Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa
File:                     f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa (raw, json)
Hash identifier:          bn8BpCF+MoP2C34gOfzxhVFaAV5TFN6rlKpOhonblfs=
Subject key identifier:   7D:8D:27:67:42:31:C6:F9:0D:05:89:19:40:B1:3C:DB:45:88:D8:EC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847EE8A30DFCA2101EF725BA480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7155
IP address blocks:        75.104.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:30:df:ca:21:01:ef:72:5b:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=2c703ba4-71ca-4c9e-aa09-020bb5d712d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:7e:e6:d3:0d:03:0d:75:30:cc:9c:3f:be:
                    ce:1c:40:51:7e:41:d2:25:8d:a0:94:98:1f:a1:c1:
                    09:96:b1:94:30:7f:e1:a7:d8:2e:9a:e8:77:09:ae:
                    18:d1:54:66:50:37:c2:49:3e:46:98:db:11:f8:5d:
                    f1:12:84:2b:01:6a:1e:6b:db:28:d1:34:d4:32:95:
                    10:c6:2e:bb:94:00:28:fd:25:ca:e8:50:3c:a1:e4:
                    f2:10:69:77:79:df:21:6f:8e:15:33:9a:89:2a:1d:
                    58:d7:a8:d7:1f:e5:b3:c4:7e:ba:26:0b:c5:98:50:
                    10:39:0f:b4:cb:59:bb:15:4a:30:14:1e:0c:06:ae:
                    26:d6:e4:db:80:5b:46:50:e2:76:bd:75:9e:26:10:
                    4d:1e:41:12:b9:18:a9:b2:7d:d5:5a:23:f6:21:fb:
                    34:9b:cc:8e:83:12:88:c0:b0:a1:01:5a:82:ea:c8:
                    bf:ad:98:48:53:80:e7:64:f6:ee:95:c1:2e:6e:b2:
                    1f:f7:15:35:1b:32:7c:8b:98:e5:b8:15:d5:c1:04:
                    e7:3f:3d:de:80:7d:6a:bb:3c:f9:5b:c1:3c:d2:9f:
                    7a:d4:94:7d:8d:b0:0d:03:7a:f7:13:21:60:7a:93:
                    cc:ab:75:a3:a4:d9:22:89:02:51:66:fe:95:0f:f8:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:27:67:42:31:C6:F9:0D:05:89:19:40:B1:3C:DB:45:88:D8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0a8aee8-642d-3eca-86f0-93fb0b6a5d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:b7:e2:c0:e3:28:74:5a:04:c7:ab:67:ba:5f:c6:70:13:
         11:c1:0f:10:67:98:e1:f8:5c:6e:f6:96:2f:71:77:fb:e3:05:
         1b:f5:6d:31:25:73:0c:a1:33:95:20:ed:eb:c2:db:f6:cb:47:
         9d:85:d6:f5:11:e8:fd:cc:e7:25:72:9b:72:a8:19:a9:b4:1f:
         87:4b:99:be:50:aa:f8:95:3f:c0:04:01:a6:80:d8:d7:aa:41:
         6a:87:30:02:98:59:53:28:66:c9:67:bf:00:7f:c8:df:6a:c6:
         89:7d:22:7f:23:7a:2c:a0:ef:f5:d3:c6:45:00:0d:08:f7:a8:
         29:a1:24:01:a0:25:ac:d0:bb:3a:8b:43:d7:06:75:a8:b8:be:
         4f:61:0c:7e:a7:18:cb:5f:61:04:1e:70:89:cb:69:4f:f9:35:
         d9:61:1b:93:9f:98:c5:a5:1d:9c:a0:a5:71:dc:11:32:5a:e8:
         09:0d:af:7c:4f:2e:30:ff:a7:ba:0c:10:94:fc:a3:0e:59:b2:
         5f:86:31:b3:23:59:1b:23:32:cf:5d:40:ae:04:69:df:c3:3d:
         ba:b7:8f:7c:bd:f8:1c:c7:fd:6e:3e:80:70:b2:a3:83:86:b9:
         72:a7:12:49:86:f7:b2:98:04:a3:fd:a2:3c:08:84:83:b1:84:
         f9:41:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:45:47 2025 by rpki-client