Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a6ad5d-30b9-303a-a6ea-dda179511741.roa
File:                     80a6ad5d-30b9-303a-a6ea-dda179511741.roa (raw, json)
Hash identifier:          1/HBJmhbLpyT94lr2k4n9KEq8akj5eacaUMX7QJ5N88=
Subject key identifier:   00:51:15:75:15:61:97:55:7A:44:DD:1C:FD:98:46:36:B4:2B:41:4E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0156E265C01D60BE1D4B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a6ad5d-30b9-303a-a6ea-dda179511741.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16468
IP address blocks:        2001:470:1ff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:15:6e:26:5c:01:d6:0b:e1:d4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=85723300-6527-4d2d-a1f9-9c0ad9c21d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:c5:1a:0e:15:75:c5:b9:41:f3:f7:a1:fe:
                    6c:a8:1d:9a:8e:08:cc:d4:ab:c5:86:28:28:c5:20:
                    fc:af:a0:16:86:7a:68:39:bf:2f:7f:ce:61:93:c8:
                    b1:34:e7:2c:a4:f3:02:df:74:0e:d3:e4:fd:eb:5c:
                    31:5b:f4:8c:c6:0c:cc:97:e9:e9:98:55:a8:15:63:
                    64:88:f0:4e:70:b2:da:45:94:89:0a:b8:ba:35:92:
                    2f:38:ed:f5:06:b7:31:dd:f9:b3:9e:51:12:88:44:
                    8f:5d:6b:78:26:e9:f1:e9:a8:79:74:f7:d7:49:02:
                    32:7e:7d:a3:a0:b5:cb:93:2f:e3:5d:4d:ce:83:97:
                    da:d4:81:2e:ea:03:1b:44:bb:85:bb:14:ae:1b:04:
                    83:36:59:a5:03:f0:e5:81:9c:82:e1:86:59:0f:6d:
                    62:d2:ec:73:08:8b:7e:12:4a:d4:49:29:ce:57:b0:
                    47:e5:53:39:a5:1b:6a:f6:6f:be:e0:c5:07:c0:43:
                    69:64:22:da:ce:6b:fe:2d:9b:44:d1:2f:cb:74:94:
                    9a:ad:7d:76:44:2f:04:c3:4c:ba:40:71:87:30:c3:
                    ec:d4:2d:34:80:ab:0e:b0:91:f5:a8:5b:17:08:43:
                    54:6a:67:4f:8f:b1:2b:f1:ea:83:0b:ab:ff:7d:0c:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:15:75:15:61:97:55:7A:44:DD:1C:FD:98:46:36:B4:2B:41:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a6ad5d-30b9-303a-a6ea-dda179511741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:24:40:26:fd:81:6b:f4:43:d9:76:37:be:ad:2c:f5:9d:
         a6:62:a2:c9:57:fa:b6:f3:a5:20:a1:7b:36:2c:07:ce:54:81:
         b1:0b:4f:fe:93:e2:64:08:51:af:05:f6:51:a0:c5:29:44:36:
         34:95:a8:3c:db:18:8c:b7:70:c0:18:c6:a2:08:64:9f:a7:54:
         a8:f1:33:46:ee:2d:49:87:75:d0:54:43:ba:52:19:c8:6c:05:
         36:c2:ef:ca:d9:f3:2a:a0:31:ae:c3:39:89:35:f9:af:67:07:
         f3:ff:9a:5a:1c:25:8e:24:6b:00:d1:4c:97:49:1d:18:5d:fe:
         3f:c1:2e:f8:80:b5:6d:c1:26:7f:29:80:2c:52:3a:fc:50:2c:
         8f:4e:50:0c:3b:3d:82:49:f0:ed:32:61:8a:09:6a:a3:2e:b4:
         87:2c:1f:20:d9:2c:a3:81:07:8a:04:c0:c6:0a:b0:a3:c3:b7:
         49:57:9f:e8:df:8c:9e:a8:7f:67:36:6e:e4:8a:1d:ff:77:ac:
         af:c0:4e:8e:46:21:11:fe:1f:2a:5d:64:ea:61:37:41:92:ae:
         79:44:fd:f5:00:c8:fe:87:68:b3:0a:3b:c3:ee:0d:fc:9e:78:
         4f:a1:5c:40:e1:e7:3b:cc:1d:3e:40:bf:9c:d7:cc:c6:7b:94:
         bc:bf:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:48:02 2025 by rpki-client