Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415e1add-d08a-35ca-a00e-d9e16c81efbb.roa
File:                     415e1add-d08a-35ca-a00e-d9e16c81efbb.roa (raw, json)
Hash identifier:          611qatRy6FA8KLrBmeRu74Dkt4zU7uArRcxboknuyc8=
Subject key identifier:   BA:7E:99:5C:FC:C5:27:80:16:FC:C7:FA:A5:B5:33:D6:4A:8B:C2:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0194F53099FB500401A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415e1add-d08a-35ca-a00e-d9e16c81efbb.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     33725
IP address blocks:        2001:470:219::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:19:4f:53:09:9f:b5:00:40:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=1d099e19-8bd2-4c1e-a03c-3601a87fd149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:46:9b:65:69:cd:9c:c4:c7:06:48:a3:37:
                    94:22:09:5b:61:e1:c4:c4:2d:9a:e1:44:c6:37:76:
                    da:fe:f0:27:a3:eb:8c:89:6d:99:41:fe:6e:01:6c:
                    d9:8f:4c:71:bf:16:b2:a6:8f:45:65:99:d8:82:63:
                    1c:cc:7a:e1:bf:b9:0b:fb:0a:23:e4:9c:e0:43:b7:
                    b8:f3:11:a1:46:e6:ff:10:c4:2c:83:75:2c:05:8c:
                    90:fe:d2:34:7f:6e:2a:2e:ad:a3:17:8c:85:44:10:
                    19:d6:e1:ef:0f:d8:99:fc:3e:6c:46:ed:ba:04:40:
                    6d:3e:50:b2:7d:dd:b5:34:ee:49:90:3c:c4:3a:0a:
                    be:9c:11:c0:87:af:a1:80:47:b8:01:c3:c5:15:d0:
                    fe:71:c2:de:0e:55:b9:e1:98:ce:08:66:f3:42:fb:
                    3e:ba:3f:af:c4:de:e6:85:5c:b5:69:36:c4:fd:e6:
                    47:98:29:62:ac:65:33:59:80:02:90:40:69:61:5d:
                    cc:1b:9b:22:00:ad:5b:bf:1c:e5:20:ff:40:bb:0b:
                    80:22:29:b4:f7:f9:cd:c9:d1:3c:d7:e0:a3:cf:c0:
                    2c:a9:23:3c:7b:b4:6e:09:16:7a:c3:00:44:db:cd:
                    27:59:66:55:4a:50:ec:12:b8:51:7a:d2:cd:b0:d3:
                    ab:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7E:99:5C:FC:C5:27:80:16:FC:C7:FA:A5:B5:33:D6:4A:8B:C2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/415e1add-d08a-35ca-a00e-d9e16c81efbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:219::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:06:21:69:8b:1b:f2:69:4c:b0:31:49:db:ad:75:46:51:
         9b:17:3f:16:63:4c:a9:38:96:fc:ce:f7:a9:47:ca:74:05:fe:
         69:6c:44:32:e3:8b:de:4a:e7:73:67:27:ab:a5:5d:93:19:7d:
         86:f4:08:f0:d2:54:f0:7a:56:b9:10:db:95:a3:11:51:64:14:
         68:95:53:63:cc:5a:28:1a:91:79:5d:a6:a7:8d:5c:2b:b2:3e:
         ad:af:b2:61:d8:af:c4:ab:3f:43:49:6d:c3:c8:ca:17:11:95:
         b3:d6:1f:6c:cb:c4:58:42:ea:6f:64:60:da:38:2f:a4:74:14:
         f2:43:22:56:67:9f:48:d2:53:27:4e:be:a2:87:2d:de:d5:cb:
         8f:87:9d:09:18:c4:9e:5b:08:59:2e:b7:b7:f6:ae:bf:6b:f8:
         d6:dd:3d:7d:54:ed:0b:55:fb:e7:93:bc:ea:70:bd:fd:43:b3:
         d0:2e:ba:ac:2c:b9:93:79:24:8a:26:84:b1:84:9a:75:6f:fa:
         b4:56:0f:fe:53:6e:c4:83:1c:e2:c4:55:52:8b:f5:04:5a:33:
         9a:ca:ea:bd:40:30:37:9c:b0:5d:67:97:a1:56:01:de:31:8c:
         f9:ed:a6:a0:97:6d:d8:e4:93:21:9f:18:9b:23:c5:73:71:e2:
         50:db:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:31 2025 by rpki-client