Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa
File:                     71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa (raw, json)
Hash identifier:          PB+T14UiC/fhM462IBCFOhtVJRx7HxT80KhTdZtSnMo=
Subject key identifier:   26:1A:FE:0B:E5:D3:8B:EC:5D:4B:3E:93:DD:2D:D3:65:50:BA:D7:B5
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285848D4DB8F354A6D6C103CADF8C0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     62240
IP address blocks:        75.127.69.0/24 maxlen: 24
                          75.127.100.0/24 maxlen: 24
                          75.127.101.0/24 maxlen: 24
                          207.210.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:8f:35:4a:6d:6c:10:3c:ad:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=49a04738-4a07-4e00-9634-ed955d8c490e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:ef:2e:26:7b:62:60:2b:76:25:fa:10:50:
                    88:1d:7a:84:34:1c:8e:12:a1:e2:41:aa:2c:93:09:
                    b3:e6:e8:57:ea:b0:20:35:e1:4c:be:bb:e7:0d:ab:
                    21:5a:82:91:cf:0f:47:c8:ac:8f:1b:c3:ba:69:11:
                    a8:2e:72:e1:bf:f3:f8:98:f9:16:bc:19:8b:6b:a5:
                    89:fc:a7:a2:61:e5:0d:08:cd:3d:78:0e:f8:c6:9f:
                    dc:eb:4a:c2:7a:dd:a4:29:e0:c1:4b:40:71:d8:5f:
                    2a:b6:ff:49:8d:3c:04:14:31:fd:7f:18:74:da:43:
                    c7:99:0f:3d:2b:ab:ec:05:a4:0e:75:79:9f:46:bc:
                    06:2d:9c:08:a1:16:a7:4b:e9:8d:ae:25:3d:ab:63:
                    69:92:37:59:e5:42:e8:50:f8:4e:52:63:9d:28:0f:
                    ab:70:8a:f7:fb:1c:fe:7e:6a:3e:31:a7:bf:ea:04:
                    9c:8e:2d:01:fc:d4:a9:06:cd:00:55:00:ff:c4:71:
                    d7:9d:2a:98:74:a7:b0:35:a9:d0:44:43:0d:9a:3d:
                    63:d1:68:84:98:09:17:bf:2e:7c:88:e2:cc:b3:bc:
                    c5:c7:6e:94:f3:b1:09:92:42:b2:9d:4d:15:4a:22:
                    fe:5f:15:3c:27:86:5c:09:8a:f7:7c:82:cd:b0:1f:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:FE:0B:E5:D3:8B:EC:5D:4B:3E:93:DD:2D:D3:65:50:BA:D7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.69.0/24
                  75.127.100.0/23
                  207.210.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0b:93:9f:fa:b4:b0:1d:9b:2a:4b:b0:3c:71:ab:80:9d:bc:
         06:61:94:8d:2e:32:2a:ce:2f:b3:5a:ac:03:1d:3a:98:57:18:
         06:2d:3c:f7:2f:3f:2a:14:b9:4b:54:ad:b6:dd:1c:77:61:43:
         ec:51:24:eb:69:b1:fa:75:8b:ce:1b:e1:c4:c6:0a:27:fd:34:
         ba:d9:5d:f8:98:70:20:01:75:f0:68:8c:cf:4d:ac:92:37:7f:
         db:83:ca:91:e2:bd:27:92:13:7f:24:06:2e:68:00:82:1d:a7:
         21:c9:27:6e:86:5b:09:74:1f:d9:eb:86:86:2d:a9:9f:a7:fc:
         07:57:8b:62:49:9b:d6:a4:a6:10:bf:aa:bb:ac:ca:2f:2f:14:
         95:a5:48:7e:e0:6f:2d:9d:eb:86:63:39:de:88:50:63:21:b1:
         5c:50:64:7b:9e:02:aa:b5:db:7d:fa:f1:43:20:e9:b6:fb:90:
         b3:89:d7:d0:ef:16:51:ab:33:67:26:9a:f8:a1:31:da:da:03:
         fc:25:95:ca:db:86:40:c5:db:15:79:cc:ce:c8:7c:45:8f:5a:
         03:8b:5a:fd:37:65:3d:68:03:83:a8:5d:27:db:b1:a2:c5:a8:
         9e:08:7b:62:21:5c:19:a5:4c:69:90:98:8a:de:13:0a:98:e5:
         92:98:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:12:43 2025 by rpki-client