Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4af17486-de47-3dab-a916-9866160adafa.roa
File:                     4af17486-de47-3dab-a916-9866160adafa.roa (raw, json)
Hash identifier:          hwlbt8CbEnxWNIdYmOg2JxpsxEsQV+84sExzYVj+oFU=
Subject key identifier:   33:5A:9E:59:2C:D4:EB:79:20:85:92:55:D3:3C:04:9B:4D:D9:AD:9A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581935D78B4BEF9B964C910
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4af17486-de47-3dab-a916-9866160adafa.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:93:5d:78:b4:be:f9:b9:64:c9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=794d547c-54b1-4068-9400-523d65ce3ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:68:bf:68:76:4a:78:3c:f1:51:91:60:0d:
                    53:50:49:26:a0:29:c2:f4:0e:f3:78:69:82:8e:85:
                    fc:27:68:5c:ee:08:d8:6a:50:e7:c8:88:ad:43:79:
                    42:dd:0c:76:04:df:60:c3:a8:eb:fb:7c:18:6b:40:
                    95:e2:8c:01:ec:68:1c:c8:f5:e7:dc:5c:58:b8:b8:
                    3f:b9:22:cc:88:ee:4a:d4:cf:b8:e6:73:5d:39:ac:
                    9c:eb:c8:d5:82:2e:12:0a:ed:f7:e6:12:37:e3:21:
                    e0:09:a8:df:d5:88:3b:f8:e2:98:f8:25:69:fb:b5:
                    71:f8:67:17:df:c1:80:ce:52:eb:28:d2:c2:86:21:
                    d9:2d:bf:a3:ee:4f:e9:22:d8:80:8f:71:b7:af:36:
                    05:7d:2e:e4:2e:92:e7:f7:aa:65:a0:11:2c:c9:f0:
                    84:bd:bc:cf:c9:30:a4:f2:ba:81:56:e7:44:ff:e3:
                    bf:12:f8:b6:57:e8:e2:5b:08:08:52:05:2b:83:0e:
                    b7:7f:c6:11:06:01:b8:91:29:0b:ed:da:a9:66:76:
                    e0:91:7e:75:de:00:8d:e7:a5:a9:c7:db:e6:c0:95:
                    f5:f6:f2:40:90:d4:28:74:6a:33:5d:ea:03:57:56:
                    20:33:ce:ae:88:cb:84:a8:f6:06:a2:d2:85:6c:a8:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:9E:59:2C:D4:EB:79:20:85:92:55:D3:3C:04:9B:4D:D9:AD:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4af17486-de47-3dab-a916-9866160adafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:72:3a:94:77:26:8d:f4:a9:95:b2:03:11:fd:49:3f:b6:41:
         a7:d2:f1:96:12:88:d7:ce:34:bb:96:28:0c:31:35:e6:47:c8:
         ed:57:6a:03:f7:e4:86:47:7e:56:b8:5b:24:7d:88:c4:54:fa:
         b6:0a:c6:82:c0:34:ac:77:b3:ef:79:51:43:df:17:55:70:31:
         15:2a:ce:71:93:1d:b6:89:9f:c9:25:41:99:0f:e3:19:50:f7:
         9f:6e:6e:17:20:26:c2:b5:81:1c:90:77:7f:98:ea:38:ae:95:
         31:1c:17:ca:b8:43:3b:6e:cf:09:0d:ed:3a:9c:d4:89:5d:fd:
         ee:8b:31:c0:52:e8:f1:7b:36:eb:1c:d3:58:67:d8:2b:02:c5:
         88:a8:cd:22:ba:7b:6f:34:7b:eb:bc:3f:e4:0b:49:be:ea:43:
         93:a0:7c:7d:e2:6d:b3:6f:79:73:65:49:12:dd:24:28:56:9c:
         79:81:ea:76:b9:1c:bf:cb:d4:3a:ac:8c:e4:fe:33:fb:3a:61:
         6c:c8:0c:0d:b1:37:e5:d2:81:73:1e:73:7b:26:66:c0:ec:9e:
         6c:f7:f6:91:26:12:27:1a:40:e6:29:14:cb:ac:49:2e:a3:66:
         ab:c7:e9:fe:ec:e8:a6:c7:3d:e2:a7:0d:ae:27:ad:6a:19:a9:
         a8:24:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:50 2025 by rpki-client