Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/734bc1d4-d597-3bd4-ad95-94c524cb16d8.roa
File:                     734bc1d4-d597-3bd4-ad95-94c524cb16d8.roa (raw, json)
Hash identifier:          RjHEC/3HOy0pDBVmhGpPfKZ/+P4YBM5oBzyY5kxezaQ=
Subject key identifier:   85:F0:42:02:F2:07:14:F5:83:E3:86:76:C8:3B:7E:0D:B6:96:A0:D2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01908D8E231B177235280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/734bc1d4-d597-3bd4-ad95-94c524cb16d8.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     25855
IP address blocks:        2001:470:1d2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:19:08:d8:e2:31:b1:77:23:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=dd318f32-b300-4ce7-9eef-0ac18c3c3db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:29:22:51:52:a6:ee:b5:f9:a0:e6:29:da:
                    d1:31:28:1a:96:f9:b0:1c:f8:21:27:54:44:e1:5e:
                    e9:71:e5:eb:f7:9a:36:e5:13:30:b3:ba:6a:9e:9f:
                    a2:cf:c3:d1:77:4c:16:80:f5:57:b2:9d:90:b7:d6:
                    4c:02:d2:c8:ba:bc:51:cc:58:e8:8c:a0:ab:7f:d4:
                    44:8b:2d:06:b6:38:d4:9c:37:b7:c9:bd:93:4b:95:
                    cc:60:2e:6f:81:10:a2:96:5a:f2:96:fc:01:1b:75:
                    23:28:bc:42:ba:26:19:09:75:51:bd:60:68:28:42:
                    43:8d:6b:27:6b:25:c3:a8:9b:1c:7c:4b:49:91:88:
                    dd:39:7b:f3:62:d5:b2:45:ab:01:d7:e1:cd:78:aa:
                    34:7c:32:db:09:80:37:c7:4f:46:d6:12:9d:f9:26:
                    f1:43:0f:ba:1f:4d:5c:44:48:e2:1e:08:0e:66:02:
                    a5:65:5f:84:64:4f:96:26:6d:7e:c3:87:52:45:dc:
                    ca:94:c1:af:2c:6a:df:b8:fc:65:40:50:76:0a:74:
                    d3:14:65:83:29:32:5b:89:a3:cf:a2:99:6d:33:56:
                    de:3a:c0:d4:fc:9b:e3:c3:51:f5:be:c8:1f:90:1b:
                    fe:45:ec:73:d8:b0:ca:36:e0:f8:59:f6:0e:04:5f:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F0:42:02:F2:07:14:F5:83:E3:86:76:C8:3B:7E:0D:B6:96:A0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/734bc1d4-d597-3bd4-ad95-94c524cb16d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:34:a8:0a:f6:2c:62:ee:ef:15:6d:0c:1a:04:49:c9:af:ba:
         9a:94:a8:8d:ff:05:a0:02:2c:b8:d4:8a:59:45:82:3a:e7:dc:
         8b:39:3f:ce:42:df:21:d3:ea:e4:07:70:f0:e5:c6:84:96:a9:
         ec:81:06:1b:7d:8d:58:04:59:97:e8:c2:01:e0:43:59:06:0b:
         01:cb:17:ee:d9:29:28:08:8a:8e:69:f1:62:11:1d:34:df:6d:
         c1:04:06:15:72:e5:55:67:9f:29:5e:54:d8:85:3f:f3:d5:c6:
         8f:6e:82:60:81:a8:0c:78:d2:dc:bf:1e:17:b5:ef:6d:87:fe:
         b6:1a:80:41:f7:fd:0f:74:58:db:97:47:27:d4:56:db:50:7c:
         7e:96:82:bc:d8:b9:42:92:98:88:6e:4b:79:79:86:07:6e:e2:
         04:d7:7a:e8:e8:f8:1c:4e:aa:d1:e7:da:e7:71:23:15:4d:f8:
         21:47:0c:03:85:ec:99:c9:6e:ac:ae:55:c2:24:85:1b:54:e1:
         01:9e:1a:49:28:3c:d2:28:12:a0:81:7c:96:09:25:b5:94:3f:
         ad:96:89:36:28:b9:bb:bd:51:51:13:9e:ed:f2:27:5d:e8:b0:
         f3:d5:ba:f8:aa:a7:f1:90:4b:9f:d1:e6:b2:07:70:fc:bb:f3:
         b2:17:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:50 2025 by rpki-client