Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5cee3f63-61ab-349a-823f-fc8ce1937343.roa
File:                     5cee3f63-61ab-349a-823f-fc8ce1937343.roa (raw, json)
Hash identifier:          2EAh/6Zyt/1niGuLGJoaRu42ljhdJW+Ib5j0zQBIsf0=
Subject key identifier:   8B:AE:D9:EB:41:13:A7:5C:76:A4:E4:41:55:EE:34:1C:CE:15:37:B4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858488AE0AD20814A5EA07823BF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5cee3f63-61ab-349a-823f-fc8ce1937343.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     7029
IP address blocks:        75.117.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:ad:20:81:4a:5e:a0:78:23:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=eb25aed5-2243-487d-8b0a-40187c60eebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:9c:fa:d9:da:50:c0:a4:07:0e:0b:50:20:
                    e0:da:ef:5b:c9:ac:75:89:68:b1:6d:40:6f:0a:d9:
                    75:26:79:eb:65:f9:8e:22:6b:e4:24:3a:cf:20:09:
                    5e:8e:28:6d:2d:63:85:4e:95:ee:35:a8:ad:44:d7:
                    66:83:38:17:9c:fd:cc:74:58:70:aa:5c:1f:dc:76:
                    bd:f3:a0:43:de:b0:69:64:91:b7:62:a7:a7:6f:04:
                    f8:a6:5b:ed:70:31:ec:48:9d:7a:15:e2:a0:84:db:
                    a7:39:f4:2f:b4:96:51:47:49:78:ce:6f:9e:e8:15:
                    05:87:c4:9a:4c:45:78:43:66:71:ee:d0:73:bf:4a:
                    2a:14:b9:1f:76:04:2c:29:1c:a7:87:08:54:c2:1b:
                    3c:f2:19:ae:e0:ea:e5:57:59:b8:6b:04:7d:da:37:
                    c9:ac:03:2b:2a:c4:78:30:52:e2:ea:27:66:a2:5c:
                    8a:0e:57:d9:84:1e:19:d6:09:8f:58:bd:11:d7:0f:
                    2a:fc:ba:c3:8f:06:53:66:00:88:d2:d5:46:16:b0:
                    4c:82:79:ed:92:68:b7:5b:f0:6b:de:ac:3a:96:34:
                    18:59:90:f5:8e:99:0a:cf:5d:ac:bc:aa:48:3c:44:
                    f9:60:fd:d2:96:de:e5:d8:b8:b9:a6:a0:28:ea:e1:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:D9:EB:41:13:A7:5C:76:A4:E4:41:55:EE:34:1C:CE:15:37:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5cee3f63-61ab-349a-823f-fc8ce1937343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:3c:4c:e5:46:6e:49:2a:1c:cd:55:41:d7:a4:2a:de:b9:
         a4:d3:fe:7d:6b:b2:1b:c5:22:70:8c:4b:22:78:0d:0a:f8:7f:
         b1:b3:e7:33:08:47:56:e7:6f:3c:ee:1a:43:a2:ae:bd:e0:2f:
         2b:72:48:6e:d2:40:5a:26:15:aa:82:d2:7a:3a:2a:d1:50:46:
         4f:99:45:5e:20:cf:c2:de:9f:c7:76:e0:09:00:65:af:5d:88:
         d6:40:aa:f8:fd:18:c5:34:ca:88:b5:d3:ac:3a:5f:36:f4:88:
         24:7e:5b:e3:1e:11:c4:d6:fe:ab:2b:4b:90:45:ac:5a:9a:2b:
         40:45:15:0f:bf:f0:88:a9:c9:32:12:cd:fc:6e:46:15:69:45:
         3b:c9:b3:39:44:2e:11:89:79:0e:76:53:80:c0:a3:d1:92:40:
         52:bc:d1:73:41:68:7d:6c:dc:0b:80:94:eb:f8:7b:b9:86:ba:
         55:55:ab:df:1c:28:11:0a:84:44:e9:68:5c:84:87:ac:19:ac:
         50:0d:a4:9e:4d:d0:a6:31:0e:b0:83:6b:db:4c:fc:75:21:0c:
         d4:2b:83:1f:60:42:69:4b:69:2e:66:36:02:fe:a0:f2:00:63:
         60:c2:25:49:b2:93:13:c1:60:fc:a1:cc:08:e7:64:de:fe:b7:
         18:b0:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:05 2025 by rpki-client