Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/77f7c5d7-34b2-3a61-aa5f-7c107f697bdb.roa
File:                     77f7c5d7-34b2-3a61-aa5f-7c107f697bdb.roa (raw, json)
Hash identifier:          tP5FsXwPjHeFziCrDW+MS7bwEysSBOisjwLsbxzlKk0=
Subject key identifier:   F2:A0:38:BA:94:04:15:1D:54:90:84:77:C8:D1:E8:77:19:93:8D:A7
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584882809A716AD3F06D12044D00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/77f7c5d7-34b2-3a61-aa5f-7c107f697bdb.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     12083
IP address blocks:        75.76.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:9a:71:6a:d3:f0:6d:12:04:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=ad0f5ed9-9157-4ce2-ba51-0219ad053ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:0d:70:e1:49:74:e9:6f:d7:05:33:be:23:
                    91:4d:18:3b:33:2c:4e:cd:c2:50:ab:9a:55:00:96:
                    0a:7e:f6:bf:75:fb:35:4b:71:89:b9:be:01:e3:fd:
                    eb:77:98:50:78:0b:07:ad:d2:6d:49:f7:cd:5a:7b:
                    09:6b:e1:87:3d:db:05:d1:71:aa:a7:d1:9a:1c:9e:
                    8a:da:ba:8c:f0:cf:79:fe:88:67:f1:18:fe:a1:4c:
                    91:76:8a:7d:58:cd:4a:40:41:23:ed:49:74:59:14:
                    a7:a8:cf:f8:af:be:b8:8a:49:01:65:09:27:16:c9:
                    7a:38:ab:e2:32:70:95:bc:85:bc:be:8d:55:7b:11:
                    c1:e6:9a:56:9e:70:53:78:e9:ca:7a:b3:2f:23:c8:
                    96:f5:33:bc:9a:9c:a5:3f:ce:99:5d:6c:69:f6:12:
                    57:13:17:b6:c8:44:61:fe:ba:4d:14:bb:03:99:c9:
                    d5:ad:cd:53:1c:90:57:c9:43:79:a5:6d:6a:e7:6e:
                    a4:ee:0b:a8:e8:50:8b:5f:69:e2:5f:63:25:c6:d8:
                    1c:c4:88:65:71:8b:e0:3e:a2:f5:c9:a1:d6:37:aa:
                    1a:f1:0c:81:34:67:33:a4:db:57:cf:82:1a:cd:05:
                    96:2a:df:bf:91:74:85:2b:6f:8e:c9:95:2c:3c:7e:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A0:38:BA:94:04:15:1D:54:90:84:77:C8:D1:E8:77:19:93:8D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/77f7c5d7-34b2-3a61-aa5f-7c107f697bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.76.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:b8:03:43:2a:2a:46:48:1c:50:90:35:70:62:74:88:08:
         55:c1:de:78:20:c9:5c:36:86:64:c5:71:50:9d:5e:23:29:0e:
         6d:7c:de:45:88:2d:98:2a:1c:a0:a3:27:c0:c0:80:57:63:76:
         7a:da:67:48:e0:9a:5e:06:d1:d7:23:35:45:81:5a:91:0c:bd:
         2e:c4:40:22:36:18:c8:02:51:1c:76:c1:42:7f:8b:11:5e:87:
         dc:7b:5f:27:46:8a:3c:5e:05:bf:3a:51:fa:b0:21:48:04:1d:
         6b:f3:72:51:25:a2:7f:ba:33:a1:36:15:55:dc:c3:65:e5:3a:
         11:e6:d8:cb:55:c4:39:c6:77:62:6d:2e:71:b2:54:b1:ef:72:
         fb:58:2c:f8:48:63:7f:40:7a:c4:54:30:67:83:7f:9d:f8:fb:
         1c:f8:cb:ba:50:34:0b:58:f5:dc:59:66:38:37:65:41:f1:9e:
         64:ce:c1:0b:fe:0a:70:5d:ce:d5:1a:f4:65:8e:18:10:7c:1e:
         7f:85:0c:1e:4b:d6:d1:15:fc:e8:1f:e6:f3:f8:3d:09:eb:a9:
         6e:33:38:20:ec:99:25:47:e4:60:9f:e9:b0:d2:c7:f4:ce:d1:
         e6:14:cb:99:57:b7:c3:54:74:79:ec:2c:de:47:62:7b:a0:19:
         76:e8:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:52:30 2025 by rpki-client