Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa
File:                     b21bfef4-3d47-3e84-b423-ba543632cf2f.roa (raw, json)
Hash identifier:          ACb1ZCONlWLFmcr6TqRBRQy6auhtOamGfKhpSQFj4nk=
Subject key identifier:   16:6F:16:B9:74:13:5F:F2:A9:47:72:F5:07:57:99:68:FF:C0:E3:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A4C302CB947B3DBF7E004
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.105.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:4c:30:2c:b9:47:b3:db:f7:e0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ac9fca72-6424-423d-8264-17691f414d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:12:6d:ab:21:ad:fa:58:d1:1f:4d:ee:02:
                    be:9b:1c:94:68:f4:30:4c:6a:2e:41:a0:1b:df:38:
                    8d:38:cc:f5:15:29:dc:7d:06:78:b5:45:fc:f1:a4:
                    87:eb:87:83:23:9a:2e:4e:e0:45:32:5c:39:8a:15:
                    d8:34:f3:e9:fc:1b:39:d3:00:97:51:ab:2f:7f:84:
                    7e:d5:cc:54:17:18:28:02:4d:11:29:78:46:35:aa:
                    47:c6:79:99:9e:d6:0b:ab:41:4f:dc:16:ec:7e:fc:
                    61:ca:35:0d:5c:44:45:ca:9b:e4:12:2f:9e:76:41:
                    94:58:66:46:7a:92:9e:b3:14:2b:a6:41:47:30:44:
                    9f:8e:5f:dc:9b:6e:e0:45:88:fc:c7:f1:f1:7b:b6:
                    d7:c9:7a:7e:42:e5:96:91:6c:52:10:65:ae:88:a1:
                    14:89:4a:f4:8c:d9:80:e0:7f:f8:e5:9b:13:1e:72:
                    eb:f9:03:33:07:c2:5c:77:97:53:6c:20:7d:0d:d6:
                    5f:22:1e:42:ab:d0:ea:ee:3d:a5:70:f5:be:8f:0b:
                    f1:e4:f8:c6:fe:ec:2e:72:99:b3:81:4b:c5:21:05:
                    37:21:43:52:ff:15:f5:4b:6f:8b:01:89:f4:1c:b0:
                    43:64:a2:b5:51:3a:5c:b0:c8:63:6d:c2:c3:18:64:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6F:16:B9:74:13:5F:F2:A9:47:72:F5:07:57:99:68:FF:C0:E3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:d1:9f:9b:39:a1:f2:80:1f:89:5a:d8:a1:04:e5:e6:b2:49:
         1c:3c:8e:0a:b4:ca:54:e6:65:4d:3c:1b:9f:c7:22:1d:14:18:
         f2:f2:f0:8b:07:ee:fa:5c:ec:cc:79:8b:f3:cd:66:ee:2a:91:
         c7:b6:9c:78:59:25:bf:31:21:0b:26:c0:46:28:6a:6d:2c:63:
         e0:05:62:da:4e:2f:6b:31:07:f9:3f:72:b5:16:4f:5a:7e:f5:
         d8:28:66:dc:98:06:9f:c1:4d:96:28:5d:e8:cb:cf:7e:23:a2:
         81:ef:7e:13:41:ba:e3:6c:86:2d:d3:e0:bd:cf:82:c9:cb:c8:
         2b:da:0e:51:d6:50:55:96:51:d5:4a:2b:e1:a3:e3:91:dd:96:
         50:a2:f3:ac:24:ee:40:78:96:c6:f7:61:e4:42:14:c1:38:ba:
         75:f8:3a:38:0d:02:f1:f3:bd:13:09:e4:b9:51:16:4d:71:ae:
         6f:1b:5f:ed:8a:00:a0:a3:5e:3f:fc:de:9a:e8:dc:21:57:ef:
         ef:59:1d:95:d5:ea:09:08:2d:96:63:23:35:02:6c:d1:d4:3d:
         38:87:20:48:78:28:a2:a4:cb:3a:d7:03:d5:f1:b1:26:3b:c4:
         6e:86:82:91:de:22:f4:ec:2e:51:ca:16:00:be:1d:36:e2:04:
         6a:6f:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:02 2025 by rpki-client