Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/428e6b36-2ee3-332c-8d2e-182c581664ee.roa
File:                     428e6b36-2ee3-332c-8d2e-182c581664ee.roa (raw, json)
Hash identifier:          MUG8vWh7mj28+hYs04bDJpha+1rQ6vsdLVre1Ndhc2Q=
Subject key identifier:   DC:32:8B:C5:24:F2:56:DA:15:03:EA:D8:EE:0A:EF:8B:47:6B:7C:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE15D99F6DE3C7B1C2980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/428e6b36-2ee3-332c-8d2e-182c581664ee.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.105.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e1:5d:99:f6:de:3c:7b:1c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=036ad6f2-8457-47e0-b2a6-da420d14ac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:68:4f:fe:a6:b1:8d:b9:94:8d:a9:58:de:
                    c9:f5:ad:4b:88:7b:cd:04:41:b8:8f:28:0d:57:bb:
                    79:e8:86:91:86:17:b9:ed:29:70:64:94:34:34:17:
                    f1:91:15:a4:12:aa:bf:e8:24:f8:fb:86:ee:de:60:
                    32:9d:0b:ac:30:3b:14:09:ec:68:cf:0f:7d:b4:00:
                    b3:7a:99:6e:d2:7b:81:b0:06:45:b5:56:78:2a:f9:
                    73:aa:5e:21:77:33:b7:67:dc:d0:f1:a2:9f:eb:ff:
                    3e:04:8d:e5:e2:30:c7:54:59:98:44:32:1b:17:7c:
                    ce:93:42:30:cb:bf:88:cf:b6:c6:44:d2:83:cb:0b:
                    2f:a8:2e:a1:b9:78:8b:fa:8c:29:87:15:5a:b4:cf:
                    a4:d4:05:5a:db:ea:9c:51:78:1e:8d:a7:a3:c6:6d:
                    0a:1e:4c:d1:cf:34:a7:18:f3:b1:ff:44:70:5f:3a:
                    3a:00:09:e5:7b:d9:13:56:31:94:c8:b2:b1:20:86:
                    fe:9f:ee:8a:b3:ef:b5:11:83:70:82:d8:4d:5d:e5:
                    1b:25:09:e3:4c:a9:1c:55:ca:a3:d0:9a:8c:27:ab:
                    1a:2b:56:2d:9d:ab:97:d5:56:e5:c7:16:97:7f:03:
                    4c:a5:7f:47:e3:56:c1:47:3d:80:03:fa:c0:65:57:
                    b0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:8B:C5:24:F2:56:DA:15:03:EA:D8:EE:0A:EF:8B:47:6B:7C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/428e6b36-2ee3-332c-8d2e-182c581664ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:f9:b9:81:da:c8:ed:da:4d:13:08:a6:a1:16:7e:d1:e6:
         56:03:30:ef:9b:31:a5:72:8c:4a:d5:26:9a:db:7d:a6:01:b7:
         85:0e:5c:f0:c9:2b:c2:06:72:d1:3c:8c:b7:b0:aa:9d:dd:a2:
         41:46:9b:9d:53:1e:2e:3f:c8:dd:3c:8c:ae:6e:a2:73:8b:be:
         8e:a8:c8:0e:b0:77:56:58:d7:ed:d0:c4:fa:77:cb:88:46:d1:
         d1:9e:35:b9:ba:de:a8:3a:f0:96:76:3e:3f:61:d2:1b:79:61:
         30:3e:b0:ed:3e:cf:b1:35:4d:59:20:b1:6a:95:6b:24:51:82:
         d0:3a:1b:1c:c0:9c:b8:53:13:fb:92:7c:ae:35:68:3e:bb:5e:
         32:24:f5:f2:a9:b2:17:79:5f:b9:76:3f:7a:98:c7:a9:3c:a0:
         17:84:0b:69:9c:ca:95:13:66:56:8d:63:f7:14:52:e6:a8:6b:
         c3:3e:46:c1:6b:96:87:b5:e1:43:09:14:85:3a:96:03:16:d9:
         02:ee:07:55:c3:e5:cf:db:5c:17:d2:d6:55:85:1d:00:38:8e:
         3f:cb:ee:38:d8:c3:7f:47:40:b8:47:a1:c1:2d:a8:ac:6c:bb:
         59:21:8a:b9:9c:33:a0:8b:a4:92:05:e7:7f:ff:d3:33:03:46:
         d4:2e:33:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKuFdmfbePHscKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MDM2YWQ2ZjItODQ1Ny00N2UwLWIyYTYtZGE0MjBkMTRhYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzdoT/6msY25lI2pWN7J9a1LiHvNBEG4jygN
V7t56IaRhhe57SlwZJQ0NBfxkRWkEqq/6CT4+4bu3mAynQusMDsUCexozw99tACz
eplu0nuBsAZFtVZ4Kvlzql4hdzO3Z9zQ8aKf6/8+BI3l4jDHVFmYRDIbF3zOk0Iw
y7+Iz7bGRNKDywsvqC6huXiL+owphxVatM+k1AVa2+qcUXgejaejxm0KHkzRzzSn
GPOx/0RwXzo6AAnle9kTVjGUyLKxIIb+n+6Ks++1EYNwgthNXeUbJQnjTKkcVcqj
0JqMJ6saK1YtnauX1VblxxaXfwNMpX9H41bBRz2AA/rAZVewlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwyi8Uk8lbaFQPq2O4K74tHa3zmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDI4ZTZiMzYtMmVlMy0z
MzJjLThkMmUtMTgyYzU4MTY2NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2nhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu5+bmB2sjt2k0TCKahFn7R5lYDMO+bMaVyjErVJprbfaYBt4UOXPDJ
K8IGctE8jLewqp3dokFGm51THi4/yN08jK5uonOLvo6oyA6wd1ZY1+3QxPp3y4hG
0dGeNbm63qg68JZ2Pj9h0ht5YTA+sO0+z7E1TVkgsWqVayRRgtA6GxzAnLhTE/uS
fK41aD67XjIk9fKpshd5X7l2P3qYx6k8oBeEC2mcypUTZlaNY/cUUuaoa8M+RsFr
loe14UMJFIU6lgMW2QLuB1XD5c/bXBfS1lWFHQA4jj/L7jjYw39HQLhHocEtqKxs
u1khirmcM6CLpJIF53//0zMDRtQuM+M=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:58 2025 by rpki-client