Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a903506b-39bf-3494-8edf-3309b72f7d86.roa
File:                     a903506b-39bf-3494-8edf-3309b72f7d86.roa (raw, json)
Hash identifier:          RTQCpEj9y3An3KzgRuoI0BCc4xG9rL7hLuB6+e5fhVw=
Subject key identifier:   85:AC:BA:74:56:DC:14:5D:3D:84:8A:D5:E3:AB:2B:F7:DF:FE:35:DE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584800AFC7A0F27363FFCAEDCF00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a903506b-39bf-3494-8edf-3309b72f7d86.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     7029
IP address blocks:        75.88.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c7:a0:f2:73:63:ff:ca:ed:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=f978143d-4de6-42ed-b0b2-8a3d242ebab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:90:be:fa:b4:82:d6:2f:2b:cd:6a:cd:83:
                    96:a5:63:f0:e1:65:a0:51:9d:a7:0e:9f:6e:f5:e4:
                    8e:18:be:9c:68:98:fd:02:fc:9d:9f:eb:6c:6d:df:
                    71:20:7c:99:02:98:05:b4:d1:ef:1a:45:bf:7c:6f:
                    34:5b:fd:80:9e:79:af:38:de:37:0a:21:00:08:67:
                    86:37:12:13:db:bf:0c:7d:2a:b1:ab:0e:63:1f:61:
                    84:de:20:da:09:eb:54:24:22:ca:4c:3d:65:eb:93:
                    f6:53:f9:17:4a:92:11:4d:d0:63:90:5e:e3:4c:32:
                    f0:79:da:64:8d:62:35:f8:c2:20:59:fb:cf:09:a6:
                    2c:fa:d4:49:82:dd:95:87:db:3a:87:ea:51:bd:8f:
                    ce:4d:a7:a5:9b:4c:2c:9c:08:66:79:76:69:d3:85:
                    47:e8:a4:a0:e3:8b:fd:84:9f:12:36:10:72:0d:91:
                    c5:f3:a4:bc:2a:cd:83:56:a8:cf:54:5e:07:9f:34:
                    ce:b2:37:f5:27:23:0f:cd:43:f1:69:6f:5c:08:c0:
                    08:b7:19:d6:95:06:35:03:84:6e:1a:50:23:9c:9c:
                    53:45:23:40:db:3b:a7:2c:a1:ed:19:ff:43:10:17:
                    c5:f5:d7:05:76:9a:ed:23:01:e3:ca:10:1f:2f:ff:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AC:BA:74:56:DC:14:5D:3D:84:8A:D5:E3:AB:2B:F7:DF:FE:35:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a903506b-39bf-3494-8edf-3309b72f7d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:62:64:62:9a:4d:e0:d6:df:ed:b4:5c:ee:51:37:b9:5f:
         62:34:aa:61:b4:fa:14:f9:8d:68:f7:f3:68:6c:ca:83:03:08:
         86:ba:58:d8:a6:89:ab:21:67:1e:6b:ca:a1:cd:c8:b0:64:62:
         96:98:b3:97:0e:04:9a:e0:8d:4e:48:d4:f0:9c:a0:62:dc:29:
         39:71:a1:fc:f2:6c:ee:42:9b:1e:b7:43:0b:58:a6:8b:8e:fa:
         e5:64:ba:21:d2:97:2f:80:5f:83:aa:22:9a:dc:f3:57:f2:c9:
         04:df:02:f9:f4:ea:c8:fb:f6:33:b8:9f:42:24:d5:ea:b9:a9:
         c9:6e:12:22:8e:67:17:bc:c0:53:0e:da:7f:e9:7e:ea:2a:86:
         c6:93:33:44:65:e7:d5:49:25:4f:64:6d:77:f7:55:9d:a6:41:
         03:44:a4:21:8e:5d:7d:38:69:fe:6c:a9:c7:bf:50:d3:c5:51:
         ec:7b:b2:46:8f:84:c0:5b:fe:bd:73:9a:45:e0:b4:1f:56:13:
         31:c8:2a:77:62:26:80:17:0a:4e:36:13:64:fc:1f:f0:74:cd:
         52:1b:62:4c:05:c1:2f:c0:8e:78:8f:40:c0:91:b0:95:0b:26:
         fd:33:4b:88:7c:16:41:78:8f:28:82:ee:81:7e:ea:86:71:a0:
         3d:ee:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:44:21 2025 by rpki-client