Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75c2d8e1-bb69-3751-9f6d-6004f5cd21d0.roa
File:                     75c2d8e1-bb69-3751-9f6d-6004f5cd21d0.roa (raw, json)
Hash identifier:          zckIPpAnbjmfMbQfFgrOP04m09mNpJbWP4NaS6dHwiI=
Subject key identifier:   3D:84:0D:0D:CA:00:47:82:2D:AC:B5:4A:23:62:AE:15:D9:9F:12:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5810E58E24B5C436749A800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75c2d8e1-bb69-3751-9f6d-6004f5cd21d0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        72.173.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:0e:58:e2:4b:5c:43:67:49:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6c3b4a5f-df4b-4cf4-ae3d-fff55df88354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:2c:8f:79:81:ad:61:af:6c:bd:46:7b:02:
                    9b:ef:53:58:05:24:6d:6a:65:22:52:8a:49:52:e8:
                    55:16:35:c3:05:14:45:c8:ba:9e:c2:71:8e:36:a3:
                    b4:c6:59:14:58:a7:d0:81:1d:a9:e7:ab:ed:88:84:
                    21:72:c9:c3:f4:3e:41:af:50:d4:ac:ba:e9:27:3b:
                    a8:e2:f5:a0:f6:42:b6:d6:9c:1f:d3:43:98:0d:3b:
                    dc:0f:52:83:96:d9:4c:61:8d:b3:3e:e8:a2:9c:48:
                    f3:40:0f:7b:ed:c0:a8:0b:d8:00:5b:fb:e6:bd:b0:
                    f0:18:e6:81:e2:45:21:aa:f7:4b:30:f1:0d:1f:93:
                    c6:62:9e:88:34:13:bd:6f:9c:18:89:ef:03:07:36:
                    42:d4:a3:89:ff:81:4e:99:ac:68:f4:30:14:d1:f3:
                    c9:2a:03:aa:60:e1:72:2d:e9:ea:09:0b:ce:30:b5:
                    a7:23:9c:64:ad:fb:19:1c:4b:06:50:d3:81:81:95:
                    a1:5f:d3:fd:11:d3:db:2c:51:b1:cb:72:f9:00:1d:
                    20:72:44:f5:e8:9b:48:3a:8c:96:89:d6:0c:73:6f:
                    ef:c2:e3:62:c4:c1:5d:6c:2b:76:b3:30:df:8f:e0:
                    99:6c:f9:d4:6e:2a:d3:e1:9d:f4:3b:51:00:b4:b8:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:84:0D:0D:CA:00:47:82:2D:AC:B5:4A:23:62:AE:15:D9:9F:12:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75c2d8e1-bb69-3751-9f6d-6004f5cd21d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:97:a2:b9:2e:6d:5a:08:15:7f:0d:26:98:31:3a:f5:2c:
         51:b5:65:74:b3:d0:f2:02:cd:46:cb:0b:2e:97:39:37:e6:98:
         b0:18:a1:0b:ba:bf:99:0d:01:fa:fc:e5:82:f4:b2:fd:ba:c0:
         c1:70:64:91:24:4e:62:cc:30:42:ed:ec:1f:0c:4d:17:71:ab:
         68:4e:f2:7d:de:09:92:27:88:f6:23:19:60:01:e5:96:ea:e2:
         86:d5:d1:08:32:c6:cc:ea:25:f3:3b:e7:aa:ad:85:58:ab:17:
         7d:70:98:0d:96:fc:5c:cf:06:86:58:62:33:e2:7e:8a:62:4e:
         f0:7e:77:64:10:52:7a:35:da:11:64:02:f5:fa:03:9f:92:f5:
         05:51:bd:d8:21:16:9c:ab:a8:18:8b:e7:b6:fb:22:71:2f:04:
         ba:74:24:33:96:69:d5:e7:58:1f:96:43:9e:26:5d:44:05:81:
         35:b2:02:64:8d:44:8c:ea:34:b1:cb:a0:1a:1e:06:4d:73:16:
         d4:a6:94:32:b6:e2:8c:f2:fb:8c:3e:37:aa:bd:ac:46:cc:ef:
         31:ca:08:ad:95:e7:53:3f:04:c5:8e:49:4d:0d:4e:e0:af:8a:
         a8:65:c5:9e:e2:9a:cb:27:17:40:01:b0:6d:e3:57:b0:8d:9a:
         b2:8a:d5:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ5Y4ktcQ2dJqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmMzYjRhNWYtZGY0Yi00Y2Y0LWFlM2QtZmZmNTVkZjg4MzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAYsj3mBrWGvbL1GewKb71NYBSRtamUiUopJ
UuhVFjXDBRRFyLqewnGONqO0xlkUWKfQgR2p56vtiIQhcsnD9D5Br1DUrLrpJzuo
4vWg9kK21pwf00OYDTvcD1KDltlMYY2zPuiinEjzQA977cCoC9gAW/vmvbDwGOaB
4kUhqvdLMPENH5PGYp6INBO9b5wYie8DBzZC1KOJ/4FOmaxo9DAU0fPJKgOqYOFy
LenqCQvOMLWnI5xkrfsZHEsGUNOBgZWhX9P9EdPbLFGxy3L5AB0gckT16JtIOoyW
idYMc2/vwuNixMFdbCt2szDfj+CZbPnUbirT4Z30O1EAtLjR1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2EDQ3KAEeCLay1SiNirhXZnxKmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzVjMmQ4ZTEtYmI2OS0z
NzUxLTlmNmQtNjAwNGY1Y2QyMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAY+l6K5Lm1aCBV/DSaYMTr1LFG1ZXSz0PICzUbLCy6XOTfmmLAYoQu6
v5kNAfr85YL0sv26wMFwZJEkTmLMMELt7B8MTRdxq2hO8n3eCZIniPYjGWAB5Zbq
4obV0QgyxszqJfM756qthVirF31wmA2W/FzPBoZYYjPifopiTvB+d2QQUno12hFk
AvX6A5+S9QVRvdghFpyrqBiL57b7InEvBLp0JDOWadXnWB+WQ54mXUQFgTWyAmSN
RIzqNLHLoBoeBk1zFtSmlDK24ozy+4w+N6q9rEbM7zHKCK2V51M/BMWOSU0NTuCv
iqhlxZ7imssnF0ABsG3jV7CNmrKK1QY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:47 2025 by rpki-client