Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1281a657-bc2d-37fb-a0c6-c901ce197d18.roa
File:                     1281a657-bc2d-37fb-a0c6-c901ce197d18.roa (raw, json)
Hash identifier:          uyiGblJGP9NPbagvTKrUwWho+bTQoKx7+diYzMjapLI=
Subject key identifier:   2E:CC:A8:4F:79:0A:87:3E:0D:EF:0D:E5:53:DD:BE:4A:31:C4:F9:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ADAE579E70E6FFBB18980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1281a657-bc2d-37fb-a0c6-c901ce197d18.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:da:e5:79:e7:0e:6f:fb:b1:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=99372aaa-3bfa-4876-9727-feeb5bddb2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b6:88:44:12:17:27:87:5d:1f:2f:9e:1a:b1:
                    b0:25:4a:69:0b:0b:0f:74:25:e8:c3:3a:ad:ff:4b:
                    9f:44:a6:f0:f9:a4:de:42:85:4a:42:91:ef:89:fd:
                    3d:09:ef:05:9b:49:e8:72:e5:70:65:80:56:a7:e0:
                    71:8e:fd:d1:2d:fd:f8:ea:91:d1:14:db:2f:18:75:
                    13:bc:c1:db:12:0e:cf:16:b7:75:7e:3a:6a:ed:36:
                    17:cf:3e:72:5a:1b:22:28:69:96:6b:b9:f1:39:11:
                    e4:6b:67:08:95:b3:8f:7e:7a:04:5d:0e:fe:a6:a1:
                    8d:3d:df:f4:e2:49:b0:d7:73:d2:fd:84:fa:a6:8e:
                    ff:56:71:cc:45:a1:49:43:b5:90:32:44:26:18:bd:
                    0e:8f:bf:8c:38:55:67:40:f4:dc:d6:74:ec:cb:87:
                    2d:82:72:23:5d:f7:d2:a5:73:1e:01:a5:2a:8a:ca:
                    83:e9:4b:35:9f:a7:1a:f9:33:00:2a:2a:29:06:17:
                    e2:81:51:61:a7:39:b2:14:96:69:ac:98:96:01:37:
                    d7:af:84:b7:c6:04:52:eb:1e:3f:fb:22:00:ef:ab:
                    7e:45:51:ed:58:15:f3:8f:f0:52:50:24:f4:49:65:
                    7e:23:cb:5c:45:29:0d:92:6c:58:77:4a:b1:2b:8b:
                    a4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CC:A8:4F:79:0A:87:3E:0D:EF:0D:E5:53:DD:BE:4A:31:C4:F9:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1281a657-bc2d-37fb-a0c6-c901ce197d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:88:73:8e:62:b1:5c:3c:a6:ed:e8:15:ec:1e:73:b0:ea:7f:
         0d:54:93:9d:4e:36:6d:d8:dc:24:cd:98:bf:33:91:81:6f:68:
         de:7a:1e:43:a6:2f:54:5a:3d:bb:2b:20:dd:c1:a8:2e:75:29:
         b6:27:4b:4d:7b:f8:9a:5e:c9:0e:b0:8a:ae:62:ad:c2:2a:e3:
         eb:da:7e:f6:49:89:ff:c5:31:11:3e:af:4f:0f:6e:7c:2f:5d:
         e0:c5:3f:c4:0a:94:19:41:16:b7:4f:ea:05:55:a6:0a:64:aa:
         ad:a6:d1:9b:42:e7:64:db:35:11:bb:f3:b0:c3:b6:bd:c2:e6:
         e7:27:fc:ea:7e:4e:6e:72:37:80:83:44:c1:31:d1:23:f8:7d:
         33:2f:89:a7:64:65:2f:64:70:a4:17:ee:e9:f6:71:a5:af:84:
         4e:32:09:54:f8:c6:71:24:7f:bc:a8:64:2e:fc:23:d7:21:1e:
         b9:2e:44:1d:36:28:4d:50:5a:5b:40:57:41:40:21:e8:3c:7a:
         bb:89:56:e1:eb:8c:35:12:48:ca:b9:c6:ff:2c:3a:c6:4e:04:
         25:3b:c0:07:41:63:fc:cd:21:40:89:43:93:6a:f5:c0:bc:1a:
         33:51:00:45:60:72:70:52:90:bd:21:19:ee:5c:bf:78:6d:d6:
         8c:10:d0:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtrleecOb/uxiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTkzNzJhYWEtM2JmYS00ODc2LTk3MjctZmVlYjViZGRiMmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LaIRBIXJ4ddHy+eGrGwJUppCwsPdCXowzqt
/0ufRKbw+aTeQoVKQpHvif09Ce8Fm0nocuVwZYBWp+Bxjv3RLf346pHRFNsvGHUT
vMHbEg7PFrd1fjpq7TYXzz5yWhsiKGmWa7nxORHka2cIlbOPfnoEXQ7+pqGNPd/0
4kmw13PS/YT6po7/VnHMRaFJQ7WQMkQmGL0Oj7+MOFVnQPTc1nTsy4ctgnIjXffS
pXMeAaUqisqD6Us1n6ca+TMAKiopBhfigVFhpzmyFJZprJiWATfXr4S3xgRS6x4/
+yIA76t+RVHtWBXzj/BSUCT0SWV+I8tcRSkNkmxYd0qxK4uk7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7MqE95Coc+De8N5VPdvkoxxPkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTI4MWE2NTctYmMyZC0z
N2ZiLWEwYzYtYzkwMWNlMTk3ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2jdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6Ic45isVw8pu3oFewec7Dqfw1Uk51ONm3Y3CTNmL8zkYFvaN56HkOm
L1RaPbsrIN3BqC51KbYnS017+JpeyQ6wiq5ircIq4+vafvZJif/FMRE+r08Pbnwv
XeDFP8QKlBlBFrdP6gVVpgpkqq2m0ZtC52TbNRG787DDtr3C5ucn/Op+Tm5yN4CD
RMEx0SP4fTMviadkZS9kcKQX7un2caWvhE4yCVT4xnEkf7yoZC78I9chHrkuRB02
KE1QWltAV0FAIeg8eruJVuHrjDUSSMq5xv8sOsZOBCU7wAdBY/zNIUCJQ5Nq9cC8
GjNRAEVgcnBSkL0hGe5cv3ht1owQ0H4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:21 2025 by rpki-client