Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa
File:                     2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa (raw, json)
Hash identifier:          LrRnawA/g6u6pGp3BJgxBy6xdXGhtQbe5K4GHQGCfDw=
Subject key identifier:   E0:CB:77:B9:10:E6:BE:E1:50:52:9E:46:FF:C3:65:59:A6:A2:11:71
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289D74078D70A3AC88955C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        75.89.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:d7:40:78:d7:0a:3a:c8:89:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=e7437036-6d9d-49c5-9d68-800e7b838961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:59:ef:b5:e9:0f:de:e2:9c:8e:1d:b8:a6:
                    27:6f:c1:a3:1c:db:b4:44:65:a5:47:fb:c8:8e:91:
                    35:02:b9:02:90:cb:8f:44:fc:59:db:e7:df:21:c3:
                    6e:43:60:d8:5a:ab:4d:95:8c:8f:3e:68:85:f0:e2:
                    42:4b:30:e0:98:c2:c6:08:c1:c2:93:b8:b0:96:48:
                    37:5c:6c:2c:08:b9:17:b3:e4:bd:12:2e:eb:42:ca:
                    62:02:89:9b:b2:80:27:06:6f:d2:da:83:57:18:e9:
                    0f:99:00:55:be:c7:15:e1:3b:a7:cf:2a:0b:9b:73:
                    85:e7:ec:ce:b6:c2:d5:32:22:e0:a4:ff:ae:eb:9c:
                    98:f3:2a:1e:70:15:8b:15:c3:fa:84:3e:ee:5d:d1:
                    9a:32:46:9b:23:e4:e2:0d:fe:82:a7:9b:11:42:e0:
                    44:9a:03:36:72:85:bb:61:06:fd:2c:29:b7:94:f7:
                    29:a8:12:a2:f7:9e:df:3a:a4:b1:68:16:d9:96:50:
                    c7:b8:6f:b6:fb:33:05:88:a5:2b:ca:ed:9f:ff:c0:
                    dd:7c:2b:49:49:36:ab:f3:6c:8a:bb:0a:08:96:96:
                    3a:2e:a8:e3:58:ea:0c:d0:d1:65:b0:11:db:8d:a4:
                    5a:0a:09:27:ca:bf:27:43:a1:b4:4b:90:e5:4f:df:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CB:77:B9:10:E6:BE:E1:50:52:9E:46:FF:C3:65:59:A6:A2:11:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bde5ebe-c9d1-31a1-a314-25b7f19fcb32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:b7:c4:e4:b4:fb:76:79:c0:9c:49:2d:fd:4e:85:62:c5:
         71:89:2a:6c:1f:f8:03:d4:25:9c:f5:47:39:db:57:fd:26:ff:
         71:82:70:78:09:88:47:e3:02:4e:2c:60:c6:53:72:b4:fc:31:
         ae:f1:ac:8a:81:c6:07:d1:c6:9d:ce:25:9f:e7:a9:b1:3c:b7:
         e9:6d:04:40:b7:7c:95:d3:c7:88:dd:25:1b:33:b1:e1:4d:4f:
         e3:77:ca:cf:9a:76:de:04:83:12:74:aa:6b:45:6b:3a:4e:c0:
         0b:8d:96:ae:c9:47:84:e4:95:59:6d:bb:85:89:4a:f8:f6:77:
         05:8c:e2:0a:bf:88:9d:17:44:7f:f3:5f:84:f4:f3:48:bf:6f:
         5d:5e:c6:3b:a7:27:9e:72:76:94:f4:b1:46:2e:16:9f:15:ae:
         06:db:9c:33:5a:d6:4f:b8:ac:5c:68:8b:99:42:41:11:69:42:
         12:27:89:3b:9a:b2:4e:03:52:15:32:93:69:09:01:74:d2:cc:
         89:40:80:d4:ee:cd:c6:e1:b4:68:a1:05:81:5e:ed:22:1f:d1:
         b1:96:76:2f:63:0d:4d:12:0e:8d:ad:d9:01:b6:3f:cd:b0:54:
         5d:52:15:63:3f:47:27:40:3f:3b:5a:b2:02:49:05:27:69:10:
         80:27:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:41 2025 by rpki-client