Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa
File:                     622aeb41-0c05-3106-ab4f-4fa4647dd726.roa (raw, json)
Hash identifier:          zKVIYOMtxz86G4MTtBdHxGXtlX1dah5iifJSRDLizg8=
Subject key identifier:   86:37:3E:F7:91:EA:4C:93:1C:A9:01:FE:AB:3B:37:41:32:76:CA:FD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D004C719A29C387EE19A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     33302
IP address blocks:        2001:470:19b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:04:c7:19:a2:9c:38:7e:e1:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=b84f8a6c-d74b-44df-af6c-aab918229745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:bf:16:14:d1:14:91:6f:6b:eb:8e:e4:ea:
                    83:f1:d8:da:d6:5c:1b:4d:fd:5c:b1:a2:f8:61:09:
                    72:95:7d:28:fb:b5:04:f0:ce:ae:85:77:b4:9e:8a:
                    7a:55:d1:5b:ed:ce:01:ac:eb:59:73:b5:51:c0:f5:
                    3b:18:cc:01:6b:47:94:4b:5c:8d:b9:60:f2:cb:20:
                    ec:7e:12:56:e1:59:40:76:de:97:96:f1:72:f8:63:
                    e6:df:cc:8c:08:48:4f:95:e0:38:8a:ad:dd:8d:aa:
                    87:a5:d2:8b:53:f2:fc:f5:9f:34:98:33:e5:c7:a4:
                    e6:d7:82:a1:eb:8d:a6:96:39:96:db:c4:a6:95:1d:
                    c0:0a:40:97:4b:65:c1:a4:d0:d2:4a:57:3f:ac:ac:
                    b6:bc:0f:79:c2:22:83:c0:cc:4a:7c:92:88:31:fc:
                    0b:0c:08:77:8c:7a:19:82:de:47:c3:68:8b:97:89:
                    41:4a:be:8d:21:dd:8b:4d:b1:69:e2:06:7b:b4:ef:
                    34:c2:a6:b3:ca:62:ea:85:ee:2d:f5:b7:a2:f5:10:
                    e7:f4:96:20:24:d0:cb:6d:1a:f6:79:f0:e2:df:bf:
                    32:c2:35:33:88:19:2a:7b:7c:36:a4:37:81:e9:54:
                    67:dc:a2:fa:70:8d:6e:23:c2:6e:e9:be:df:6a:3c:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:3E:F7:91:EA:4C:93:1C:A9:01:FE:AB:3B:37:41:32:76:CA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:fb:9a:52:1a:d8:d1:29:d5:30:48:49:6e:4a:32:b0:4d:
         63:4d:82:c5:1e:3f:59:5f:4c:24:77:17:e2:36:85:c4:1f:17:
         99:7d:e7:27:8f:b0:5b:c9:81:b9:b4:7c:b9:3b:df:19:f4:08:
         c4:91:9f:a8:87:bd:ef:48:1d:4a:ea:f2:94:e5:b4:89:11:da:
         20:ed:d3:1d:f9:89:6f:94:b4:d0:99:44:02:09:76:51:db:a8:
         41:42:2a:ef:ab:7a:6f:44:9b:f9:e3:d2:59:ae:86:87:b5:c7:
         9a:25:2f:ba:80:47:1f:cf:78:af:e2:d4:9d:62:9b:10:79:40:
         61:82:28:9e:f6:be:fc:fe:7b:f0:37:4a:d4:1b:a2:4b:7a:03:
         76:da:e0:13:0d:a8:6e:8a:f3:88:3a:dc:12:84:75:e8:6c:34:
         1b:54:6a:73:9a:66:4c:a3:70:ac:22:5f:d4:82:45:62:3f:b2:
         32:bd:8e:31:3c:b7:3b:82:bd:35:7d:9a:93:1c:ac:e2:f2:44:
         14:25:4a:4c:65:cd:72:f8:38:b4:1f:a9:b9:f5:42:e5:3c:90:
         83:eb:cc:d2:71:f8:af:80:81:59:b0:45:0e:f0:2d:7d:29:ed:
         57:06:2e:9f:0a:40:d8:71:d7:4f:a5:0e:36:11:f1:90:fa:ed:
         48:be:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:51 2025 by rpki-client