Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa
File:                     13281c46-3186-389c-b054-cb3e08ef18e6.roa (raw, json)
Hash identifier:          qqb2DDA4oy0iZXr4HhstyKxD26/+rn9jhcKUO3cbaLQ=
Subject key identifier:   CC:B8:73:13:5A:07:2E:61:66:DD:5A:F9:52:ED:96:2A:D3:20:23:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D012D9E484BDA28558C540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     40138
IP address blocks:        2001:470:18d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:12:d9:e4:84:bd:a2:85:58:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=255c1382-167b-4896-961f-a91e7ac30e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:b3:47:a1:ba:7b:5f:a3:dd:a0:4b:74:b7:
                    3e:84:bd:7a:5f:fb:05:89:98:8a:03:8e:be:da:aa:
                    8c:e1:9a:70:6d:c8:2c:e5:5f:1b:75:f7:3f:87:08:
                    6b:93:78:1e:8a:c8:5e:8e:70:64:0e:f8:58:e3:7c:
                    83:ca:02:e3:73:71:20:f2:69:88:d1:61:da:73:9b:
                    91:ec:66:77:88:4f:cd:19:00:4c:87:e5:6d:7c:e1:
                    4b:d1:ae:34:d0:77:00:79:39:b6:a6:54:e5:27:79:
                    f9:e6:6d:23:2c:1d:f8:86:10:9e:bb:d0:6e:c0:5b:
                    09:fa:42:0e:51:37:44:a2:38:e7:5e:55:7a:b2:8c:
                    32:e8:9b:97:b8:94:45:8a:27:0b:8b:77:9c:37:65:
                    6e:1f:63:9c:4c:17:81:27:36:0d:38:e5:c8:79:f4:
                    ef:72:a3:74:91:fd:ac:d0:08:05:6b:f6:3d:9a:79:
                    c7:ed:de:05:73:71:db:83:61:c9:8f:a0:92:a3:4b:
                    83:68:51:9e:70:f9:2a:03:f5:91:b1:05:32:4d:44:
                    31:7b:7c:34:1a:d3:28:1f:e7:b9:27:98:17:b1:ee:
                    6d:bd:e5:68:68:ea:eb:d5:b7:07:05:92:2b:ae:3b:
                    3e:8d:78:ae:91:ca:2d:4d:7d:15:1d:17:60:11:0f:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B8:73:13:5A:07:2E:61:66:DD:5A:F9:52:ED:96:2A:D3:20:23:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13281c46-3186-389c-b054-cb3e08ef18e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:18d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:21:b2:98:b1:5f:66:13:aa:e8:ae:6f:b2:51:10:e6:76:80:
         4b:48:e0:35:db:df:19:4b:81:1e:7f:f0:17:a9:d2:69:5b:6c:
         49:dc:14:f8:56:ec:b7:ab:ff:27:2a:22:49:0b:fa:7b:fb:8e:
         92:f5:e7:c0:6d:58:a8:5a:34:9f:41:e3:ba:64:32:9c:6a:88:
         0a:e1:12:4f:53:09:cb:13:fb:45:5b:bb:82:1b:aa:fc:39:c5:
         be:51:c1:d2:fa:62:a9:65:88:f4:d5:76:62:66:a8:6e:06:5e:
         fe:8d:b6:10:43:6d:26:e7:37:c8:78:da:a6:72:1c:f4:3f:2d:
         be:df:94:a4:63:95:8a:1f:b2:a4:ba:52:14:8d:f9:ab:de:39:
         51:ed:0f:28:5b:79:4a:52:94:86:44:c8:01:9a:0b:2c:11:b7:
         ef:88:83:9f:6b:4b:c6:ea:8c:21:d9:80:00:88:94:e4:8e:b0:
         ed:c9:08:05:65:c2:cc:bc:80:94:3e:6b:20:08:d0:76:44:46:
         34:15:b2:13:d6:c3:a2:47:ce:cd:b5:f9:5f:d9:79:05:ce:8c:
         59:d4:23:3f:49:63:5f:85:10:6a:d3:ac:7b:b5:50:6f:e9:03:
         47:5f:10:0f:ef:ce:70:8e:78:97:db:b2:ed:db:c7:af:a3:89:
         10:7b:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:53 2025 by rpki-client