Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989948f4-881f-35a4-a82e-a71abd60c7b6.roa
File:                     989948f4-881f-35a4-a82e-a71abd60c7b6.roa (raw, json)
Hash identifier:          HhkP3AYIDjlXzWAbH3F0t4DGhDpB3D3ZVk/RPRmvciE=
Subject key identifier:   19:B8:4E:C6:89:64:1B:F0:28:83:33:4E:C8:DC:D6:FA:F2:DA:8D:90
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B7E5454A34D743BC12C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989948f4-881f-35a4-a82e-a71abd60c7b6.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b7:e5:45:4a:34:d7:43:bc:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=45b67784-fb95-41d6-9454-a486af89fea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:6e:7c:79:cb:c3:b3:e6:6d:75:91:2b:2f:
                    f6:64:0c:c1:17:a7:4c:c0:32:86:15:ec:6d:7b:ba:
                    30:8c:c3:1c:3f:63:21:0f:2a:f9:ad:87:1f:fa:5e:
                    9d:54:5c:39:f4:b7:da:67:e3:b6:f5:67:84:40:36:
                    9b:73:1b:d6:b1:c7:1c:6d:0d:6a:5c:9b:13:7b:fb:
                    41:5b:2e:8d:60:4a:15:5c:a7:0f:be:aa:83:92:84:
                    49:ea:1e:d5:fb:4f:ac:f9:de:d9:e3:4f:64:af:03:
                    c1:fa:1c:de:a2:0f:f5:68:93:cf:80:38:c2:b6:cc:
                    14:ef:33:54:0b:22:97:c0:22:f3:e0:10:ad:73:e0:
                    8d:19:5a:10:68:d0:0b:75:e8:95:44:9d:c7:b0:87:
                    fe:5f:c7:17:cc:1b:f4:3d:28:c6:8c:d7:57:a9:18:
                    35:5e:e9:ea:86:26:4d:87:55:5f:1a:54:d3:9c:af:
                    51:32:8d:02:86:fc:77:34:07:20:fb:a5:74:3f:1c:
                    c0:91:de:1f:f9:07:a5:30:7e:32:de:ab:ec:6b:43:
                    25:fe:30:89:1e:85:b6:fd:b8:e1:52:59:c0:8a:04:
                    ec:a4:d2:ba:f7:04:46:ef:02:b0:3b:53:1d:b7:69:
                    fc:17:44:e1:8b:84:b2:11:b8:ff:e0:71:aa:86:53:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B8:4E:C6:89:64:1B:F0:28:83:33:4E:C8:DC:D6:FA:F2:DA:8D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989948f4-881f-35a4-a82e-a71abd60c7b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:2d:79:f0:44:78:b5:9e:3f:9d:57:7c:c3:2c:80:92:92:
         79:ad:b3:e5:c1:87:0f:b7:2b:77:62:2c:7e:c4:ec:29:d1:22:
         46:0b:3c:b7:ed:05:db:2f:38:9e:e5:b7:ad:b9:bd:74:1b:ed:
         83:96:18:03:d4:8e:2e:fd:13:c1:46:bf:60:f6:a6:ba:fb:c6:
         b6:a3:ff:9e:7e:e9:ad:4b:97:9b:1c:77:34:de:64:f4:ed:b7:
         40:6c:6a:b5:f5:a7:62:f3:0f:39:cd:27:be:dd:4d:f8:f6:b2:
         55:11:56:dd:03:24:50:8a:02:43:94:49:9a:cc:12:69:51:e3:
         1a:f0:bb:41:9a:07:88:bf:97:ab:cc:69:37:68:9b:66:da:0c:
         1c:29:b5:e9:de:6a:37:04:1b:f0:a2:2a:f9:f0:4a:46:ec:30:
         a5:d0:57:27:ab:b0:f2:99:83:f1:c2:9e:d4:84:c8:ca:1e:10:
         16:9b:ad:e4:d7:d1:5d:be:7c:2b:0f:6e:d0:9b:7e:92:69:cf:
         db:bd:55:6c:fa:ad:b4:8e:b6:cf:31:0c:61:d6:33:de:34:ff:
         cb:72:c0:92:3a:c3:d2:df:e1:a6:0e:fe:31:19:18:0b:45:b8:
         d5:3b:c5:19:f1:fc:6b:e1:e0:ce:45:44:ba:eb:0f:51:74:4f:
         8a:7b:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:13 2025 by rpki-client