Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/cea4c25b-3421-3835-8474-141b9b04957b.roa
File:                     cea4c25b-3421-3835-8474-141b9b04957b.roa (raw, json)
Hash identifier:          iUgYX7TJAbp7NwVA8p3q57i44uqitNLjjQ4yDy+rau8=
Subject key identifier:   67:53:6D:D7:82:C1:BF:C9:0A:B0:A0:7B:3A:0D:FC:B7:17:3D:DC:B0
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F432858493C094214F1263CDFFCFDDF80
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/cea4c25b-3421-3835-8474-141b9b04957b.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     13576
IP address blocks:        75.102.160.0/19 maxlen: 19
                          75.102.160.0/24 maxlen: 24
                          75.102.161.0/24 maxlen: 24
                          75.102.162.0/24 maxlen: 24
                          75.102.163.0/24 maxlen: 24
                          75.102.164.0/24 maxlen: 24
                          75.102.165.0/24 maxlen: 24
                          75.102.166.0/24 maxlen: 24
                          75.102.167.0/24 maxlen: 24
                          75.102.168.0/24 maxlen: 24
                          75.102.169.0/24 maxlen: 24
                          75.102.170.0/24 maxlen: 24
                          75.102.171.0/24 maxlen: 24
                          75.102.172.0/24 maxlen: 24
                          75.102.173.0/24 maxlen: 24
                          75.102.174.0/23 maxlen: 23
                          75.102.174.0/24 maxlen: 24
                          75.102.175.0/24 maxlen: 24
                          75.102.176.0/22 maxlen: 22
                          75.102.176.0/24 maxlen: 24
                          75.102.177.0/24 maxlen: 24
                          75.102.178.0/24 maxlen: 24
                          75.102.179.0/24 maxlen: 24
                          75.102.180.0/22 maxlen: 22
                          75.102.180.0/24 maxlen: 24
                          75.102.181.0/24 maxlen: 24
                          75.102.182.0/24 maxlen: 24
                          75.102.183.0/24 maxlen: 24
                          75.102.184.0/23 maxlen: 23
                          75.102.184.0/24 maxlen: 24
                          75.102.185.0/24 maxlen: 24
                          75.102.186.0/23 maxlen: 23
                          75.102.186.0/24 maxlen: 24
                          75.102.187.0/24 maxlen: 24
                          75.102.188.0/22 maxlen: 22
                          75.102.188.0/24 maxlen: 24
                          75.102.189.0/24 maxlen: 24
                          75.102.190.0/24 maxlen: 24
                          75.102.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:42:14:f1:26:3c:df:fc:fd:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=38de23c5-515b-4e00-87fa-7c40e082ae63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:8e:a8:13:0f:d9:b9:53:c1:9c:a8:61:ca:
                    e6:14:cd:a1:43:5a:3a:5c:1c:18:02:73:db:7e:8f:
                    f8:47:c9:8b:1e:c7:41:32:3d:2f:70:d6:11:6c:10:
                    96:e4:1e:85:56:e7:a6:11:c5:7a:bf:16:d2:37:fb:
                    eb:92:87:93:1e:eb:6d:33:61:ea:12:a1:bb:c2:ba:
                    0e:85:4e:46:69:03:b1:55:27:1c:51:27:e0:35:50:
                    be:53:1b:13:00:10:34:e9:a8:dc:55:5a:28:a4:fb:
                    78:2e:8f:77:6a:bb:09:62:5d:42:2d:fb:43:6f:1c:
                    ed:34:a0:cb:3f:f3:e7:42:86:36:93:23:fd:74:eb:
                    a2:05:e1:69:d5:87:0e:89:ba:db:c4:b3:2b:f0:37:
                    bf:37:81:b1:16:b0:ec:47:bb:f3:bf:31:1e:d4:ca:
                    e9:7f:54:ce:53:a8:5b:f0:c4:50:1a:46:6f:0b:be:
                    44:e2:8e:19:fb:3f:1c:00:16:b7:ac:40:1d:dc:74:
                    69:dd:d3:89:fd:03:43:85:97:6c:93:cf:1f:11:cb:
                    3b:96:8d:7c:74:46:37:4b:0f:6e:0d:b1:57:1d:2b:
                    db:27:1e:c4:41:60:2e:54:06:a1:c1:5b:9f:7c:3a:
                    c7:7f:3e:e3:b5:c2:60:89:f3:70:b2:3d:39:c4:d8:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:6D:D7:82:C1:BF:C9:0A:B0:A0:7B:3A:0D:FC:B7:17:3D:DC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/cea4c25b-3421-3835-8474-141b9b04957b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:24:e9:0b:e5:f6:14:59:10:31:ea:da:25:0e:1b:7b:3e:b6:
         f9:fd:e7:b4:03:ed:c7:70:cb:fb:bd:2b:b9:79:d5:9b:f8:08:
         8c:88:82:15:2e:c7:64:e6:79:99:d1:9c:9d:6c:e2:2e:9d:c9:
         56:68:c3:36:c8:46:57:36:5e:e1:a6:aa:67:f1:76:8d:74:9e:
         41:51:14:90:d3:47:aa:5c:be:31:0b:6e:03:18:56:5e:dc:d9:
         7b:26:21:67:72:17:79:44:f4:f4:8b:0b:78:88:1b:74:8a:7d:
         32:a1:92:dd:58:9a:05:dd:37:82:17:f4:58:64:9a:12:77:d3:
         a3:49:29:b8:4e:cf:bb:96:32:78:71:df:8f:26:de:4d:26:d0:
         e0:c2:f5:35:be:c6:2d:a4:9b:5b:88:f9:6e:ef:3a:d4:0c:af:
         c7:b9:e0:ee:ca:7e:37:c3:00:b5:ae:77:a0:af:e9:92:f7:2a:
         bb:e5:53:d6:56:9a:6f:ec:79:71:0a:3e:e3:9d:93:8f:fc:97:
         c2:08:b5:36:56:5f:f5:fb:7d:94:36:5d:8c:be:37:42:c1:d3:
         46:85:e2:4d:90:04:97:9a:66:d8:cc:a1:4c:30:5f:28:c5:e3:
         d8:6f:25:77:f8:1f:61:66:42:4a:9f:56:43:28:c5:dc:50:1c:
         14:98:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:09 2025 by rpki-client