Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa
File:                     9abe08a3-894f-3656-a420-d1dae8ad45e6.roa (raw, json)
Hash identifier:          BqaQ4GWjkk0+YLToVs7TyLMleqO28GfkBMx5euLaQnU=
Subject key identifier:   0B:80:E4:FE:AE:F3:6E:EA:46:08:E2:C3:6A:24:1C:FB:C3:31:31:01
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFFB8875E2EF0808311F8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     30886
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ff:b8:87:5e:2e:f0:80:83:11:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=1e0cb388-36f3-4a6f-b689-79babd1edcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:12:14:b3:d0:e3:d1:ea:d9:56:1b:6c:d4:
                    38:7f:a6:0c:a0:f0:7d:8c:fe:5f:f4:2b:a9:fc:51:
                    d2:84:fd:23:a0:12:48:81:3f:a8:c5:14:56:d3:f2:
                    70:a0:6d:fc:2d:8c:cc:b2:8e:3d:02:b8:02:d9:34:
                    c3:b5:4d:51:4c:71:db:d6:01:e8:64:b8:62:8f:6a:
                    0a:39:d3:db:a4:e3:c4:00:7c:46:10:b2:d4:b4:cd:
                    6b:29:d2:f3:96:c2:af:f6:54:5f:05:ec:a4:7f:f7:
                    04:5f:7d:0b:1e:49:0f:5a:d5:7c:52:d9:ea:63:2b:
                    4e:dc:c7:b9:1e:aa:35:89:a6:41:45:c4:d7:94:7a:
                    f2:b0:fe:de:70:b8:a2:05:5f:c2:1c:d5:61:36:4e:
                    16:59:48:33:b1:d9:9b:ad:33:bd:21:9c:03:90:0b:
                    2b:0b:a5:f7:a1:97:57:f4:58:03:99:9c:72:f8:58:
                    fc:c3:29:9c:2f:47:ae:09:2e:cf:1e:82:b5:7e:d4:
                    94:bf:48:1b:e3:0a:42:56:54:41:db:43:9d:f1:14:
                    a4:cc:f8:45:9e:18:19:17:11:89:6a:ee:e5:c2:ef:
                    22:bf:ff:69:ef:fe:52:1c:43:ed:83:9a:35:b3:bf:
                    04:8b:b8:ac:4d:7d:69:0f:a9:1c:bf:7e:4c:fa:21:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:E4:FE:AE:F3:6E:EA:46:08:E2:C3:6A:24:1C:FB:C3:31:31:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:81:56:87:e0:52:bc:93:7c:c0:44:22:9e:13:34:e6:97:64:
         95:89:28:a8:b7:a4:96:0b:ae:61:ab:4e:e3:44:bd:c5:e4:dd:
         eb:b4:f1:cd:57:b1:18:bd:53:e7:c5:8c:d3:6e:b0:77:f6:51:
         a2:fa:94:c9:e8:f5:7e:28:37:a6:59:6b:ab:05:ef:c3:9d:23:
         8e:84:36:6a:25:e7:57:04:5a:1c:27:08:c8:a9:19:49:59:22:
         1b:7a:ee:e2:91:f0:ce:5c:76:38:20:15:31:a9:36:0e:8e:b8:
         e3:8b:b5:37:ad:db:36:f0:d0:0c:88:1e:ba:5f:43:8b:05:21:
         72:c5:02:b1:b1:42:35:90:37:cb:06:b7:e9:83:67:c7:25:4e:
         a6:b2:f5:ea:85:cb:cb:e3:de:36:6e:64:2a:8f:73:66:91:2e:
         69:0b:f0:fd:e6:17:97:1c:42:a5:ad:e3:11:d7:eb:b4:d4:4c:
         43:eb:c2:fb:e0:56:57:b5:69:33:dd:ba:d3:c2:17:7b:45:57:
         f1:c5:56:81:29:d4:5c:2e:88:31:cf:3c:74:bf:7c:c8:49:73:
         5e:9d:c9:f9:a4:38:b4:a9:08:38:3a:48:e3:7b:ae:bc:0a:fc:
         64:72:bb:2c:89:5e:12:40:d0:f6:3b:2f:24:03:6b:72:77:af:
         f0:0b:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:44 2025 by rpki-client