Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c71080e9-3f50-39a9-902e-6651bc96d5a4.roa
File:                     c71080e9-3f50-39a9-902e-6651bc96d5a4.roa (raw, json)
Hash identifier:          F6zWmh87QQzY4/R//uJmDqwqLaupJgMpiSKErbraVa4=
Subject key identifier:   1F:72:19:01:4B:57:C9:12:ED:A5:60:1E:78:9F:C9:2C:86:AA:6F:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62ABE6213697E64BEDE5040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c71080e9-3f50-39a9-902e-6651bc96d5a4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     16491
IP address blocks:        75.104.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:be:62:13:69:7e:64:be:de:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=60c23187-fcd0-456a-be5e-5aed1d20a0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:74:bc:09:31:bb:83:80:5f:95:a3:28:9b:
                    53:43:28:83:f9:35:f4:80:aa:81:c0:2e:d4:34:16:
                    58:9c:ad:33:27:2d:fd:e8:45:39:2b:cc:e2:c3:2a:
                    fe:a5:fc:09:f3:09:31:3b:08:b1:31:88:5b:69:bc:
                    4a:08:88:c2:18:a7:80:44:77:c6:cd:6a:7c:1a:56:
                    73:79:da:33:f6:ec:88:af:cb:c3:d8:60:ab:73:dc:
                    c4:20:34:61:dc:17:d2:d3:97:f0:aa:be:c4:35:17:
                    1b:a0:90:dc:f7:ed:ae:b0:53:da:1b:f7:e9:1a:58:
                    09:f9:89:4e:82:0a:d8:7e:53:fd:1d:05:ca:01:2d:
                    ba:13:18:60:29:68:b9:61:db:53:9e:0b:1c:cc:67:
                    c0:79:9d:cb:14:82:3b:ce:d0:64:2d:58:d3:da:4f:
                    55:f0:59:96:72:86:dd:2b:1a:a4:d4:5e:36:26:38:
                    da:33:95:94:35:58:d6:45:bf:76:03:f8:09:3c:70:
                    6e:79:ce:c5:9d:59:b1:8d:9c:d8:a1:97:05:f2:b1:
                    12:e5:ab:e1:aa:31:4f:55:1b:a6:73:c8:0e:82:e1:
                    cb:8b:d8:ce:52:ac:91:8d:58:db:53:8c:de:db:b0:
                    0b:96:b1:2b:73:f4:e9:41:66:4c:7d:83:5f:70:95:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:19:01:4B:57:C9:12:ED:A5:60:1E:78:9F:C9:2C:86:AA:6F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c71080e9-3f50-39a9-902e-6651bc96d5a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:83:5c:96:b3:0d:7b:8b:4b:a5:ef:be:1b:0a:ae:db:40:
         ee:b5:94:0f:e1:e8:4a:dc:a0:bf:37:fc:66:dc:3d:af:aa:94:
         3e:8d:f6:b9:e9:90:cf:d9:37:eb:47:eb:81:6e:66:08:52:3f:
         b7:83:7c:6f:35:c9:f0:d2:53:81:d3:71:35:08:fe:5a:5f:6d:
         e4:4d:59:27:78:f9:0a:c7:65:a2:ff:69:f6:15:f4:d2:d8:e4:
         4d:54:1b:d9:4e:5f:71:82:fd:d7:f5:dd:88:ba:0a:03:92:6d:
         13:eb:78:43:8c:de:c1:e8:e9:64:5a:b5:3f:80:10:a2:c2:c5:
         e4:dd:22:d3:2f:0e:d9:53:75:43:6c:c2:be:1c:79:de:92:15:
         1b:0c:62:54:c9:11:a3:60:dc:f7:46:a8:35:32:e1:1e:68:60:
         86:92:7c:b8:7b:16:08:cc:ad:70:f5:b5:3d:1f:0e:31:31:6e:
         65:bf:28:e8:9a:fa:9e:82:8d:86:ed:1f:bd:f3:fd:2d:db:29:
         a6:25:60:87:52:ea:92:2c:05:55:ef:0f:c4:19:b6:d6:fa:bf:
         22:06:eb:cd:46:35:fc:61:31:0a:1d:cc:ef:13:e8:cc:4c:1d:
         11:41:42:4d:e0:a8:13:e1:ec:2d:17:41:7f:a7:09:50:ff:89:
         9c:d8:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:37 2025 by rpki-client