Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dbf994-8596-3e75-9b8e-519f91de6e8d.roa
File:                     40dbf994-8596-3e75-9b8e-519f91de6e8d.roa (raw, json)
Hash identifier:          DEcux9pLyPBUjBi5NlsPG1ZcLtSyZFK3w2+NO0wrGZE=
Subject key identifier:   9D:DC:00:B5:1D:A7:98:6E:16:A0:D7:5D:27:3F:E7:2F:86:6B:F2:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B29FB0F01EE58063F1CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dbf994-8596-3e75-9b8e-519f91de6e8d.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        75.67.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:29:fb:0f:01:ee:58:06:3f:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=ee1132c6-8deb-44a2-8162-c53f724b2453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:db:49:4b:b1:ed:73:45:2b:00:89:ef:e3:6f:
                    61:cc:27:ca:42:ac:36:21:79:e1:63:cc:c0:25:3e:
                    11:91:5a:c9:1e:88:21:c3:48:97:53:8c:78:4a:95:
                    68:91:9c:12:27:ba:ea:b8:16:d1:14:12:2e:56:23:
                    c5:36:5f:0d:cb:c9:01:d9:09:1d:a8:e6:ee:de:68:
                    70:cd:2e:85:1a:1e:11:73:50:30:f3:f5:02:3f:c0:
                    75:29:a7:ca:c1:1d:37:96:a5:09:54:15:fe:b0:87:
                    52:46:48:6f:e6:bb:d9:30:4c:b1:67:c4:a3:99:ac:
                    3e:0e:64:d9:5c:82:12:55:0e:1c:28:1e:1c:00:95:
                    08:45:bc:20:08:85:f1:8a:27:06:a5:78:05:b6:b3:
                    d2:ad:4c:49:d4:d6:ac:1b:18:04:6a:a0:12:27:17:
                    61:b3:62:10:fb:59:53:d0:3e:c0:a8:70:6c:28:48:
                    b1:b3:00:4f:e8:58:cf:18:4a:35:3a:bc:d0:9a:ff:
                    76:79:96:6e:b9:01:ba:f0:e1:3b:0d:87:52:44:c4:
                    e0:e3:33:ab:83:ba:f9:65:22:f7:1b:cf:75:3e:31:
                    2f:19:09:ad:97:81:0b:d4:47:20:4a:41:8d:a5:2c:
                    67:36:49:07:e0:81:eb:af:ca:d1:32:c0:a3:55:08:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DC:00:B5:1D:A7:98:6E:16:A0:D7:5D:27:3F:E7:2F:86:6B:F2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dbf994-8596-3e75-9b8e-519f91de6e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.67.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fb:d3:dd:d2:36:be:cc:95:47:dc:6c:a6:0f:a4:ec:34:f3:
         68:b2:27:39:1a:a0:37:f2:4e:f6:4a:72:e1:d7:b6:38:47:b6:
         85:a4:a4:a2:55:e5:6e:7e:52:9c:34:99:93:70:f1:52:63:b9:
         2a:8d:44:c9:61:19:3f:4a:e4:0a:dc:71:6f:8d:da:30:73:5e:
         9a:f6:fb:d0:e3:65:5a:79:1a:d9:05:24:a8:75:45:2f:57:70:
         f0:3d:22:20:56:58:d4:3f:b4:62:83:c7:13:b5:b1:75:53:8f:
         cd:81:53:06:4f:d2:ed:34:ab:4b:8a:a5:78:5d:02:2f:d3:69:
         9b:e6:4b:32:70:b6:30:d8:f0:62:9d:a9:c7:7d:ce:1f:16:ca:
         eb:4f:23:5e:72:de:ff:af:6b:f1:4f:f2:21:bd:26:71:35:21:
         5e:6d:f9:86:d2:a1:4b:31:0b:e9:29:21:34:1b:d8:54:9f:21:
         14:04:70:3d:c9:d0:69:bb:6b:b1:ab:98:ad:69:c3:37:58:22:
         15:45:ce:6a:7d:a1:d4:bd:96:60:fc:19:f1:2e:0d:10:9e:14:
         da:de:15:82:19:bc:4f:75:67:c2:47:f0:cd:02:c3:83:64:bb:
         65:6d:64:2d:7a:47:47:6b:3c:f0:b8:3b:f8:8c:9b:44:3e:e7:
         a5:d8:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:01:02 2025 by rpki-client