Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afbd5ebb-536d-3c49-80f2-8540b9ef361c.roa
File:                     afbd5ebb-536d-3c49-80f2-8540b9ef361c.roa (raw, json)
Hash identifier:          fqIV+YKed/mzRirksRb12jUWuwezLtDVqKckvtWdPw4=
Subject key identifier:   AE:9B:F0:57:73:A9:E2:C7:FE:6D:1C:83:7E:C5:79:99:F7:B0:FF:CC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE269ED8B458AE4BB2000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afbd5ebb-536d-3c49-80f2-8540b9ef361c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e2:69:ed:8b:45:8a:e4:bb:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=8c63d054-41a8-4fa1-8b61-36cc23169e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:38:34:bc:ea:14:9d:a6:e3:66:fc:32:5a:
                    b8:41:c8:d9:09:4a:c4:89:76:95:31:fb:05:c5:50:
                    cc:f6:89:cf:e3:16:74:32:03:7d:ee:f8:b4:44:bf:
                    14:d4:4c:3d:d2:eb:36:ce:ea:15:f0:ad:b9:cd:22:
                    20:8a:88:e5:a1:07:92:25:11:28:82:98:92:6a:0b:
                    07:c2:78:f8:ce:4b:71:48:75:1d:ee:c9:d9:41:2a:
                    59:69:8e:8e:6b:71:5f:67:bd:3d:2b:5a:f3:45:7c:
                    3b:51:40:e9:68:1f:44:4b:4f:45:6f:83:95:82:32:
                    1e:0b:ca:14:1f:6f:87:38:a9:bb:b0:b0:2e:20:41:
                    b9:6d:4b:33:68:3d:2e:aa:c9:a0:a1:b5:0d:e6:db:
                    4e:f2:c3:61:c5:50:16:99:a4:ca:e3:2d:f2:8b:cf:
                    a5:e4:d6:a6:33:79:27:a8:cd:a4:02:0b:a1:a3:a5:
                    84:35:5d:4b:c5:24:2a:86:b7:bf:5d:8d:20:e8:d0:
                    dc:e2:39:7a:2c:51:71:d2:ea:65:6d:a0:1a:05:fa:
                    9e:85:49:c2:9e:e9:fc:c8:21:67:16:e3:4a:db:38:
                    31:bc:92:d3:65:87:3e:7a:88:e0:92:c9:fc:8c:65:
                    eb:8a:fb:ba:87:10:31:b8:53:84:ba:38:12:d2:fb:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9B:F0:57:73:A9:E2:C7:FE:6D:1C:83:7E:C5:79:99:F7:B0:FF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afbd5ebb-536d-3c49-80f2-8540b9ef361c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:cb:55:cc:23:f5:53:2d:1e:02:de:90:de:08:e8:c4:00:
         02:cf:c4:59:1d:14:4d:56:17:3a:15:5e:4b:92:66:a1:03:2f:
         ac:f6:a3:3a:f6:b4:1a:7f:83:4f:e0:fc:3b:f3:2c:33:b8:26:
         5a:d7:e1:50:46:4c:89:fc:f7:c1:83:7b:c7:ec:a5:57:06:1e:
         e3:22:ab:db:4c:77:79:a0:a2:cf:95:ab:84:b4:5e:94:2f:5c:
         f2:e6:61:f2:74:80:35:16:15:f5:45:9b:06:7a:fb:6b:fd:f6:
         03:71:eb:af:b5:53:e0:3d:e5:eb:a9:2a:3a:36:be:84:9c:41:
         1c:48:cb:0c:41:a2:3c:7c:1d:95:4d:2b:53:d5:27:8b:be:1b:
         7b:da:a5:a5:d5:47:0f:04:76:b6:6f:a1:37:2a:a0:d2:3b:7c:
         2e:f7:25:48:03:6b:b2:f2:19:b8:45:98:85:ea:60:a2:a2:eb:
         1c:e6:21:77:7b:62:07:fe:51:12:7f:35:f2:aa:fc:24:34:3f:
         ee:0b:d1:04:f9:29:16:55:ec:87:c1:c0:7e:ac:31:8e:28:ff:
         16:7c:c4:99:20:a4:69:33:dc:8b:04:bd:e6:f8:bd:3b:d5:b7:
         d9:fe:0f:67:1f:f4:7c:11:ad:82:4c:e2:01:e1:e8:af:ce:82:
         a0:81:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:35 2025 by rpki-client