Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e5e6a3e-4b30-34ab-8e75-bbd0591c9c9e.roa
File:                     4e5e6a3e-4b30-34ab-8e75-bbd0591c9c9e.roa (raw, json)
Hash identifier:          c1xMg7StgNLDPaQZ6cS1DKebc69poSfivYqrq1rpeZQ=
Subject key identifier:   58:7C:77:C2:A0:17:2F:5A:82:D7:C4:35:7E:08:E8:85:54:A1:C5:0A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5812833EEC38985A72E8F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e5e6a3e-4b30-34ab-8e75-bbd0591c9c9e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:28:33:ee:c3:89:85:a7:2e:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9860bb49-d041-4565-ab6a-9a566de4ae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:55:ad:d7:c9:ac:23:6a:1e:c9:5c:10:bf:
                    e9:02:32:c4:ab:39:32:7c:3d:6b:77:c6:3c:1e:64:
                    b0:05:36:5c:82:6f:f5:8b:04:1b:82:b8:3b:8c:a0:
                    e5:0e:e3:d3:ce:ec:e7:dd:df:d5:e6:68:96:4d:9c:
                    0c:17:14:28:32:63:60:4a:7a:ef:b1:db:5f:04:d0:
                    d2:9d:16:57:a7:f7:02:49:90:17:63:ab:e1:e9:89:
                    d7:18:de:ce:5c:4e:36:33:63:f1:80:d9:4c:f2:fb:
                    0a:f5:89:5f:af:48:8d:26:77:38:22:f7:2b:b5:69:
                    7f:32:da:72:18:08:8b:4a:e4:55:11:79:ac:c8:6c:
                    80:db:ae:02:31:a2:52:90:3a:6b:1a:75:36:aa:dc:
                    a5:18:fd:c6:e6:21:f7:1a:09:3a:63:0f:65:0d:e8:
                    8e:a2:ab:b8:15:de:f1:3b:2f:72:3d:80:d9:c1:1b:
                    4b:d1:d6:a3:a1:65:e3:f9:94:75:a9:28:18:46:75:
                    48:bc:c1:4d:bc:ab:f1:a2:6d:33:ca:81:ef:a5:a3:
                    48:c0:fc:18:32:40:9d:6e:a1:81:ef:9f:1b:f9:f4:
                    e5:05:1c:9a:bd:4b:f5:a9:b6:05:be:95:18:54:01:
                    fd:ee:a4:49:c0:96:94:e0:7f:7f:5e:22:84:05:ea:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7C:77:C2:A0:17:2F:5A:82:D7:C4:35:7E:08:E8:85:54:A1:C5:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4e5e6a3e-4b30-34ab-8e75-bbd0591c9c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:d8:7e:1a:8b:c6:be:20:6e:a3:54:f1:e4:e3:82:2b:f2:38:
         fd:6d:0e:c8:f4:2a:38:f9:64:a5:67:29:7b:61:c9:35:a4:de:
         cf:dd:b0:61:1d:af:a4:cb:0b:47:e3:6f:8d:e6:c9:7b:7e:54:
         c5:40:ab:40:f9:f1:68:3d:09:4e:f1:4c:49:fe:91:a4:b3:6e:
         22:ef:31:01:52:98:f9:c5:46:62:eb:da:36:d2:2a:a2:76:75:
         90:d2:41:bc:5d:2b:5f:64:c6:ee:20:26:73:fc:84:07:d7:a7:
         12:cf:f6:6e:30:b3:8a:ae:54:eb:19:c2:24:d3:a8:5f:c9:75:
         4b:4f:f7:c6:f3:0e:4e:cd:a6:05:f5:b0:98:31:77:81:0a:6f:
         19:1e:8a:69:7f:b3:9b:6d:d0:ae:59:7c:51:a4:f2:90:f7:ce:
         71:34:b6:ce:f3:a5:50:0d:36:66:be:fa:33:8d:ea:0d:8c:64:
         6d:45:e5:51:11:96:81:5c:e6:11:9a:1c:62:ab:59:d8:b3:6b:
         86:73:bc:e1:9d:a2:e7:f1:d9:fd:b6:8b:d3:f0:7e:25:2e:3d:
         e6:4f:a8:e8:e1:67:10:8b:f7:b6:8c:d8:08:45:e5:bc:e8:6c:
         a8:d5:0d:63:24:63:67:ce:e2:2e:95:98:94:b1:36:fd:f9:eb:
         56:4a:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:48:41 2025 by rpki-client