Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/abe2a05d-8529-3adb-8c5a-d818dac414d7.roa
File:                     abe2a05d-8529-3adb-8c5a-d818dac414d7.roa (raw, json)
Hash identifier:          5GS9Ehbj3qqAHWgkiy0lKrg6bhqz8mdh4ZVtv3/WDZw=
Subject key identifier:   27:55:10:6E:69:1E:A3:A7:8C:C7:06:31:31:65:43:61:89:8F:8E:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584851A57143791352990A804EA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/abe2a05d-8529-3adb-8c5a-d818dac414d7.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        75.104.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:71:43:79:13:52:99:0a:80:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=ad365e6d-9a11-47c9-b532-9a082ea7bbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:08:4b:03:92:0f:da:21:a6:09:44:0b:2c:
                    27:2d:ae:79:60:cc:38:75:16:90:ce:18:bf:04:71:
                    26:ff:a4:41:b5:18:e2:70:93:07:ec:35:77:64:a5:
                    44:55:3f:e2:cc:d5:47:62:9d:ef:58:fd:ab:d4:aa:
                    df:a4:b6:85:59:51:93:59:a5:25:16:19:6e:f3:c9:
                    7c:25:b4:a6:d1:ec:5b:de:3b:7b:97:ad:95:4d:ac:
                    3d:47:87:6e:b2:21:d0:75:1a:8f:f7:60:66:a6:42:
                    06:ac:69:15:76:ef:e4:9d:18:7a:2c:c2:0f:ab:cd:
                    50:71:3e:c9:38:ed:f4:c6:7d:62:d0:e2:f9:3c:58:
                    65:9e:69:9b:fc:d0:9c:de:2c:c4:26:8f:40:07:9a:
                    c6:4b:d4:bb:58:b5:70:97:83:9d:35:46:96:cb:e2:
                    8f:c6:fd:e8:6d:78:72:3d:9d:e1:4a:c8:03:79:e7:
                    a1:ce:bd:0a:f0:00:a6:79:f1:25:b1:98:4a:d5:23:
                    5c:e8:ab:3e:48:bc:36:99:cd:7e:63:da:17:43:65:
                    5f:b1:c2:07:ed:7e:53:57:06:a5:6f:6a:dc:eb:2a:
                    1d:a3:d4:3e:69:b3:51:1d:cf:45:f5:b2:bd:42:a4:
                    e0:bd:c4:4b:9b:ed:ff:55:53:50:43:67:85:b3:a1:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:55:10:6E:69:1E:A3:A7:8C:C7:06:31:31:65:43:61:89:8F:8E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/abe2a05d-8529-3adb-8c5a-d818dac414d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:19:9c:e3:af:37:33:ff:17:e6:18:1b:c4:13:03:eb:11:
         48:4a:0e:26:97:39:01:0f:3b:71:fb:77:b9:32:89:e8:a5:b3:
         b8:5b:ff:48:3a:8f:d0:79:d1:ff:2e:16:54:ad:26:38:62:46:
         03:2c:6b:32:f1:7a:a8:b5:bc:2d:f0:22:27:45:44:e9:13:b2:
         f4:e0:f5:38:11:91:a7:d7:74:01:4d:80:03:a5:d8:9f:0c:06:
         00:fc:bb:08:0c:c5:1e:39:9d:d7:2a:66:39:76:c2:98:2c:0f:
         fd:0e:49:1a:de:ec:d7:d1:8d:1e:ce:27:23:3a:60:87:ec:68:
         58:65:17:5f:38:5d:6c:e1:b6:bd:f3:5c:f7:cd:22:37:b6:de:
         ac:d0:dc:65:2b:72:72:5f:94:86:19:a6:d0:4b:6d:a7:90:82:
         e1:7e:ff:64:45:9c:5e:5a:eb:ee:2e:75:d4:97:cf:cb:4e:b6:
         59:30:61:a3:8f:e2:3b:d6:42:6e:61:ce:47:47:03:84:56:64:
         dc:a3:8e:dc:e6:5c:db:d2:7f:18:90:eb:df:2a:21:16:08:71:
         5f:bc:8e:ff:f4:03:66:f2:eb:35:e3:f0:d4:1a:e4:aa:3b:a9:
         4a:df:74:e0:b3:15:af:6e:a1:8f:ca:7f:4b:66:b2:d7:05:f3:
         c1:16:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:28 2025 by rpki-client