Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2730e7af-8094-3eb8-979c-f777304940d2.roa
File:                     2730e7af-8094-3eb8-979c-f777304940d2.roa (raw, json)
Hash identifier:          4Oo56q4iiA2av2iVfCmOwV34z5lfwNYun7ZbShKRrWI=
Subject key identifier:   6F:83:FF:4B:BA:32:2B:FC:4A:99:40:3D:5F:71:CB:90:A8:20:C9:F6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFE99FB79D8DF2BC51F2C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2730e7af-8094-3eb8-979c-f777304940d2.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     13746
IP address blocks:        2001:470:5a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e9:9f:b7:9d:8d:f2:bc:51:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=dd3c1b5b-bb65-4cf7-aa20-fb68304caecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:88:f5:94:0e:e2:b6:4a:fd:0f:1c:26:6a:
                    99:ed:ed:c6:61:93:4a:f3:25:7b:1d:a8:d0:4e:4c:
                    a4:9a:6f:f1:d2:34:41:71:a0:10:ba:03:15:4f:b3:
                    17:15:21:95:b1:dd:3b:b7:a0:25:73:89:8b:70:65:
                    d0:4b:b8:88:ba:91:0a:db:24:96:cb:dd:fc:57:a6:
                    23:34:f8:21:1a:b7:1c:f2:b4:be:9f:45:24:3f:a2:
                    c2:6e:ef:e7:85:22:4b:4e:ae:49:cc:88:05:85:58:
                    fd:b6:45:67:65:e3:fe:66:10:ef:c2:03:01:23:f0:
                    0e:05:36:c5:5a:72:18:80:62:18:6d:7e:db:11:39:
                    f4:a8:3b:c9:1a:dd:13:6e:62:51:1e:74:ad:4d:22:
                    02:40:d9:ef:64:ca:0c:c3:7e:54:51:ca:3f:94:63:
                    7b:d8:14:c7:c5:c0:2d:95:37:be:d1:81:e2:7a:39:
                    40:a3:6c:e9:b3:b7:9b:f0:65:e7:fe:06:18:b4:10:
                    05:d9:7c:18:cc:83:9b:ae:70:ca:15:a4:92:69:3a:
                    6c:ed:5d:c6:2c:a6:30:0b:c1:8d:12:c4:4f:54:04:
                    ad:dc:b2:9f:1d:f3:11:d3:8a:dd:f3:c6:96:38:9a:
                    a2:e0:94:ba:be:f6:fa:76:12:f1:6d:b6:95:6b:97:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:83:FF:4B:BA:32:2B:FC:4A:99:40:3D:5F:71:CB:90:A8:20:C9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2730e7af-8094-3eb8-979c-f777304940d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:9d:dc:3a:6c:f8:58:0c:ad:01:28:59:e3:05:01:1b:20:
         54:d6:6d:02:c4:7a:71:d0:af:5a:ee:ec:dc:c2:3c:08:21:46:
         19:62:24:f9:71:2e:80:5d:0b:3b:03:3d:80:f2:b4:7b:24:ca:
         40:4e:4f:0b:e9:0b:4a:75:6b:28:87:49:cd:97:69:b7:b8:ff:
         66:db:a6:82:f9:9f:71:f7:cf:bb:37:34:63:47:7a:db:a8:2b:
         47:e1:99:f3:38:2d:f3:c4:69:6a:e6:ba:94:41:77:7e:a2:1f:
         2f:1e:d4:a7:9e:5b:73:83:d7:e4:69:ff:ac:c9:38:43:9a:f8:
         15:cf:f6:4b:ca:15:ca:68:cd:a6:1a:81:dd:d3:d6:90:ab:d8:
         83:fb:9b:2f:17:81:3a:f2:ab:c5:d0:76:01:b6:02:fb:44:5a:
         79:e9:a8:83:d0:eb:a1:fb:c0:4b:e0:32:02:d7:23:ac:fb:b6:
         88:4e:d3:1a:4c:90:74:c8:a0:6e:5d:c3:43:cd:fb:5d:2a:d9:
         36:da:d8:92:e7:90:d3:47:67:78:34:82:78:08:d1:67:03:e3:
         9e:ff:94:8e:85:31:bc:a3:37:c0:67:cf:3f:a2:09:33:54:73:
         11:22:09:2b:5c:dd:de:31:44:7c:1d:84:c7:14:d3:79:4c:4c:
         9f:d2:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:39 2025 by rpki-client