Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5fe3c63-5c32-3b6c-9cb3-8eee18205704.roa
File:                     a5fe3c63-5c32-3b6c-9cb3-8eee18205704.roa (raw, json)
Hash identifier:          bhQZ1qaGc/UOgBAeBF0FQGVXQ/B9nDX0FsTmd2oSWFY=
Subject key identifier:   32:DE:EA:67:3E:E4:9F:F8:C2:3B:F2:4D:AD:5D:4F:FE:D2:87:F4:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58113D119F25DE5AB4BAA60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5fe3c63-5c32-3b6c-9cb3-8eee18205704.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:13:d1:19:f2:5d:e5:ab:4b:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7bd515da-8d9f-41ad-b591-d4e6eebc3d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:84:96:98:90:54:42:52:84:82:8b:87:48:
                    65:fe:01:70:aa:8a:4a:b2:6e:65:74:45:4a:23:da:
                    de:b6:c7:11:ff:b8:17:d6:a3:63:87:63:5e:74:2f:
                    63:2d:5a:d3:79:ef:54:09:2b:b8:5c:42:dd:02:f1:
                    67:bb:b0:5d:4d:5b:b4:66:cc:2f:94:dd:f9:4c:a5:
                    d9:11:50:74:9d:77:40:26:b6:0f:bf:2d:39:81:38:
                    1d:d8:4b:5a:aa:80:60:f0:b2:48:ab:3d:b8:f4:fd:
                    2b:84:a6:35:98:4e:05:c3:2b:93:d7:5b:80:c1:de:
                    e0:c8:c7:a1:17:0f:a6:94:ad:bf:e4:f1:41:c4:e6:
                    ba:3b:98:ea:2f:43:29:b9:5c:4e:86:73:90:61:16:
                    6f:12:15:72:32:a1:e0:42:f3:45:e7:ba:26:87:f1:
                    04:e1:76:02:82:e8:be:d8:ae:04:d7:dc:77:47:71:
                    29:5e:1c:3f:e2:3c:ef:31:1b:10:aa:c8:e8:a8:c4:
                    91:71:52:6a:0c:8b:50:47:87:50:8f:a4:3f:dd:4a:
                    ed:62:ca:bd:b1:61:f6:78:5f:84:ff:2e:2d:d0:7a:
                    bc:b5:26:8c:fd:01:20:fb:65:30:35:14:77:62:1c:
                    24:3c:26:00:a4:3a:d7:80:1a:77:0b:40:a0:58:5c:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DE:EA:67:3E:E4:9F:F8:C2:3B:F2:4D:AD:5D:4F:FE:D2:87:F4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5fe3c63-5c32-3b6c-9cb3-8eee18205704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:c9:67:a1:62:31:f0:7e:87:fe:14:b2:fb:cc:a2:2e:79:
         0f:8c:e4:d0:60:e4:a5:34:f1:d6:13:91:76:75:0e:1b:83:1a:
         4e:79:1d:25:69:b4:40:83:ce:cb:6a:65:a9:d6:21:24:0e:01:
         b3:62:8a:bb:41:02:b7:76:05:1a:3d:61:aa:a9:c6:7f:6b:26:
         be:1e:86:29:09:e6:8a:21:24:71:d6:7c:85:ca:d2:35:40:63:
         e6:1a:c9:fb:36:ba:f3:99:14:e9:bd:4d:f4:8d:20:08:c6:8e:
         a8:89:72:64:bd:6d:15:26:57:96:12:20:7f:b4:48:7c:ed:6d:
         5a:b6:be:b7:a2:db:2d:70:0d:a5:f5:b5:ca:d3:b1:25:ad:2a:
         ed:7c:21:a2:6c:11:35:c5:82:e3:0f:ea:23:cc:b5:53:ea:8c:
         df:0a:59:43:05:f2:d2:fd:5e:48:12:8a:d6:cc:1a:41:7d:1a:
         57:2d:9c:ea:e9:32:d7:66:46:82:d2:a4:47:69:8c:cd:c0:17:
         6b:d2:99:10:31:24:ca:2a:9e:72:63:c6:cf:2e:e4:69:eb:46:
         d9:12:85:74:3b:58:56:39:8e:b6:24:86:17:70:98:24:12:29:
         4f:35:8a:e9:09:b6:5c:e0:59:30:63:0a:79:08:da:88:58:82:
         6d:38:f8:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRPRGfJd5atLqmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
N2JkNTE1ZGEtOGQ5Zi00MWFkLWI1OTEtZDRlNmVlYmMzZDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03qElpiQVEJShIKLh0hl/gFwqopKsm5ldEVK
I9retscR/7gX1qNjh2NedC9jLVrTee9UCSu4XELdAvFnu7BdTVu0ZswvlN35TKXZ
EVB0nXdAJrYPvy05gTgd2EtaqoBg8LJIqz249P0rhKY1mE4FwyuT11uAwd7gyMeh
Fw+mlK2/5PFBxOa6O5jqL0MpuVxOhnOQYRZvEhVyMqHgQvNF57omh/EE4XYCgui+
2K4E19x3R3EpXhw/4jzvMRsQqsjoqMSRcVJqDItQR4dQj6Q/3UrtYsq9sWH2eF+E
/y4t0Hq8tSaM/QEg+2UwNRR3YhwkPCYApDrXgBp3C0CgWFxYMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLe6mc+5J/4wjvyTa1dT/7Sh/QSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTVmZTNjNjMtNWMzMi0z
YjZjLTljYjMtOGVlZTE4MjA1NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2gVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQryWehYjHwfof+FLL7zKIueQ+M5NBg5KU08dYTkXZ1DhuDGk55HSVp
tECDzstqZanWISQOAbNiirtBArd2BRo9Yaqpxn9rJr4ehikJ5oohJHHWfIXK0jVA
Y+Yayfs2uvOZFOm9TfSNIAjGjqiJcmS9bRUmV5YSIH+0SHztbVq2vrei2y1wDaX1
tcrTsSWtKu18IaJsETXFguMP6iPMtVPqjN8KWUMF8tL9XkgSitbMGkF9GlctnOrp
MtdmRoLSpEdpjM3AF2vSmRAxJMoqnnJjxs8u5GnrRtkShXQ7WFY5jrYkhhdwmCQS
KU81iukJtlzgWTBjCnkI2ohYgm04+Bc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:37:57 2025 by rpki-client