Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9074299b-2327-3141-afa7-97ae0b4f7943.roa
File:                     9074299b-2327-3141-afa7-97ae0b4f7943.roa (raw, json)
Hash identifier:          LrH0CsZG/b9uMun1kgQhjHM8Oytlt3x3pOudSaJOhag=
Subject key identifier:   9F:CE:D8:7F:E8:7B:CA:1F:AF:79:4E:80:67:87:DB:BF:50:69:6C:1F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ADACD99B76B12A703B070
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9074299b-2327-3141-afa7-97ae0b4f7943.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:da:cd:99:b7:6b:12:a7:03:b0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=fd64951b-5e23-49bf-bcbb-5a54f2e309ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:34:06:af:24:5b:ea:77:c0:47:28:f3:2c:
                    2b:44:e0:fb:a4:d2:05:70:85:51:c5:3e:d0:f8:39:
                    11:6d:64:cb:3d:23:ba:b7:22:9c:11:9f:ba:3a:38:
                    6e:1c:5e:04:b1:48:ac:76:b5:1d:0c:2c:4a:3c:7a:
                    db:57:be:d6:28:53:49:f4:6a:b1:48:ea:b2:50:64:
                    96:02:67:d0:20:33:ce:03:e1:23:43:77:67:84:10:
                    03:de:0c:17:df:0d:4b:25:96:0c:b0:28:7d:24:3e:
                    94:c5:05:b8:f6:7b:b2:14:87:d5:b2:a3:0a:40:89:
                    b1:90:a9:49:4a:30:0c:cf:a3:aa:df:14:46:fb:55:
                    e1:a4:b6:98:77:c7:aa:fd:c3:a0:c2:03:df:0c:b5:
                    28:11:7e:9b:8a:b4:d3:fb:6d:42:07:78:1f:97:12:
                    e9:d2:8c:b2:90:f4:b0:07:ab:12:f6:e2:1b:13:51:
                    08:da:9f:86:a1:34:11:6a:01:ad:17:03:e1:a1:69:
                    45:51:99:51:e8:41:8e:1d:94:99:8c:97:91:05:e8:
                    52:63:ec:b1:20:82:89:5e:0a:89:95:57:25:d8:a3:
                    d1:9f:61:b7:12:9e:75:7c:c2:4f:56:5e:bd:bd:9e:
                    11:68:b6:2c:9a:d6:7e:9c:b1:32:c5:c8:63:4f:0c:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CE:D8:7F:E8:7B:CA:1F:AF:79:4E:80:67:87:DB:BF:50:69:6C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9074299b-2327-3141-afa7-97ae0b4f7943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e5:fe:ce:d7:83:a6:61:2f:50:34:62:54:96:3f:ba:0c:55:
         73:0f:05:45:ba:c7:4e:ab:84:66:95:bf:16:cd:f1:f7:ff:58:
         9e:c0:33:fe:99:e4:c6:3b:37:8e:d5:af:ff:7f:5d:0a:1f:16:
         ca:75:9b:72:4f:e8:c0:e9:f6:25:3b:c9:10:b5:de:79:0e:bb:
         13:7e:6c:5e:1a:ab:3f:77:1e:16:10:94:62:73:9b:84:47:75:
         26:71:a9:d0:6d:b2:61:55:2d:3f:09:0b:73:de:85:6f:5f:11:
         31:0a:56:09:4a:72:09:5a:2a:f8:cd:dd:64:f8:a8:fd:f4:1e:
         d7:20:ce:d0:ca:78:d5:0f:dd:67:3e:0b:1d:84:72:b9:ce:5c:
         0b:20:3c:1b:b5:77:ad:79:41:98:a9:f6:d1:e5:41:db:4d:4b:
         0b:fd:10:5a:4d:fd:4a:fe:88:c9:44:eb:c2:1f:bd:5d:f0:b6:
         4d:00:02:0c:de:e8:44:38:61:19:11:a1:3f:2c:a8:5f:5b:df:
         4f:55:49:9a:9b:b7:00:cc:bc:5a:fb:54:06:79:15:52:1b:9a:
         ab:dc:4a:e1:da:05:0b:34:4a:21:90:6e:03:dd:ab:fe:68:24:
         2e:b9:e8:cd:5a:a7:c9:8f:d4:91:98:ef:7c:89:84:5a:3b:3e:
         37:08:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:40 2025 by rpki-client