Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa
File:                     a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa (raw, json)
Hash identifier:          LpVeSSPHi1auXeOW+sXMKQpfK18UCj/pGTi35BV3gJ8=
Subject key identifier:   6F:99:17:33:1B:B5:B5:85:3A:C8:90:14:1E:E3:89:7F:00:32:80:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811563E12125ACAB266920
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:15:63:e1:21:25:ac:ab:26:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=47e3a4cf-ac59-4c86-a86d-126a728d7787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:dc:81:23:f6:4a:37:1f:53:1b:0c:3a:38:
                    b4:41:1f:71:eb:bf:8f:41:74:f7:7d:73:cb:b5:4e:
                    a7:93:8b:94:18:08:77:e5:d0:15:26:5d:c7:ad:25:
                    85:51:c2:ad:3a:e6:2e:de:f4:97:42:30:68:0c:ad:
                    52:15:d3:8e:38:65:39:0a:a8:2c:51:43:fe:db:6f:
                    15:5f:73:76:99:c5:a0:61:7b:a6:0a:2f:7c:71:1d:
                    ce:49:ca:c8:dd:69:30:14:f5:c5:f6:de:38:03:c6:
                    d4:40:70:35:e7:ce:6a:70:c8:44:a1:f0:79:62:8f:
                    aa:c2:16:3d:ec:5c:43:19:cc:51:28:aa:d9:08:62:
                    19:d3:2b:49:c5:92:47:e4:64:48:c8:63:d4:6a:44:
                    0f:e1:10:aa:9a:b7:1d:8e:0b:4e:b2:6a:29:02:54:
                    78:ce:a0:86:60:ce:e5:c5:41:c0:2f:11:7e:b7:dd:
                    a6:b9:99:79:c9:44:f9:88:d0:fe:2a:8c:69:83:78:
                    82:60:a6:c4:39:ee:8b:c6:ad:69:01:9f:96:16:16:
                    64:9d:9a:b8:6f:84:50:4a:90:37:17:e0:eb:75:19:
                    dd:20:fa:60:c8:23:cc:1d:1b:d7:aa:e4:ad:02:a2:
                    d3:5f:17:ff:54:b9:24:ee:18:34:70:b3:f1:14:5a:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:99:17:33:1B:B5:B5:85:3A:C8:90:14:1E:E3:89:7F:00:32:80:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:d6:d9:5c:6d:de:b2:42:d7:e8:f3:d3:48:0d:53:f9:74:
         ad:50:be:58:4e:35:70:de:b2:ca:0d:cd:31:c6:eb:2f:b0:82:
         25:35:aa:b3:8b:16:2b:b5:2a:2e:0c:7d:8c:a1:cc:d3:05:53:
         33:ab:db:fd:18:d3:37:8d:67:56:43:aa:ba:d4:6b:c3:44:86:
         70:a2:43:1c:ec:5f:b7:ce:94:ea:f4:d7:51:c5:46:58:9c:0b:
         9b:c1:f1:e4:27:b0:dc:f8:32:d1:a2:9b:71:cb:ee:09:09:4b:
         96:81:e3:84:58:4b:12:d6:97:6f:e5:80:af:9b:5c:a7:98:5b:
         03:1c:39:7c:02:38:f2:d1:9a:b3:20:13:8b:36:94:dc:e8:e0:
         51:06:9c:cc:d3:fd:25:9a:1a:37:74:0f:81:78:cf:e5:2a:f2:
         3d:1b:7a:93:cd:38:8c:64:5f:5c:a4:89:4a:76:20:ae:dc:da:
         33:59:ad:40:6c:28:14:2e:fa:0f:83:b2:85:e7:c4:ec:d0:b5:
         5c:79:5f:37:f2:09:3c:6b:6a:80:04:bd:a4:95:39:99:05:1e:
         6d:3b:2b:f0:3a:47:10:af:22:19:9b:3d:8c:ed:a5:49:68:03:
         85:3a:66:60:7b:42:ba:55:02:82:7c:a1:9c:46:2d:6b:ed:f0:
         45:23:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:16 2025 by rpki-client