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:44:76:45:e4:b4:12:9d:1d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6f14155b-15ed-4655-8377-286b2d350a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:ca:d8:0b:ec:7c:e3:66:24:99:e4:ba:32:
                    90:6c:19:f5:bc:14:9e:d9:fe:c9:ca:07:fc:69:59:
                    6e:e4:0d:2d:0b:1c:ea:a3:f7:66:b8:7c:2d:5a:81:
                    84:fb:6d:02:c1:dd:76:a0:6d:79:5a:82:63:a5:09:
                    6c:b8:e7:2d:50:48:40:fb:8d:ef:a6:46:11:2c:ca:
                    38:c8:40:d5:84:ac:dd:63:c2:63:e5:26:a2:bc:b7:
                    5e:57:5a:c1:c0:64:55:b2:6e:3e:50:ab:44:7b:c7:
                    a0:af:90:9d:cc:a8:48:2d:b2:a4:41:4f:63:84:c1:
                    28:95:30:06:d2:bc:20:d3:d9:e1:b6:e0:50:f5:eb:
                    87:fa:d6:63:c6:c1:ea:05:b2:db:c3:c9:4f:9b:35:
                    09:2d:0c:e9:be:df:e2:7a:d4:d9:2a:87:9a:98:34:
                    ce:c2:6c:4f:d6:af:89:47:26:2a:ae:ae:fc:7a:30:
                    0f:7c:47:11:a8:14:9d:bd:2f:9f:30:2d:23:da:a0:
                    d7:1d:c4:cf:e2:cc:cf:7a:a8:b2:dd:73:a8:6e:5d:
                    fe:c2:fe:0d:69:09:8a:43:14:62:d5:ab:2d:67:b2:
                    71:ea:c4:69:ea:8c:b3:03:2f:bb:7a:82:87:64:19:
                    da:1e:c6:46:47:09:07:e9:6b:81:27:64:2a:5d:d5:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:03:2C:80:F3:95:C4:46:76:16:67:97:8C:7D:33:B0:29:1C:F4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37751b56-9110-3400-a6ac-644bf9cd3b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:62:9e:88:7a:ca:21:60:56:b9:f6:5b:99:2e:45:89:e3:8e:
         00:1f:74:a0:71:9d:f0:20:ec:88:b7:6b:16:cb:78:9f:29:f4:
         00:c0:62:89:6a:57:ab:a3:02:d9:fc:59:1f:12:52:42:a4:f3:
         f4:c4:49:f0:97:fd:68:c3:88:1a:36:a8:de:aa:4b:e1:59:a6:
         81:2e:fe:40:b2:5e:38:a7:23:4c:f4:5b:f8:10:79:18:a1:b7:
         44:e6:7e:46:ad:9c:05:5b:5e:a6:07:79:fc:74:11:73:5c:7a:
         35:99:db:85:dd:8d:e7:d6:11:e1:65:ba:d4:70:b7:c4:74:34:
         d2:52:88:4c:aa:0f:00:3a:d3:17:db:81:0f:61:a6:ff:39:64:
         1e:d8:4e:36:58:ad:0b:66:a5:6a:85:a5:c8:b0:c3:3c:8a:ad:
         cb:35:f5:36:0f:8d:06:7b:7f:fe:15:cd:40:fa:0c:77:88:9a:
         3a:ad:21:9b:64:d9:0b:60:23:a9:33:80:a6:80:da:87:55:03:
         f2:a7:3b:6b:3d:d8:ee:37:ce:f1:20:bd:d0:ee:83:9b:68:52:
         bd:e9:85:a5:ad:e3:96:53:c2:d0:a7:3a:f0:8e:87:1d:ec:58:
         0e:cc:01:7e:58:7d:b0:3d:97:a7:50:a1:f4:28:0a:60:3e:5f:
         55:c5:fb:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUR2ReS0Ep0dTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmYxNDE1NWItMTVlZC00NjU1LTgzNzctMjg2YjJkMzUwYTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxDK2AvsfONmJJnkujKQbBn1vBSe2f7Jygf8
aVlu5A0tCxzqo/dmuHwtWoGE+20Cwd12oG15WoJjpQlsuOctUEhA+43vpkYRLMo4
yEDVhKzdY8Jj5SaivLdeV1rBwGRVsm4+UKtEe8egr5CdzKhILbKkQU9jhMEolTAG
0rwg09nhtuBQ9euH+tZjxsHqBbLbw8lPmzUJLQzpvt/ietTZKoeamDTOwmxP1q+J
RyYqrq78ejAPfEcRqBSdvS+fMC0j2qDXHcTP4szPeqiy3XOobl3+wv4NaQmKQxRi
1astZ7Jx6sRp6oyzAy+7eoKHZBnaHsZGRwkH6WuBJ2QqXdXWxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0DLIDzlcRGdhZnl4x9M7ApHPQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzc3NTFiNTYtOTExMC0z
NDAwLWE2YWMtNjQ0YmY5Y2QzYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApinoh6yiFgVrn2W5kuRYnjjgAfdKBxnfAg7Ii3axbLeJ8p9ADAYolq
V6ujAtn8WR8SUkKk8/TESfCX/WjDiBo2qN6qS+FZpoEu/kCyXjinI0z0W/gQeRih
t0TmfkatnAVbXqYHefx0EXNcejWZ24XdjefWEeFlutRwt8R0NNJSiEyqDwA60xfb
gQ9hpv85ZB7YTjZYrQtmpWqFpciwwzyKrcs19TYPjQZ7f/4VzUD6DHeImjqtIZtk
2QtgI6kzgKaA2odVA/KnO2s92O43zvEgvdDug5toUr3phaWt45ZTwtCnOvCOhx3s
WA7MAX5YfbA9l6dQofQoCmA+X1XF+2o=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:17 2025 by rpki-client