Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce993ddf-e1b6-3db2-afc0-e5e1d1697ed5.roa
File:                     ce993ddf-e1b6-3db2-afc0-e5e1d1697ed5.roa (raw, json)
Hash identifier:          kjjWG1eOvKQ5RmiVu1D2gpKILaqlEqGd4atZ8JkJ2P4=
Subject key identifier:   D9:4E:A8:99:F2:CA:34:2B:B6:EE:14:71:C6:AD:76:2C:49:4D:0A:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE02CF1119AFC77C4B900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce993ddf-e1b6-3db2-afc0-e5e1d1697ed5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.105.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e0:2c:f1:11:9a:fc:77:c4:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9967d1f8-b780-45a2-8f95-efde69e96988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:ee:6e:f1:89:25:82:bb:94:8e:1b:da:3c:
                    93:0d:86:29:40:e2:3a:60:36:92:2b:f2:6a:66:bd:
                    b9:72:c2:a3:4f:1a:53:72:a5:0c:ee:02:b7:f2:05:
                    ea:27:49:e4:97:c9:f0:51:65:cb:d3:4f:db:71:ce:
                    b7:36:f0:39:37:76:53:81:79:79:e0:a8:43:a6:74:
                    0f:13:8a:c9:19:32:be:c3:ce:b1:42:44:73:fc:d7:
                    da:47:cd:ea:b6:23:4e:06:d2:58:f2:8f:6c:63:4e:
                    b9:6c:26:c2:91:fe:b2:da:5f:33:3b:5e:87:82:91:
                    69:6d:df:2e:52:4c:6a:0b:29:98:fa:a6:dd:07:54:
                    5b:7c:2a:f4:75:40:37:5a:13:1f:06:d5:57:2b:22:
                    ed:62:a7:82:e4:5c:d2:8c:86:f1:23:72:a5:62:78:
                    cd:fb:d6:cf:d8:09:95:42:72:f6:ac:c9:76:a3:8d:
                    d1:04:1a:c1:f5:6f:37:c0:48:70:e3:3f:40:84:49:
                    64:e8:b5:bc:08:0e:02:a2:36:38:6b:e9:9d:55:cf:
                    cf:07:17:c4:5e:3b:6a:47:60:d5:46:72:5a:14:91:
                    ad:66:46:38:02:68:95:75:37:22:05:39:f4:91:f0:
                    e1:f1:41:28:8e:7f:83:96:6c:8b:d8:78:69:e4:79:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4E:A8:99:F2:CA:34:2B:B6:EE:14:71:C6:AD:76:2C:49:4D:0A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce993ddf-e1b6-3db2-afc0-e5e1d1697ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9b:6e:4d:3c:5e:26:f6:19:34:13:10:cd:8a:ce:ad:a4:b6:
         a6:ff:7d:25:aa:2b:8e:be:2a:03:92:4b:d4:fb:53:a9:3d:70:
         86:29:55:39:8b:5f:dc:db:97:17:7c:d0:a8:54:a4:d1:64:3f:
         c1:38:fd:45:17:7f:fc:95:96:55:6c:b2:37:9b:f8:95:cc:59:
         01:57:75:75:37:87:60:c6:83:85:9b:2d:96:3e:10:e3:c0:90:
         16:48:fd:c7:09:43:e5:c7:23:12:82:bb:a2:2a:e2:e4:aa:54:
         d5:5b:1f:d7:bc:85:84:a1:63:bd:d1:35:82:ab:9e:ee:36:c2:
         42:5d:c0:89:a8:8f:cd:54:f9:d2:78:47:4c:c8:6c:d9:37:3c:
         e8:35:62:8d:a7:aa:6c:38:4d:20:ff:21:cb:6f:ba:52:e7:5e:
         c0:47:70:a8:38:2c:fb:90:52:8a:ce:05:d3:05:ee:25:0b:bf:
         bb:f6:11:d5:ee:29:a0:15:97:14:c1:c4:4b:76:0d:34:00:50:
         2a:21:bf:7c:a3:cb:1b:52:35:69:3f:6d:b8:f8:f8:59:de:84:
         8a:2c:2c:6d:6f:1b:f1:75:27:35:69:be:a3:1f:d6:45:dc:3e:
         dc:3f:a1:48:d7:32:2e:db:9b:fe:a4:d0:2e:12:68:ef:ce:3d:
         89:ef:4b:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKuAs8RGa/HfEuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTk2N2QxZjgtYjc4MC00NWEyLThmOTUtZWZkZTY5ZTk2OTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkirubvGJJYK7lI4b2jyTDYYpQOI6YDaSK/Jq
Zr25csKjTxpTcqUM7gK38gXqJ0nkl8nwUWXL00/bcc63NvA5N3ZTgXl54KhDpnQP
E4rJGTK+w86xQkRz/NfaR83qtiNOBtJY8o9sY065bCbCkf6y2l8zO16HgpFpbd8u
UkxqCymY+qbdB1RbfCr0dUA3WhMfBtVXKyLtYqeC5FzSjIbxI3KlYnjN+9bP2AmV
QnL2rMl2o43RBBrB9W83wEhw4z9AhElk6LW8CA4CojY4a+mdVc/PBxfEXjtqR2DV
RnJaFJGtZkY4AmiVdTciBTn0kfDh8UEojn+DlmyL2Hhp5HnfCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlOqJnyyjQrtu4UccatdixJTQq6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2U5OTNkZGYtZTFiNi0z
ZGIyLWFmYzAtZTVlMWQxNjk3ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2mpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqbbk08Xib2GTQTEM2Kzq2ktqb/fSWqK46+KgOSS9T7U6k9cIYpVTmL
X9zblxd80KhUpNFkP8E4/UUXf/yVllVssjeb+JXMWQFXdXU3h2DGg4WbLZY+EOPA
kBZI/ccJQ+XHIxKCu6Iq4uSqVNVbH9e8hYShY73RNYKrnu42wkJdwImoj81U+dJ4
R0zIbNk3POg1Yo2nqmw4TSD/IctvulLnXsBHcKg4LPuQUorOBdMF7iULv7v2EdXu
KaAVlxTBxEt2DTQAUCohv3yjyxtSNWk/bbj4+FnehIosLG1vG/F1JzVpvqMf1kXc
Ptw/oUjXMi7bm/6k0C4SaO/OPYnvS1w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:59 2025 by rpki-client