Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa
File:                     7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa (raw, json)
Hash identifier:          iLcNeXTx6GKQcerHl1+InFTmCdcU+j/xKTGaY31tRZs=
Subject key identifier:   68:18:3F:D9:B7:E2:4F:98:B9:98:9D:1D:9E:47:7F:D5:1D:F0:08:7C
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848F2AABBD1C26937A1284BC540
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa
Signing time:             Thu 20 Feb 2025 18:16:31 +0000
ROA not before:           Thu 20 Feb 2025 18:16:31 +0000
ROA not after:            Wed 21 May 2025 17:16:31 +0000
asID:                     7029
IP address blocks:        75.117.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:aa:bb:d1:c2:69:37:a1:28:4b:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 20 18:16:31 2025 GMT
            Not After : May 21 17:16:31 2025 GMT
        Subject: CN=72d06a90-843c-4e7d-8036-b9c356825bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:4c:5e:d0:b2:6c:ec:12:44:e8:de:d9:54:
                    b6:df:62:57:b2:93:10:88:e9:0d:66:97:d4:53:67:
                    0a:f1:a4:f9:c9:9e:bc:6f:00:2e:27:ab:9d:f9:75:
                    ed:b8:6b:c7:87:a1:cc:2f:8b:92:8e:7c:14:56:5d:
                    03:62:b6:30:c9:cf:0f:29:c3:a8:06:8a:69:12:12:
                    d4:01:82:09:b9:3b:9b:5e:b9:88:f9:bd:e2:3a:18:
                    41:9d:e3:cf:96:6a:9f:1c:40:cc:e7:3f:b3:c1:9c:
                    b0:89:f7:a6:5b:96:53:9f:a9:7e:fd:1e:aa:59:7f:
                    39:e6:2e:6c:06:35:2d:03:73:4f:18:cd:97:ae:07:
                    a7:53:57:e7:62:2b:fb:5e:00:9f:40:d4:c3:f7:e3:
                    58:47:b3:ff:8c:da:fc:80:03:d5:b9:01:44:54:63:
                    e1:35:5c:80:03:e4:0a:d4:29:35:9c:14:e3:60:fe:
                    40:02:a1:0e:15:f0:bd:de:61:d8:69:65:14:d6:11:
                    ad:5b:98:6e:b8:94:0a:71:08:97:ca:bb:13:b6:5a:
                    dc:33:5b:45:3d:4a:aa:4c:47:b2:d3:cf:16:8b:94:
                    2c:4a:6c:7e:c5:8d:66:4d:94:d8:7c:52:28:4b:0f:
                    90:8d:6f:e7:fd:3d:c7:f0:e5:af:28:55:f7:4c:f3:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:18:3F:D9:B7:E2:4F:98:B9:98:9D:1D:9E:47:7F:D5:1D:F0:08:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd4c02a-5ee8-3d01-bdf1-cb5a5d68b0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:cb:1a:89:af:b9:91:40:21:fd:fc:40:89:f7:3d:1f:e4:
         6a:ad:b1:e6:01:b8:87:56:7c:69:b1:1e:c0:d7:3d:a4:05:25:
         7a:bf:b3:13:7b:14:ff:2b:05:2c:bc:2c:26:9f:5e:b3:e0:96:
         17:03:54:4b:81:ae:23:72:2d:98:f4:dd:8d:fe:96:85:03:2f:
         1b:7d:4c:db:23:a8:08:25:65:82:73:e2:e9:a2:90:2c:00:b5:
         18:09:be:2c:fd:56:96:b6:40:b3:04:1a:48:9b:2a:e4:ac:56:
         6b:1b:a2:e3:8d:4b:b0:e6:e7:aa:90:19:86:52:1c:49:9c:23:
         60:81:15:83:53:33:a4:d5:dd:9a:ad:de:2a:9f:4d:19:e1:7f:
         0a:c3:e0:e7:d6:82:2a:09:55:4d:e8:6f:46:65:ed:eb:2d:eb:
         aa:16:06:3a:a0:26:b6:fd:24:de:54:6e:d9:ab:f4:62:ca:25:
         3e:42:00:cd:5d:4b:63:65:3e:0a:0e:5b:f0:4c:d0:5d:6f:c5:
         71:93:72:45:81:80:26:5c:9c:78:eb:2e:75:06:a6:ad:b8:05:
         a7:27:1d:97:8c:d8:05:07:30:94:95:9b:f0:66:0e:56:94:0d:
         d0:b5:1b:5a:a1:73:b7:aa:61:e7:21:f6:c0:e5:04:e7:81:aa:
         12:8f:38:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqrvRwmk3oShLxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIyMDE4MTYzMVoXDTI1MDUyMTE3MTYzMVowLzEtMCsGA1UEAxMk
NzJkMDZhOTAtODQzYy00ZTdkLTgwMzYtYjljMzU2ODI1YmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkalMXtCybOwSROje2VS232JXspMQiOkNZpfU
U2cK8aT5yZ68bwAuJ6ud+XXtuGvHh6HML4uSjnwUVl0DYrYwyc8PKcOoBoppEhLU
AYIJuTubXrmI+b3iOhhBnePPlmqfHEDM5z+zwZywifemW5ZTn6l+/R6qWX855i5s
BjUtA3NPGM2XrgenU1fnYiv7XgCfQNTD9+NYR7P/jNr8gAPVuQFEVGPhNVyAA+QK
1Ck1nBTjYP5AAqEOFfC93mHYaWUU1hGtW5huuJQKcQiXyrsTtlrcM1tFPUqqTEey
088Wi5QsSmx+xY1mTZTYfFIoSw+QjW/n/T3H8OWvKFX3TPNNFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgYP9m34k+YuZidHZ5Hf9Ud8Ah8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RkNGMwMmEtNWVlOC0z
ZDAxLWJkZjEtY2I1YTVkNjhiMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3VUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADq4yxqJr7mRQCH9/ECJ9z0f5GqtseYBuIdWfGmxHsDXPaQFJXq/sxN7
FP8rBSy8LCafXrPglhcDVEuBriNyLZj03Y3+loUDLxt9TNsjqAglZYJz4umikCwA
tRgJviz9Vpa2QLMEGkibKuSsVmsbouONS7Dm56qQGYZSHEmcI2CBFYNTM6TV3Zqt
3iqfTRnhfwrD4OfWgioJVU3ob0Zl7est66oWBjqgJrb9JN5Ubtmr9GLKJT5CAM1d
S2NlPgoOW/BM0F1vxXGTckWBgCZcnHjrLnUGpq24BacnHZeM2AUHMJSVm/BmDlaU
DdC1G1qhc7eqYech9sDlBOeBqhKPOLo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:44:13 2025 by rpki-client