Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b6ba632-33a2-3507-8ecb-bdd95a529099.roa
File:                     4b6ba632-33a2-3507-8ecb-bdd95a529099.roa (raw, json)
Hash identifier:          Znwtv35reOUeXR5Z6hH2yrmKcICoVewnnRb5GMMIeP0=
Subject key identifier:   85:1F:AC:80:13:19:8B:8C:F9:97:2D:88:B1:4D:65:1F:11:86:CB:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D019D5BD67CE5BFF3A67C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b6ba632-33a2-3507-8ecb-bdd95a529099.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     201873
IP address blocks:        2001:470:22d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:19:d5:bd:67:ce:5b:ff:3a:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=139258c0-0019-4c67-8de8-2a75a186be0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:b2:e7:6f:d9:48:bc:d8:fd:cc:03:1d:5b:
                    19:38:6b:df:8e:18:42:87:c4:5b:b4:e9:f6:f0:de:
                    ba:68:95:83:6e:23:20:7b:81:22:6a:24:2b:1e:e9:
                    ca:ae:50:4b:c5:87:45:cc:3e:e5:18:13:3a:7a:2c:
                    79:97:0c:74:e6:04:8a:e2:12:4b:4d:93:90:ba:7d:
                    81:08:eb:b8:cc:de:a8:f5:1b:5b:4c:9f:94:a9:8a:
                    76:70:af:db:7f:67:ca:bb:98:58:88:f0:19:bc:c7:
                    ad:fa:c0:e0:1d:b3:f1:64:ac:b5:fd:0d:7f:32:22:
                    d2:96:cc:fc:66:46:75:78:2d:84:d4:31:96:5e:70:
                    38:47:53:f3:ba:86:d2:6e:d6:4b:8e:28:d6:3c:44:
                    44:f9:fb:b7:74:d6:75:55:d2:8d:f4:a5:bc:71:42:
                    ab:4f:a2:07:c1:c8:2e:97:19:77:34:25:ba:42:a3:
                    fd:27:ec:d8:9f:58:df:0c:1a:c5:ac:ef:d0:09:9e:
                    9e:46:0b:89:a4:30:9c:54:7c:f5:3d:58:dc:5f:c9:
                    a0:6e:06:ee:0d:da:13:d9:8e:0c:84:cc:e5:62:29:
                    8d:1c:09:8a:48:a1:22:fc:c4:e4:db:d5:2c:1f:3a:
                    1f:69:32:90:e2:59:a8:3e:ac:80:a6:75:ed:15:f4:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:AC:80:13:19:8B:8C:F9:97:2D:88:B1:4D:65:1F:11:86:CB:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b6ba632-33a2-3507-8ecb-bdd95a529099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:22d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:be:ae:7e:d3:c1:05:05:d5:60:ad:26:19:0c:ed:6d:d9:
         1b:c7:f8:b2:e0:69:bc:69:da:be:c0:b3:e8:24:00:86:48:45:
         62:f9:7c:d1:a7:ab:c7:e0:7e:6d:5e:85:1c:28:a6:f5:34:cf:
         a1:5e:a3:42:c2:30:ad:cd:db:31:17:50:34:ee:98:5a:8f:60:
         f7:d9:74:74:df:1e:de:b4:77:26:05:5f:18:81:c3:e5:da:1d:
         a4:2f:02:ad:00:66:e4:06:74:c8:d5:18:cf:c7:2d:d7:e4:fb:
         21:f4:f3:ca:05:5b:42:0d:8a:0d:3b:b0:80:6c:16:98:2a:67:
         64:62:11:42:35:77:3b:72:74:53:98:7a:1a:91:14:dd:c3:45:
         64:40:84:c8:bc:4c:b6:eb:19:95:8d:fb:4b:7b:92:4c:dd:e9:
         70:b6:53:13:00:6a:9b:bd:38:64:f2:db:71:cd:24:3e:c5:1b:
         0d:28:e6:d1:65:0f:2b:3a:70:64:96:2e:23:2e:25:76:af:ed:
         14:26:7c:d8:66:19:e4:d7:b2:ac:77:b7:4d:36:10:44:44:6c:
         ba:2a:11:46:f4:30:b1:fa:2d:63:ef:66:ba:0f:4e:6b:2c:76:
         e7:12:d8:9c:b1:6c:fa:d4:2a:d7:b6:94:fe:52:c3:f6:82:d4:
         c4:29:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:16 2025 by rpki-client