Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
File:                     4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa (raw, json)
Hash identifier:          tdhgKcG1yyZpKGGCQ7KzrzXIYPA/PwgSDpcOatMUHUI=
Subject key identifier:   B5:83:92:24:41:B8:BC:E2:07:BA:AC:50:14:58:B0:60:05:32:05:A0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFD5734B93B88D45CA884
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     140577
IP address blocks:        2001:470:24a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:fd:57:34:b9:3b:88:d4:5c:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=01c8d44e-3cd8-4970-b8d7-47ef8e216c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:71:f4:ec:0e:79:74:b6:68:a4:c8:91:ac:
                    5e:5b:ea:4d:4f:ba:a2:1f:a1:72:f3:fb:4a:91:68:
                    06:72:3f:6e:d6:2a:e8:22:94:26:a6:5e:c7:49:2d:
                    0e:94:8f:66:ed:3a:78:c5:25:34:2c:c0:84:73:49:
                    f3:b6:74:2d:7c:73:fd:b9:fb:3b:65:76:84:a6:8e:
                    e4:57:23:fc:ed:bf:83:53:cc:76:11:a1:f1:b7:15:
                    57:1a:f3:3f:23:91:e3:64:aa:34:74:19:39:7b:80:
                    7d:40:c5:18:9b:f6:65:94:4f:e3:7c:fb:b7:13:22:
                    b8:43:63:85:94:db:30:28:1c:ca:a4:b9:30:94:6d:
                    dc:c6:eb:94:ca:90:f6:21:2d:bb:ce:19:f2:98:42:
                    9e:09:c4:59:48:66:05:ee:af:59:c1:9c:bf:57:06:
                    28:ac:ca:be:26:3e:f7:ae:f4:3a:78:9b:07:b6:61:
                    04:42:a7:0f:f6:a7:f7:e0:f9:d8:fe:e3:e4:b1:14:
                    06:14:9c:ce:49:2f:07:13:46:36:2e:f9:41:f1:8a:
                    42:68:aa:68:97:71:d5:4d:11:ab:09:2a:48:ad:b6:
                    7c:c1:c0:49:43:91:3c:7c:72:de:b8:40:41:07:78:
                    59:ec:48:dd:ab:35:e0:52:fa:5b:da:a5:12:95:30:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:92:24:41:B8:BC:E2:07:BA:AC:50:14:58:B0:60:05:32:05:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:24a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:5f:81:34:77:f6:2d:f9:74:fe:ae:4a:b0:fd:ff:0f:10:03:
         62:e8:48:07:82:4f:1c:7f:c3:8c:18:03:1e:5e:d7:c9:27:75:
         8c:8f:be:a2:da:fe:81:1e:9b:e7:b7:fd:1a:fe:55:49:73:8a:
         5f:8e:4c:37:e5:17:69:91:e5:31:85:95:6d:a1:ef:57:10:0b:
         88:99:d7:0b:51:b5:12:fc:9e:9f:a5:bd:f7:fc:9f:1c:5b:a6:
         9f:4b:ec:b2:9d:25:49:ad:4b:e6:19:a8:06:2e:b9:20:3a:55:
         27:52:f4:74:ba:c2:0c:3e:06:fc:25:44:44:a2:4e:34:32:b8:
         c9:d9:9d:29:c0:a3:7f:48:ca:02:52:58:1b:8f:d0:cc:98:4a:
         18:71:94:17:23:f0:e2:4b:29:45:a0:5c:dc:91:6b:f1:2c:93:
         28:ec:82:5f:71:51:5b:bf:d1:95:ce:06:b4:9c:2c:f5:f6:d1:
         96:5f:f0:21:f4:a6:2c:93:6c:98:74:e7:a5:ca:bf:94:78:b3:
         51:de:ea:03:4e:cc:02:9b:d1:09:98:75:71:0b:aa:12:45:ea:
         97:bb:9f:13:30:2b:d6:01:a6:21:8f:3a:09:af:53:8a:38:ea:
         90:ae:6f:d2:03:67:88:c0:47:89:24:78:a2:2d:47:b2:37:6b:
         f6:e1:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:56 2025 by rpki-client