Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/873ce473-2f5d-3d45-ad0f-68394fc387aa.roa
File:                     873ce473-2f5d-3d45-ad0f-68394fc387aa.roa (raw, json)
Hash identifier:          aZA0zEQ9pMtTMA2AfeLR86javOo/BNVn7PZXYceioco=
Subject key identifier:   91:55:47:D8:3E:46:6E:9F:38:88:54:56:0B:A3:39:F2:D8:32:F4:3C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFF1F5F89BDC5EA6A02180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/873ce473-2f5d-3d45-ad0f-68394fc387aa.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     3855
IP address blocks:        2001:470:b6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:f1:f5:f8:9b:dc:5e:a6:a0:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=8f19f51f-5157-41ae-ab46-6d62e2f97ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:2e:8a:37:b1:d2:84:3c:21:54:97:09:d1:
                    39:fc:55:bd:98:b3:8a:ae:5b:c4:82:a6:05:1e:5a:
                    02:d5:79:a2:aa:43:11:4b:89:49:70:51:5a:a7:82:
                    a3:5a:4c:45:20:92:91:a3:2e:e1:46:68:5d:30:87:
                    88:1a:ca:0f:f0:39:ea:df:9f:27:2d:b6:99:86:b7:
                    4d:a4:5d:d9:5b:2f:04:b0:8a:5e:3d:69:19:4c:ef:
                    27:0d:9f:e5:44:6f:a7:df:49:62:44:04:63:7b:c9:
                    00:4e:34:b0:f4:68:fc:e5:70:93:e8:c6:d9:54:1f:
                    eb:65:6e:e3:46:00:10:9b:85:7d:85:83:2c:33:42:
                    5b:4c:3b:06:5f:ec:b4:3b:04:23:c7:fd:f7:f9:1e:
                    50:c8:e7:5b:6d:4d:eb:16:f6:f6:07:3e:8b:7b:9f:
                    44:d9:df:d7:1f:3b:20:b9:07:b7:1f:76:4f:68:63:
                    a0:a9:19:e4:eb:72:2a:87:02:88:f5:50:1f:1d:8d:
                    5b:d9:9f:65:8e:21:8d:5e:33:be:8c:b9:5c:35:ef:
                    44:92:29:fb:1d:19:a5:89:4a:f3:f3:45:bc:c8:79:
                    b6:a2:a8:2a:8f:5f:32:7c:cd:52:f9:f7:d5:e7:6d:
                    2d:ac:3d:49:da:d3:28:b9:96:20:be:e4:96:6e:4b:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:55:47:D8:3E:46:6E:9F:38:88:54:56:0B:A3:39:F2:D8:32:F4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/873ce473-2f5d-3d45-ad0f-68394fc387aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:64:71:b3:de:9c:8a:2c:77:fb:3b:0f:24:5f:13:a7:27:
         42:bb:b7:9d:26:a6:6c:d9:5b:86:72:8c:4a:66:83:2e:c2:76:
         73:70:d8:2d:94:f5:70:ad:db:8d:0d:09:62:1b:a5:c8:a0:fb:
         24:a5:94:85:78:8b:70:75:f6:f9:a3:af:ec:eb:11:7c:31:47:
         b2:ad:a2:e3:57:d8:63:c4:b2:ac:49:9b:a4:2f:92:bc:4b:23:
         ca:e8:45:5a:c7:81:cc:86:37:c2:32:bd:75:94:b9:f7:f1:42:
         34:aa:02:76:6e:2e:61:db:26:88:d1:8d:10:ce:7b:3a:9b:1b:
         2f:4b:e0:a1:ce:be:49:76:82:30:76:72:9f:0b:6d:14:bb:c6:
         48:ce:4a:77:e4:b4:15:a3:e8:11:e8:9f:2b:aa:ca:3d:fb:81:
         8f:dc:92:6b:d4:59:55:71:51:cc:8a:5b:fd:cc:03:7d:08:a1:
         5c:2b:94:48:d6:3a:c8:a7:b9:70:c1:27:fd:ba:cb:bf:69:b8:
         e8:18:70:fe:96:33:7d:80:9c:1e:6f:ad:9a:94:56:18:58:01:
         7c:3b:9e:05:8c:40:1a:d2:42:52:f0:e9:ce:b0:45:bb:ba:d5:
         80:b4:b5:98:a4:ea:93:c5:ab:4b:a3:9f:75:2f:ec:73:5f:2a:
         89:4a:15:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgZz/H1+JvcXqagIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
OGYxOWY1MWYtNTE1Ny00MWFlLWFiNDYtNmQ2MmUyZjk3YWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnEuijex0oQ8IVSXCdE5/FW9mLOKrlvEgqYF
HloC1XmiqkMRS4lJcFFap4KjWkxFIJKRoy7hRmhdMIeIGsoP8Dnq358nLbaZhrdN
pF3ZWy8EsIpePWkZTO8nDZ/lRG+n30liRARje8kATjSw9Gj85XCT6MbZVB/rZW7j
RgAQm4V9hYMsM0JbTDsGX+y0OwQjx/33+R5QyOdbbU3rFvb2Bz6Le59E2d/XHzsg
uQe3H3ZPaGOgqRnk63IqhwKI9VAfHY1b2Z9ljiGNXjO+jLlcNe9Ekin7HRmliUrz
80W8yHm2oqgqj18yfM1S+ffV520trD1J2tMouZYgvuSWbksX3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJFVR9g+Rm6fOIhUVgujOfLYMvQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODczY2U0NzMtMmY1ZC0z
ZDQ1LWFkMGYtNjgzOTRmYzM4N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALOGZHGz3pyKLHf7Ow8kXxOnJ0K7t50mpmzZW4ZyjEpmgy7CdnNw
2C2U9XCt240NCWIbpcig+ySllIV4i3B19vmjr+zrEXwxR7KtouNX2GPEsqxJm6Qv
krxLI8roRVrHgcyGN8IyvXWUuffxQjSqAnZuLmHbJojRjRDOezqbGy9L4KHOvkl2
gjB2cp8LbRS7xkjOSnfktBWj6BHonyuqyj37gY/ckmvUWVVxUcyKW/3MA30IoVwr
lEjWOsinuXDBJ/26y79puOgYcP6WM32AnB5vrZqUVhhYAXw7ngWMQBrSQlLw6c6w
Rbu61YC0tZik6pPFq0ujn3Uv7HNfKolKFd4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:17 2025 by rpki-client