Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02eea31e-c640-3718-85aa-533ae8f21ea3.roa
File:                     02eea31e-c640-3718-85aa-533ae8f21ea3.roa (raw, json)
Hash identifier:          e/szUOZ0/t0o3AebLMA8L9Jy2zGgjmIPaO4ij9bkTww=
Subject key identifier:   51:A6:F8:3B:05:44:C3:E9:B2:70:19:43:CE:78:82:94:13:14:B6:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00E5DB7ABF445546E8040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02eea31e-c640-3718-85aa-533ae8f21ea3.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     54371
IP address blocks:        2001:470:82::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:0e:5d:b7:ab:f4:45:54:6e:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=3278b66f-f9f4-49dc-af88-52dfe58c3868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:72:0f:98:e9:2b:d1:ec:25:12:b8:a9:2f:
                    4b:22:ab:d8:e0:ee:37:61:c3:e8:bc:c9:fe:53:79:
                    ad:eb:c4:2a:65:63:1f:7d:90:81:b7:32:24:b1:41:
                    3f:33:cf:09:b3:02:a0:28:d1:bb:d0:16:61:d6:d4:
                    2d:18:2c:2b:bb:9e:94:26:0f:94:52:71:2f:1b:11:
                    5b:0a:a2:9c:63:72:4e:72:3c:2f:ac:a0:2d:61:2e:
                    59:49:40:4a:03:bc:85:cb:dd:3d:a8:ee:78:23:fe:
                    5d:74:a6:ed:87:b7:96:90:ce:d2:da:17:3b:66:c7:
                    2c:04:6e:4d:31:b3:e2:78:fe:9e:ae:43:2f:33:a5:
                    9c:e4:fa:78:a6:6c:ee:95:24:ca:32:dd:0a:14:2f:
                    03:71:50:4a:b3:e1:06:10:c5:60:2d:fc:6f:7b:74:
                    7d:a8:7d:89:a3:7f:6e:bc:09:ed:ec:f5:93:9b:57:
                    6b:20:27:1f:47:da:de:e2:9d:10:eb:96:42:b1:9f:
                    04:a3:09:c5:82:90:ca:b2:62:f9:48:61:9e:11:95:
                    08:48:f7:ca:a1:7e:83:fe:af:f7:0b:8c:82:77:07:
                    d4:fc:66:47:08:e7:98:3b:95:b7:18:dd:f2:bc:26:
                    dd:85:3e:7c:ea:4b:da:3b:1d:52:0a:9b:2f:6d:4f:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:F8:3B:05:44:C3:E9:B2:70:19:43:CE:78:82:94:13:14:B6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02eea31e-c640-3718-85aa-533ae8f21ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:d2:34:96:6f:80:60:c3:e2:21:4e:7e:ca:b3:94:33:bc:
         c4:56:9c:32:e7:a4:20:04:6b:45:6b:8e:0c:e6:94:95:71:63:
         78:22:6c:85:7e:6d:e0:ed:f5:27:26:0a:ca:11:b8:b8:8c:93:
         18:ed:c7:43:58:1c:59:4d:28:dd:24:d6:3b:03:e5:bd:90:de:
         3f:14:ea:1a:00:6c:43:ae:8f:70:8d:0b:4b:f5:9f:63:26:a1:
         22:70:77:97:ae:9c:2c:5c:b2:b8:c4:7d:52:9c:5b:1b:fb:a8:
         87:ca:55:b6:52:55:6d:2a:a9:5e:41:90:0b:76:39:91:72:04:
         45:1a:c9:b2:a3:ec:3d:21:ce:24:4c:e1:4e:28:ee:45:25:0f:
         42:5d:87:a3:55:66:db:e8:8e:77:73:60:bd:0c:7d:ba:d2:b9:
         f9:62:2f:78:bc:6f:dc:9d:10:96:4b:d6:14:4c:f9:29:5e:04:
         f5:d3:4e:4f:6d:f7:14:ad:c8:ae:de:a4:3f:c6:4a:5b:c0:90:
         e1:a5:d1:5d:0d:61:e3:93:d1:fc:76:14:f9:e1:92:c2:ab:6d:
         7b:00:9f:20:a5:ff:1b:b5:5b:df:87:25:fc:a5:b7:95:02:20:
         7f:be:7a:ce:c1:c5:78:e1:2d:47:1f:57:10:36:ac:60:d8:f4:
         b4:b1:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:09 2025 by rpki-client