Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa
File:                     37c9addf-7b8f-33a5-96eb-afba41e723d5.roa (raw, json)
Hash identifier:          0RqUastbr/ntWDkRzhL/SWhGOSdmbSvQOHbgKqbkc5c=
Subject key identifier:   8E:D7:F2:FE:FF:EE:F1:51:E0:2B:1D:87:95:DF:70:7F:C1:E7:2B:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0061E3BC3FB8E8FB56D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     23047
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:06:1e:3b:c3:fb:8e:8f:b5:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=0fbdb518-1143-4295-b8f0-df53734ad8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:63:d0:70:19:da:c4:0b:5a:ef:3d:db:bd:
                    fc:88:aa:e9:08:60:e0:39:34:76:95:b4:96:a6:0d:
                    0b:57:f8:03:18:31:5f:7a:e4:03:ae:37:e2:d3:cb:
                    8b:a8:b1:25:72:bf:76:6a:2d:18:5c:75:05:3f:7a:
                    c1:ba:55:96:db:50:c1:5c:82:d5:4c:03:f4:8c:5b:
                    6e:69:f7:5e:c3:36:0f:03:81:cf:86:94:1e:f7:91:
                    17:fd:e4:08:0b:b9:c1:0e:5b:1d:38:a4:a9:1d:0b:
                    bf:75:ff:4e:b3:d4:99:6e:48:df:da:7e:d4:81:6e:
                    09:21:9f:7b:b0:5b:82:52:b0:3b:01:ed:b6:ec:ed:
                    f0:0c:4c:6f:22:eb:fe:07:75:4c:fc:90:3e:94:c0:
                    19:01:ca:6a:65:40:11:b6:8d:47:82:03:88:12:18:
                    5d:26:7b:a1:bb:92:30:bf:35:aa:bb:2b:6e:49:60:
                    a1:7d:e9:28:86:de:a1:2d:5b:7d:be:ef:22:b2:22:
                    98:25:7b:b5:4c:dc:66:b1:39:6d:61:06:ce:b8:4d:
                    e6:cc:be:b8:64:b4:9f:f3:2a:50:c7:a2:e5:58:6f:
                    e7:08:5b:49:10:25:ff:16:a1:1c:cd:10:52:e6:b0:
                    bd:dd:5e:24:80:5a:6a:20:5a:29:f4:f2:27:ce:4f:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D7:F2:FE:FF:EE:F1:51:E0:2B:1D:87:95:DF:70:7F:C1:E7:2B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:1c:f9:4c:e7:74:c7:fd:a5:a4:e3:77:fc:1b:a3:45:26:01:
         fd:63:85:84:12:cd:bd:5e:12:96:3d:ec:60:04:a8:69:76:b8:
         a0:c7:44:87:fb:bf:ce:71:81:45:b3:74:32:cf:2f:10:1e:5f:
         8c:07:16:e0:12:96:4a:8f:3d:6a:b0:11:d2:fc:8b:dc:21:f9:
         d9:ae:f5:a5:c6:88:60:0f:72:f4:85:e8:27:e3:be:df:1f:3d:
         d7:f1:c8:01:d6:54:49:30:76:eb:ed:60:d7:89:c3:db:b8:c1:
         36:62:ef:6e:fe:7c:c1:ac:66:24:a1:de:44:c0:b0:34:c3:b3:
         10:43:ea:54:3a:28:63:3a:7d:7f:a9:b4:f6:bc:6e:5c:e2:1f:
         89:e0:50:b1:9f:87:b8:90:6c:f0:0c:9b:e8:0f:b8:8a:e2:90:
         dc:7b:e1:0c:f0:bc:bf:7a:96:e0:a1:12:19:cc:fb:83:98:fb:
         89:10:d2:fc:7c:c7:15:9c:cf:fd:db:93:26:64:7d:ad:c7:ff:
         4a:74:42:93:3d:66:78:6a:98:57:1d:f3:2f:30:14:f1:10:a4:
         c3:11:a8:7b:4b:fb:95:54:48:ec:d4:d1:4a:fb:8d:99:a4:43:
         a2:65:24:90:f3:29:48:8b:39:37:2e:fa:62:60:c0:74:0c:11:
         9e:d7:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:33 2025 by rpki-client