Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d7b651b1-83b8-3d61-8c98-e8171ace3531.roa
File:                     d7b651b1-83b8-3d61-8c98-e8171ace3531.roa (raw, json)
Hash identifier:          QnTbVDd3FykVnO3k996e9SGAi3QgM4bq1tMqDs6X/08=
Subject key identifier:   CF:8A:14:56:74:0C:60:62:A1:3A:E4:12:09:7B:B6:EA:ED:42:21:47
Certificate issuer:       /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial:       010D0C9F43285848BE862F552AEA08EB13866B80
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d7b651b1-83b8-3d61-8c98-e8171ace3531.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     26714
IP address blocks:        75.108.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2f:55:2a:ea:08:eb:13:86:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=b6ba7996-ed0e-49db-9b16-7091f785859d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:a6:2b:a7:0a:43:9e:2f:b2:88:7c:ee:12:
                    17:14:5e:b7:46:50:1d:91:95:7e:cb:5d:44:7c:5f:
                    e0:2f:0f:1e:99:90:a5:42:9c:01:40:c0:38:77:c0:
                    e8:c0:cc:bf:ac:69:01:0a:b3:dc:98:27:72:78:2a:
                    a1:6b:6e:57:5a:c5:4c:63:60:de:ab:1e:eb:b0:f2:
                    d9:7e:ab:9a:ec:9e:5b:47:5a:65:21:3e:28:6d:f8:
                    19:54:ee:60:12:49:1f:3b:10:9b:84:df:2e:84:a6:
                    9c:0a:31:a0:a0:ba:0e:14:9b:1f:17:46:ed:c0:b7:
                    30:67:51:0e:c1:09:21:af:40:99:45:32:cd:c1:3b:
                    e0:91:95:05:65:6e:78:a9:74:dd:6e:75:4f:d1:ff:
                    63:1a:be:44:5d:a6:23:b8:47:3b:7e:d1:55:a3:6e:
                    ea:dc:91:23:b0:b4:9c:b5:21:bd:ee:99:c6:97:85:
                    ea:d5:eb:94:ba:6b:a4:3d:9b:3a:3e:e8:9d:5e:8a:
                    e1:50:21:e3:d6:63:5c:f9:57:32:53:68:a8:8d:9f:
                    46:42:5e:17:1d:3b:02:fd:ca:97:77:d8:92:56:eb:
                    c1:ed:12:87:4a:f7:b6:f5:d1:60:e4:37:f0:32:7d:
                    2f:bf:34:22:04:67:ea:4b:54:dd:80:fa:69:64:59:
                    ad:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8A:14:56:74:0C:60:62:A1:3A:E4:12:09:7B:B6:EA:ED:42:21:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/d7b651b1-83b8-3d61-8c98-e8171ace3531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.108.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:73:d7:46:8f:f7:b0:a6:dd:20:48:5b:06:85:87:d2:f2:
         66:09:8c:85:1e:9b:7a:2a:c4:27:0d:e9:b7:27:34:ee:07:f9:
         01:7a:f3:a0:f4:bb:07:ac:ed:ea:74:48:67:58:73:ea:61:0d:
         4e:42:7f:c6:d6:dd:c0:80:a1:14:75:e9:c1:0b:b2:54:24:9f:
         18:a1:05:4d:64:30:dc:20:eb:e5:57:84:4d:d3:9a:53:85:0e:
         fd:a9:18:b8:8e:41:2e:ce:c4:5c:1a:66:a2:95:6d:93:8f:89:
         f1:2d:2b:85:dd:3d:31:d5:ee:32:3b:cd:74:c4:fc:08:bb:13:
         d5:f1:d1:c6:2a:0c:37:e3:57:92:71:f2:2d:41:46:f2:25:13:
         02:7c:7e:37:8f:2e:c2:56:b4:42:bb:06:88:a7:05:76:a3:74:
         93:a0:09:d5:22:68:16:e7:e0:18:8b:c9:6c:5b:3c:b8:9a:0b:
         d0:19:dd:cd:b7:81:55:60:50:2c:74:bc:0f:84:39:45:3d:32:
         f2:4c:d0:35:0d:da:bc:dc:e8:e3:47:67:4a:c4:c3:2c:16:08:
         42:0a:7f:a2:62:4d:ea:b9:b2:22:b0:93:b9:3b:24:51:45:62:
         25:64:ab:a8:c6:e9:90:15:1c:a2:90:4f:8e:d8:96:12:a9:1b:
         d1:ad:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:51 2025 by rpki-client