Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35f15917-cf50-3540-974e-c91ae8179b7c.roa
File:                     35f15917-cf50-3540-974e-c91ae8179b7c.roa (raw, json)
Hash identifier:          ZtmP/zVpFYAdw88gDjBDAor/g9DiW/ArwOb2gRos1iw=
Subject key identifier:   1A:B8:B9:B4:87:D3:25:CC:19:BD:E8:8E:93:24:AF:5D:DE:A9:1B:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D005F7C56B9FBA0E506800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35f15917-cf50-3540-974e-c91ae8179b7c.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     54415
IP address blocks:        2001:470:308::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:05:f7:c5:6b:9f:ba:0e:50:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=bb633df9-b187-4907-9d28-700e0c3f036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:57:2e:88:b4:fe:20:51:17:21:39:c5:8e:
                    08:e6:28:24:e2:e0:a6:ad:f9:4b:21:e2:0d:ad:0d:
                    59:cb:2d:48:c5:c6:49:81:3f:aa:5b:46:5e:0b:da:
                    97:a7:10:0c:d7:ff:81:95:ad:04:2b:a8:35:72:cd:
                    ca:1d:98:3f:05:88:fd:b8:79:b4:e5:48:2d:38:ba:
                    46:7a:94:46:cd:34:5c:ca:4d:fa:18:3d:cf:e7:93:
                    14:41:ad:12:dc:0e:6d:2b:00:a4:58:33:cb:49:b5:
                    4f:bc:27:49:02:c5:c2:33:13:c7:3d:95:27:84:a2:
                    ac:b4:84:f5:77:d5:f2:76:ab:46:69:4c:10:0b:1c:
                    d3:19:4e:57:da:c9:6e:16:c2:5b:d6:2e:74:ac:13:
                    fa:00:8f:0c:1b:b3:02:0a:40:0f:ac:68:ea:75:5f:
                    ec:99:b8:ac:35:a8:1e:75:76:a3:b6:03:c0:08:11:
                    37:66:00:af:28:2a:3c:6a:15:c0:83:9c:52:f3:75:
                    a0:bc:71:81:48:0e:2b:e5:d5:f4:f1:ba:64:0c:83:
                    12:60:a3:33:3c:5d:3e:7e:a6:6c:b3:7c:9c:a3:52:
                    9d:94:7c:e1:a6:56:21:b6:06:d8:4e:29:48:bb:5f:
                    11:0a:28:cd:f8:ca:fd:5e:90:11:43:86:29:ec:30:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:B9:B4:87:D3:25:CC:19:BD:E8:8E:93:24:AF:5D:DE:A9:1B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35f15917-cf50-3540-974e-c91ae8179b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:308::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:18:72:42:41:3e:21:4d:12:8c:ee:6b:37:bf:56:f6:e1:01:
         e8:4e:2d:d2:cd:99:b0:2d:d1:8f:20:0f:e7:4f:33:99:cb:41:
         80:9b:94:85:40:4d:36:fd:19:26:62:e6:35:09:c7:9e:55:3c:
         6d:0f:57:de:13:19:7b:ba:18:cd:fd:bb:15:12:54:c1:20:cb:
         a6:12:e3:6e:c3:3d:b3:6b:6d:06:ee:1d:71:cc:bc:58:87:8c:
         62:1a:9c:b0:a2:bb:a0:78:1c:e8:a3:9d:c8:af:f1:2e:83:2c:
         fd:07:fb:ee:51:7a:25:77:2d:9b:08:ee:8b:b0:a4:71:72:af:
         68:5a:6e:36:f6:31:15:da:92:00:ab:88:b2:1c:06:2e:8a:81:
         76:af:9c:7d:1a:a3:83:84:8b:f1:f2:51:f5:53:3e:33:03:0f:
         15:db:14:0f:b9:de:35:fd:a9:f2:a7:61:21:12:e8:22:28:10:
         d6:3a:56:8e:d0:f4:48:4c:4e:04:91:16:5c:75:38:2e:d5:3b:
         24:40:95:97:8d:d1:cc:52:3f:5b:0f:f7:2e:54:70:f9:0a:23:
         5b:30:0b:67:e3:e4:70:84:60:6e:60:d8:7f:ff:57:8d:5c:d1:
         3c:ae:27:d2:6c:99:2c:cf:97:f5:b6:b3:df:f7:1a:66:40:b7:
         65:94:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:16 2025 by rpki-client