Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/889d5620-873f-3359-89df-3debf0c55549.roa
File:                     889d5620-873f-3359-89df-3debf0c55549.roa (raw, json)
Hash identifier:          IvPPOJc/gioIn6d8MWAEZ9thgJmJ2TaxWvjLc9oa6rY=
Subject key identifier:   D8:02:9D:3D:BC:81:2E:D3:FE:34:74:79:B9:3D:B5:0C:B7:2B:2F:7A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847EE8A30BF422C1343679F4D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/889d5620-873f-3359-89df-3debf0c55549.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7155
IP address blocks:        75.104.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:30:bf:42:2c:13:43:67:9f:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=50723600-a28d-4d7e-8a95-2dff8642633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:f8:c9:1f:10:e4:15:88:82:51:00:2e:a7:
                    10:8c:9e:f9:98:bd:a6:a1:d9:8e:54:ed:16:cc:2e:
                    e4:19:af:65:2f:74:a2:0e:73:4e:ef:4d:a9:06:00:
                    db:19:c1:20:1c:07:c7:fc:41:84:99:4f:80:aa:64:
                    15:f8:32:fa:f9:f8:72:4c:13:dc:98:39:26:a3:64:
                    af:a9:49:a8:1a:e4:8c:ff:09:1b:9b:9b:2e:0e:45:
                    22:ce:88:d7:af:02:dd:f8:68:de:a9:bb:b6:03:4d:
                    d2:c8:41:af:b5:40:86:c9:32:79:3b:bf:b5:f8:cd:
                    3a:d2:b6:44:c9:56:4f:2e:34:2d:20:75:77:a3:67:
                    a0:c0:93:3f:fc:73:0b:9f:36:db:c1:10:72:29:b4:
                    97:6e:a3:d0:90:e4:34:17:86:b8:08:81:5c:e1:f1:
                    f1:f1:4b:b8:23:d3:ea:ed:01:28:27:1a:0a:c2:52:
                    ae:d8:25:8f:30:fc:7e:ed:31:dc:19:74:4f:ef:63:
                    16:f1:00:76:49:0c:5d:8e:da:bf:32:94:f4:7a:5c:
                    f9:69:4d:94:75:74:15:81:0f:91:c5:05:9b:6c:58:
                    2b:83:46:fd:67:fd:e7:48:bb:39:24:dd:51:66:a9:
                    fa:b4:25:97:d1:40:49:fd:c7:7d:63:5b:ee:d3:b4:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:02:9D:3D:BC:81:2E:D3:FE:34:74:79:B9:3D:B5:0C:B7:2B:2F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/889d5620-873f-3359-89df-3debf0c55549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:b7:88:f7:27:8d:9e:a8:08:96:4d:95:60:c3:df:f6:15:
         6b:57:6a:96:b8:55:02:aa:da:fd:c8:26:cf:fb:74:5b:77:f2:
         13:91:9e:35:37:f4:50:08:7f:9e:d0:da:d8:6b:41:2c:a4:af:
         57:65:1b:6a:c4:4d:ef:69:da:ab:36:78:7c:2c:79:a9:e3:76:
         d6:99:19:95:a5:25:90:d4:3a:ab:0a:e6:40:a9:dd:17:a1:8d:
         cc:04:1e:91:19:3d:9e:5d:a7:ac:33:5f:3d:95:d2:67:1a:1d:
         cf:9b:5c:54:31:94:0a:b0:d5:1d:43:94:df:9f:a2:fd:77:2c:
         3c:87:84:62:40:a0:f4:02:01:ed:15:3e:d5:90:69:79:a3:91:
         91:65:2f:89:4f:f9:dd:19:de:3c:3d:49:46:cd:0e:a4:1e:df:
         ad:e7:62:74:9d:1f:24:7c:14:28:0e:4c:64:8b:29:a4:22:50:
         46:0c:2f:7e:e3:b3:d0:85:bb:4e:a4:ef:4a:36:28:58:c9:5d:
         36:9a:d9:b8:bb:5e:d6:92:ad:07:bd:d6:32:53:b7:a8:ad:b0:
         41:3d:eb:89:78:49:fb:2a:bc:e5:b9:ea:19:4d:bc:8b:6c:42:
         57:66:24:e5:a3:41:7f:a7:f0:7c:8e:72:29:4f:2e:32:b8:39:
         04:1b:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:59 2025 by rpki-client