Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/700bfa4a-ab1b-3bbe-9086-a9b29c80d394.roa
File:                     700bfa4a-ab1b-3bbe-9086-a9b29c80d394.roa (raw, json)
Hash identifier:          7/xJkcgQR0ElBcconVRfLCZDh1SY/xpk1q52vE1prsc=
Subject key identifier:   17:D3:C4:92:99:8B:1A:9F:81:C2:59:AF:ED:69:26:05:20:03:34:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00BD3C19C991188F1D080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/700bfa4a-ab1b-3bbe-9086-a9b29c80d394.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     36124
IP address blocks:        2001:470:34::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:0b:d3:c1:9c:99:11:88:f1:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=bb8db809-3998-4b1e-92d1-ee1f91f8178d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:67:33:b7:56:a7:56:d5:c9:ec:c7:9a:37:
                    50:f4:75:ff:7e:55:85:ea:9a:13:05:13:8c:fc:81:
                    44:ef:41:ce:92:d8:63:95:ba:cb:1c:04:c5:cd:fa:
                    35:c5:e6:08:9e:28:c9:3f:52:f9:d1:ec:d2:fa:77:
                    09:36:8a:dd:a7:77:1b:b1:f5:18:45:79:a7:65:56:
                    3a:95:08:cb:aa:06:ea:68:24:2e:4b:db:6f:f7:48:
                    b2:a8:54:3f:9b:ec:4c:65:37:c7:82:c5:05:17:7b:
                    43:5c:8c:01:c5:d3:02:d3:91:28:cc:22:ca:dd:0b:
                    e4:19:d0:e0:d4:4c:02:a2:f5:23:39:cb:4a:2e:26:
                    f7:2e:22:e3:5a:e5:23:e3:38:fd:97:63:34:2e:91:
                    d5:81:a1:86:ee:85:e9:4e:85:a2:3f:f5:8f:71:23:
                    10:e3:cb:73:a8:8a:3f:29:2c:a6:f2:62:31:78:b4:
                    13:e7:a9:e6:43:33:e5:7c:92:94:ec:2d:82:6d:da:
                    2f:a0:c3:c1:33:5f:88:3e:13:21:bc:d7:4c:1f:a2:
                    64:f5:d0:b0:2e:47:fb:1e:12:1f:06:72:37:5f:01:
                    3d:ba:af:e3:55:8f:8e:a6:93:8f:d5:59:0a:1e:1f:
                    78:bf:47:0c:b9:0e:3e:de:fe:f6:c7:53:a7:e1:bf:
                    f0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:C4:92:99:8B:1A:9F:81:C2:59:AF:ED:69:26:05:20:03:34:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/700bfa4a-ab1b-3bbe-9086-a9b29c80d394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:34::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:04:de:50:02:05:d3:e7:e5:5f:e5:84:0e:31:99:29:34:87:
         b0:29:13:b2:87:57:1f:bf:2f:df:d1:25:6a:47:d9:5d:a8:e4:
         09:d2:56:36:2f:8f:47:cc:51:61:19:8c:ae:bf:6f:3f:69:5e:
         3d:03:5d:94:60:e2:dd:73:c9:49:2e:21:9e:9c:e1:44:20:db:
         41:da:f1:a4:4f:4a:68:a5:f7:c4:9a:e9:08:ca:08:86:d9:7a:
         8f:d2:7c:c1:09:8a:9f:7c:85:c9:e8:58:b9:8c:65:de:34:6f:
         3b:68:62:c3:c4:8a:31:48:81:aa:72:53:dc:21:55:ae:02:af:
         44:d0:31:58:c2:07:f8:24:5f:a4:94:18:41:64:42:d5:54:99:
         df:32:65:d4:ec:eb:e7:76:38:09:48:ed:11:02:43:36:67:67:
         d5:f5:14:b6:26:c9:8e:98:f9:5b:fa:12:49:94:6d:c3:07:d6:
         f4:2d:28:2b:b1:bd:42:95:be:22:3e:2b:bb:42:10:14:a2:1d:
         16:63:e6:9a:cc:a2:a2:58:ba:e2:02:91:b5:46:78:86:b5:72:
         2d:95:f6:1d:8a:88:a1:38:20:b8:23:f1:c9:11:03:80:6b:36:
         72:c3:96:0a:a1:f0:5f:cf:50:57:5e:7c:f1:7b:8d:e2:45:dc:
         75:b3:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:36 2025 by rpki-client