Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81ad15ac-333e-35a0-9b57-86516da5bd92.roa
File:                     81ad15ac-333e-35a0-9b57-86516da5bd92.roa (raw, json)
Hash identifier:          ZK0TI0JYcfCHiqXOEAEGXxXpHiDvLfq3MqDV1aE4hG8=
Subject key identifier:   E0:35:DE:93:B3:E2:F8:1C:D3:75:8E:FE:14:BF:CD:B1:2E:EC:E6:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00144D97041D9EB0EA800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81ad15ac-333e-35a0-9b57-86516da5bd92.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     24893
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:01:44:d9:70:41:d9:eb:0e:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=80ef337f-69d6-4b07-858a-e50a63a9373b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:06:83:5f:37:71:bf:d2:81:8b:21:a5:7e:
                    08:04:1d:1a:fd:73:d1:d2:45:a5:fb:94:62:d5:64:
                    55:69:e1:bd:73:95:e7:6b:f7:82:fd:0e:50:be:bf:
                    ad:5a:6c:1d:0e:f6:be:b5:c4:77:a8:20:3f:1a:68:
                    21:18:f3:44:2b:09:d4:ec:49:84:fc:3a:05:99:74:
                    b1:b5:95:ee:97:f3:ee:bb:37:6d:ed:3c:6d:93:df:
                    5f:84:7d:fc:7a:7a:14:31:9c:5f:dc:3f:ea:9e:f2:
                    41:7f:93:14:3c:8e:96:e5:87:d7:0d:de:3c:f6:2f:
                    58:21:32:0a:5d:53:f2:a4:58:d2:48:a7:26:1a:e0:
                    cf:80:19:a5:b7:1f:50:a8:14:4d:37:1d:4b:63:8a:
                    29:9d:9d:97:4e:35:ef:b3:96:5f:17:da:69:b0:f4:
                    4d:b1:90:32:f6:7c:03:ec:d4:98:db:42:b8:67:d6:
                    bb:ff:6d:0b:ca:d7:c2:4a:14:f3:f0:e8:7c:14:8d:
                    e2:7d:fc:df:c7:ac:94:84:0e:5d:43:91:ca:ac:5d:
                    c8:6e:41:83:83:4d:f3:50:0f:6f:a7:67:83:8a:46:
                    24:ee:0e:8b:1b:61:6f:5a:da:0c:27:5b:87:4c:1b:
                    d6:5d:5a:01:22:5c:98:31:25:33:25:83:28:1e:36:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:35:DE:93:B3:E2:F8:1C:D3:75:8E:FE:14:BF:CD:B1:2E:EC:E6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81ad15ac-333e-35a0-9b57-86516da5bd92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:33:58:85:42:6d:39:99:91:0f:59:a7:56:40:ba:d7:f6:f0:
         a7:a0:e4:cd:98:88:c0:09:29:4d:e2:fc:f6:2c:70:6a:7c:4f:
         f6:06:cc:1e:d5:b6:43:89:8a:15:b1:f1:7a:7d:49:ed:eb:26:
         ce:18:78:a4:f4:9f:b9:0d:0a:dd:89:59:6e:10:64:b7:6b:19:
         15:ef:85:7c:b1:a6:a2:a9:d4:92:53:09:da:96:75:ca:0e:c5:
         82:3d:0c:f4:ef:84:21:d8:9b:b3:61:e4:f6:e3:1c:91:1a:9f:
         17:bc:50:e7:0c:5d:0b:18:10:d4:9f:ed:bc:23:81:ca:36:46:
         d2:a9:fe:2e:e9:7b:8a:f8:f5:1e:49:e4:fc:af:f9:24:d2:0e:
         7d:ab:ea:b1:6c:1d:9c:ed:c1:58:44:78:3e:4e:85:e9:a1:09:
         66:80:57:28:ee:b0:bc:5f:2f:8f:28:cc:5b:26:33:0e:2e:5e:
         dd:88:54:0f:38:2c:b5:5e:dd:95:ba:26:db:55:38:11:f6:69:
         f3:85:1f:78:40:e2:d2:42:2e:15:34:79:0c:3c:5d:63:c6:e0:
         39:5c:db:d5:9c:0a:f1:ad:4d:3f:58:d9:2e:55:b2:b3:e1:68:
         82:90:06:aa:b4:d4:34:56:a6:dd:97:92:23:fe:09:3c:35:a2:
         e9:9e:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:45 2025 by rpki-client