Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa
File:                     86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa (raw, json)
Hash identifier:          OTqb/3okJ7B0yixEhyc/otuWpUWN3it4kTNXpOQApec=
Subject key identifier:   F1:7F:E3:93:C7:53:2D:CB:9D:EB:30:99:1F:9E:6C:74:9A:39:EC:DA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFEA2DBC79A0E6479DD328
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     17085
IP address blocks:        2001:470:f5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ea:2d:bc:79:a0:e6:47:9d:d3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=73e6b940-be1e-42e2-908c-17279ccafed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:3e:c4:c4:e8:4e:e1:50:74:07:be:b7:3b:
                    12:c5:f3:26:d9:36:89:56:1f:d0:e2:8c:10:f6:4e:
                    e5:5b:10:fd:96:42:d6:04:2d:d6:7e:a9:8d:e4:2b:
                    44:8d:2f:d9:f8:0a:dd:72:8d:89:13:aa:5d:d4:8a:
                    23:12:3e:09:a0:0e:42:1e:47:ee:d3:d5:f3:fd:e1:
                    86:7e:c0:51:c0:7e:f9:26:dd:aa:94:73:f4:b4:74:
                    e1:48:3c:8c:a8:b5:fe:f4:c1:38:8d:24:11:7a:95:
                    8f:26:0c:07:c4:22:df:9a:11:3f:3c:f3:9d:83:58:
                    ab:1a:bc:89:5f:0d:b3:88:bf:4e:51:48:bc:2d:57:
                    cb:86:90:1b:7e:80:77:ae:ee:83:22:fb:00:69:1f:
                    e9:4e:50:9f:78:b4:08:59:d3:23:39:1b:58:dd:55:
                    8b:d5:4a:72:fc:3d:45:32:16:83:cb:10:00:c5:66:
                    03:4b:7e:13:1b:16:fc:50:63:f9:c1:23:ae:62:7f:
                    43:3f:be:5f:7e:2c:d1:41:9b:f9:b2:1b:a5:25:3a:
                    70:ac:5a:ff:09:a8:25:b3:45:a3:68:14:c7:bd:7e:
                    06:02:32:6d:a9:36:b8:a8:c1:52:eb:06:a8:64:ec:
                    37:f8:c9:79:88:03:9f:c8:54:64:d7:4e:62:eb:10:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7F:E3:93:C7:53:2D:CB:9D:EB:30:99:1F:9E:6C:74:9A:39:EC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86a91b17-bd9c-3d20-8cfc-3bc7a1db9b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7c:2e:7e:c5:4e:80:3e:57:23:96:69:28:19:95:45:ee:7f:
         70:4c:b8:e7:d8:34:ee:b8:34:45:cc:ae:73:62:b9:2b:94:87:
         12:e4:00:39:30:f3:6e:17:d5:d8:dc:26:0d:0f:66:7b:74:c0:
         4b:f0:b7:7f:df:3f:f7:ef:19:df:22:60:04:eb:b4:c8:bb:f7:
         23:ac:8a:bd:33:0b:ac:db:26:c7:73:02:44:3b:92:16:62:4d:
         7e:e9:d5:54:9e:61:29:b8:5e:72:42:96:82:56:2f:fa:66:53:
         69:ef:0b:2b:6d:12:a0:2a:70:fd:5d:8f:c0:05:1d:0f:44:75:
         a6:79:e1:f0:75:5c:fe:d3:8c:01:f3:a5:74:e2:91:2c:ce:98:
         a1:e2:b6:51:fa:d4:3a:f9:1d:36:78:a0:f3:1d:a1:9e:fe:aa:
         45:84:d4:af:80:68:1a:3f:90:34:d1:e3:c2:4e:01:7b:9a:81:
         d2:14:43:5f:be:cf:22:63:e6:1e:6f:26:00:e5:d7:45:79:73:
         10:54:41:fe:42:f7:e9:6d:b8:e1:e1:c1:3b:44:0e:c2:22:ac:
         ee:6f:54:79:97:19:a5:21:14:a3:34:62:6d:9f:85:85:b5:44:
         d8:98:3f:08:85:84:a1:fa:ec:7f:c1:ff:28:62:65:5a:1a:47:
         db:f9:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:02 2025 by rpki-client