Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5318bd0d-fc89-300b-ac09-9701ad17921a.roa
File:                     5318bd0d-fc89-300b-ac09-9701ad17921a.roa (raw, json)
Hash identifier:          1+mGa4tgdoUtjBNPw+IDrhhAiAggUqQ1Uw7ws7sU1Y0=
Subject key identifier:   D6:32:89:11:EE:F3:E0:8A:68:1B:D1:5D:5E:C2:BC:D7:E9:C8:F4:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B2A85DBE144EC1D70BE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5318bd0d-fc89-300b-ac09-9701ad17921a.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        75.67.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:2a:85:db:e1:44:ec:1d:70:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=407c15c2-fe76-4df3-bea5-f883a172b748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:71:76:65:a9:60:05:3f:c2:25:29:29:06:
                    1e:60:19:ff:b1:ef:3d:5e:7b:b4:a6:6f:44:2c:1f:
                    ac:45:4b:eb:66:f8:f0:20:15:ff:fe:a6:ac:43:a7:
                    6b:dd:4d:bd:2e:28:b3:1c:5e:e7:d4:cd:46:10:d4:
                    12:88:fc:f5:91:f0:3c:38:f8:a2:8f:b8:fc:ee:11:
                    c6:3e:1c:e8:5d:66:1a:86:80:b5:9b:e3:15:66:2e:
                    99:35:f3:f8:d5:84:c1:c4:23:4f:f9:f1:6d:2a:08:
                    70:71:cf:22:d3:94:7e:fe:cb:c1:47:63:a3:4e:98:
                    49:84:c5:1c:e2:7f:c4:1e:4b:53:70:2b:30:f9:9d:
                    ed:74:92:e9:c9:56:09:98:bc:b3:ac:cb:48:fa:ae:
                    0a:3f:b5:ab:1d:5e:b2:e6:69:ae:e6:11:b7:b9:ac:
                    01:ec:35:b0:a0:ad:c7:bc:a1:ef:60:9e:d6:72:a8:
                    c3:46:78:ce:6b:fd:79:f6:06:e0:f3:9a:86:60:f0:
                    4c:fc:01:fd:7c:0f:63:fe:f7:c4:2b:0e:26:ae:35:
                    29:fe:31:8c:40:01:3c:6f:7f:be:01:9c:e5:05:0f:
                    d5:fc:ab:1d:58:19:a2:65:5c:60:d8:3a:3f:3d:04:
                    b2:a6:77:aa:12:56:cf:9b:57:fc:0b:f9:d7:2d:9a:
                    ea:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:32:89:11:EE:F3:E0:8A:68:1B:D1:5D:5E:C2:BC:D7:E9:C8:F4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5318bd0d-fc89-300b-ac09-9701ad17921a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.67.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:bd:73:e6:c6:c6:72:60:3d:12:d2:a4:61:76:91:63:c3:
         83:23:66:f2:9e:40:b0:55:f6:1c:7f:8f:f5:ad:cc:e7:42:50:
         a2:d1:a4:da:5f:ac:20:5a:7d:a7:9c:35:05:d3:ce:5d:f9:d2:
         4b:94:95:dc:ac:6b:46:2b:91:b1:92:ed:26:61:bf:e8:85:6d:
         b2:b3:44:ab:4c:18:54:82:11:8d:9b:b0:be:0e:e2:12:6f:5b:
         cc:8c:b1:1c:76:71:09:1d:82:31:06:ea:4a:2e:a7:db:95:b1:
         02:cd:d5:5a:bf:3e:d0:a9:82:a7:0c:bd:9f:bb:2e:1c:17:4e:
         6f:11:75:63:92:76:a9:85:4f:4c:25:92:33:35:f0:be:89:2d:
         66:93:d6:d9:a2:91:dc:11:31:96:7e:23:75:83:54:30:0f:d1:
         08:b9:40:1d:6f:71:40:8d:92:a1:54:89:e8:9b:6e:48:73:c5:
         73:5d:96:82:53:a8:ac:7b:68:da:ae:d1:03:de:60:c8:08:b5:
         63:4b:65:f6:18:74:f1:c8:32:72:ff:80:33:68:30:53:a8:2a:
         89:16:11:3e:a8:b9:15:f0:af:64:6a:bc:bc:65:a7:2c:04:7b:
         fe:4c:49:45:81:8d:21:c1:30:3c:df:1d:09:ec:fc:1b:fe:f5:
         74:63:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:41 2025 by rpki-client