Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
File:                     bfb1447f-fcd2-3a38-8239-151dd80283b9.roa (raw, json)
Hash identifier:          tDOA6J7X2cnsmfNj3Do385GW+WSAwfyJrjg5iJfo35Q=
Subject key identifier:   58:D0:3B:74:C4:72:E0:4F:45:06:FE:AD:2F:09:11:BE:32:F1:50:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ADA73154F74D7096B4B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:da:73:15:4f:74:d7:09:6b:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e7ee51a5-8ad1-4dd0-bb9a-27edfb2f7bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:fe:78:f5:83:1e:f9:ce:87:d2:f5:ec:60:
                    0c:40:ff:d7:d5:54:b4:ee:cd:8d:e3:aa:e2:da:a5:
                    3f:e0:36:88:26:37:f6:ea:e7:96:38:19:0e:43:32:
                    0e:a2:74:e6:b8:5e:8b:e0:6f:79:a9:6f:a6:4d:36:
                    c6:ae:98:58:88:58:78:1a:5d:1a:a9:a1:13:f2:8a:
                    c0:d7:6a:46:47:18:5b:00:a8:6c:37:c5:2b:20:ed:
                    71:68:5f:26:48:95:14:b4:53:bd:91:76:91:48:76:
                    c0:3f:05:b9:18:b6:a2:44:42:8e:55:0a:0e:6d:e2:
                    b4:79:60:f9:c1:1b:8a:e5:2d:38:22:da:07:5a:88:
                    36:34:3b:3e:90:33:38:d5:e3:83:24:ef:85:b2:92:
                    0b:28:b4:53:f0:a3:76:a5:b6:16:52:e8:80:6d:fc:
                    ba:99:47:9b:73:ab:b2:21:7a:25:6e:c2:eb:2d:e3:
                    b7:54:ad:37:5b:ec:22:3a:95:4d:88:1d:d7:37:0b:
                    cd:87:3d:3a:37:d3:98:61:69:76:50:72:c0:de:47:
                    19:bb:5d:12:91:40:f2:bf:a1:2d:4d:50:bb:46:cb:
                    7d:94:4f:d2:41:76:b4:50:94:df:10:fc:b5:26:74:
                    20:fa:99:71:c2:90:33:49:34:98:ed:47:45:b2:9e:
                    6c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:3B:74:C4:72:E0:4F:45:06:FE:AD:2F:09:11:BE:32:F1:50:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:7a:33:01:25:46:2b:82:90:bb:88:f6:3c:fb:6d:4f:24:
         01:79:24:0b:62:aa:93:06:41:01:3c:4d:44:cd:8f:71:a0:1b:
         88:58:cc:b5:fb:d3:63:91:e1:6e:d2:54:25:7b:0d:cb:b5:a9:
         44:2d:c2:4c:36:f3:db:57:6a:b4:0e:62:f7:22:9f:ff:9e:a8:
         78:9d:3f:dc:44:1b:33:4f:44:6e:49:19:ce:96:29:f0:a9:f3:
         08:bd:32:ff:6f:7d:1a:41:55:7b:f8:f1:92:c6:b5:20:52:a0:
         ff:c7:47:1b:b2:46:9d:a2:fd:ff:ff:fb:b1:38:cd:fa:4e:57:
         d1:d6:70:9f:1a:a0:3f:53:1d:83:93:63:2c:41:8c:0a:1e:42:
         8f:0c:87:43:62:5e:9d:8d:7e:ed:83:e7:79:44:dc:7d:54:0c:
         fb:60:6a:c4:f8:be:e5:f6:5d:4d:1f:95:30:e8:7d:65:b5:21:
         54:1f:ae:18:78:6d:02:15:14:13:7e:0b:96:5f:c3:56:6f:e9:
         0f:a2:ef:5a:08:9f:12:45:f1:e4:0d:ae:3b:ff:ac:4f:36:ac:
         10:cf:e7:6e:93:e6:e2:57:af:ce:cf:2b:80:ce:af:f7:4e:c3:
         2e:09:07:e1:ec:58:08:68:01:6c:4c:2e:9b:0b:d0:38:75:4a:
         cc:27:ef:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKtpzFU901wlrS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTdlZTUxYTUtOGFkMS00ZGQwLWJiOWEtMjdlZGZiMmY3YmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgD+ePWDHvnOh9L17GAMQP/X1VS07s2N46ri
2qU/4DaIJjf26ueWOBkOQzIOonTmuF6L4G95qW+mTTbGrphYiFh4Gl0aqaET8orA
12pGRxhbAKhsN8UrIO1xaF8mSJUUtFO9kXaRSHbAPwW5GLaiREKOVQoObeK0eWD5
wRuK5S04ItoHWog2NDs+kDM41eODJO+FspILKLRT8KN2pbYWUuiAbfy6mUebc6uy
IXolbsLrLeO3VK03W+wiOpVNiB3XNwvNhz06N9OYYWl2UHLA3kcZu10SkUDyv6Et
TVC7Rst9lE/SQXa0UJTfEPy1JnQg+plxwpAzSTSY7UdFsp5s8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjQO3TEcuBPRQb+rS8JEb4y8VCnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZiMTQ0N2YtZmNkMi0z
YTM4LTgyMzktMTUxZGQ4MDI4M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2jOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFf+ejMBJUYrgpC7iPY8+21PJAF5JAtiqpMGQQE8TUTNj3GgG4hYzLX7
02OR4W7SVCV7Dcu1qUQtwkw289tXarQOYvcin/+eqHidP9xEGzNPRG5JGc6WKfCp
8wi9Mv9vfRpBVXv48ZLGtSBSoP/HRxuyRp2i/f//+7E4zfpOV9HWcJ8aoD9THYOT
YyxBjAoeQo8Mh0NiXp2Nfu2D53lE3H1UDPtgasT4vuX2XU0flTDofWW1IVQfrhh4
bQIVFBN+C5Zfw1Zv6Q+i71oInxJF8eQNrjv/rE82rBDP526T5uJXr87PK4DOr/dO
wy4JB+HsWAhoAWxMLpsL0Dh1Sswn7yE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:01 2025 by rpki-client