Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa
File:                     a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa (raw, json)
Hash identifier:          uYZRP0bpqzqxBhgc+GQCdHDuPticn+7b8gIt7FxLxIQ=
Subject key identifier:   36:87:E8:EE:3C:EA:BA:77:A1:86:B6:E1:BC:D9:08:37:84:DC:2B:F2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858492E13C3408603BE6D07211800
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        207.162.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c3:40:86:03:be:6d:07:21:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=8c3ba98c-ea2a-48d5-971c-e911aa36aa29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:ce:09:63:02:43:54:0f:53:70:02:b7:25:
                    75:66:f3:f3:d7:63:2c:08:76:d5:57:ad:bf:1d:ec:
                    79:8a:65:c9:db:c1:89:42:af:22:81:91:a9:3e:1c:
                    19:4f:4e:17:8d:a7:ef:64:cf:2a:56:e2:eb:a5:45:
                    81:81:05:24:af:98:3e:d6:a9:3b:30:e9:cb:60:0c:
                    3c:ae:ed:cb:92:93:05:ae:50:5f:e4:18:b1:ba:21:
                    30:5c:ff:a6:96:4e:bb:d2:0f:b5:9a:fa:db:c1:87:
                    96:21:0e:93:fc:ae:44:79:ce:78:25:20:98:a6:df:
                    a8:72:fd:37:33:96:25:ac:1e:74:dd:09:a1:f7:d9:
                    4f:ba:0d:17:d4:0e:79:3e:2c:fb:76:89:34:ab:5d:
                    27:50:1e:86:5a:4c:67:df:04:de:25:38:cb:85:1c:
                    e4:a2:29:81:65:24:70:9a:e1:bb:58:52:b4:c8:98:
                    be:a7:55:65:ad:b9:01:1c:cb:04:9f:83:a6:e9:f5:
                    96:e5:10:4d:36:8d:15:bf:6f:e9:ec:9c:7e:35:a5:
                    99:fb:58:fd:f0:70:f1:e5:b7:87:fb:0a:e0:1b:9b:
                    27:3c:a1:86:e1:58:94:a6:bb:2b:cb:f4:7c:d6:f8:
                    9c:03:6c:76:7d:28:f5:89:99:8a:5a:85:af:fa:ef:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:E8:EE:3C:EA:BA:77:A1:86:B6:E1:BC:D9:08:37:84:DC:2B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a9:3e:13:be:2d:16:d4:81:37:ab:28:95:40:09:9b:0a:f6:
         eb:b3:fb:3f:1b:63:d4:71:82:1c:6b:87:e1:80:be:dd:31:46:
         f4:1f:a8:84:fa:61:f0:0d:ec:51:5f:85:65:5f:f9:96:85:3a:
         9d:87:e1:a2:bc:7f:1e:9f:b8:8b:0b:40:cc:26:78:84:82:a9:
         f2:0f:30:74:48:78:ee:6c:d4:5a:a9:81:92:8d:42:f0:de:fd:
         04:12:bc:b6:c8:f2:e7:94:6f:3a:56:46:66:15:b8:f8:1c:07:
         3d:4a:9b:2b:c7:9d:2a:61:db:cb:ad:db:70:7a:17:5f:5d:ed:
         ab:6c:b4:b4:65:7d:d2:e3:7c:73:22:e3:56:b8:97:ef:7c:46:
         5d:0a:ed:ef:04:ef:d3:2e:39:f3:23:10:61:31:a9:bb:1b:39:
         94:55:25:bd:fc:76:4a:d7:f6:c1:f0:39:72:6e:bd:18:03:15:
         68:60:b3:d6:62:4c:7f:38:91:05:e7:ed:a8:31:19:32:9b:71:
         e5:d7:8f:af:4f:95:8e:e8:15:76:ff:63:dd:7a:cc:d8:8b:01:
         fc:5f:36:9b:4c:0e:3d:be:94:50:83:bc:79:85:06:35:de:6d:
         79:7f:c4:6f:a7:41:5c:7d:3d:c1:3e:79:b4:52:9b:e8:59:80:
         25:d2:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:17 2025 by rpki-client