Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa
File:                     9fcb47e4-2631-3189-b033-c457218cf93c.roa (raw, json)
Hash identifier:          1WLE7JDoWgaJM6CmlKO2ilKwor+HDbKMxMVbFrGwNUE=
Subject key identifier:   74:AD:F8:C8:B0:19:6B:53:E6:1C:F0:A1:BD:AB:92:F5:1F:55:96:39
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00421C60540F4CE194600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     10737
IP address blocks:        2001:470:2d1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:04:21:c6:05:40:f4:ce:19:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=12ee0031-7354-4906-8ceb-3e033369a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:e6:4b:41:7f:d0:f6:a9:fd:00:bd:54:26:
                    10:3c:f6:7a:8f:89:87:18:23:d3:98:a2:47:78:0d:
                    4e:78:4f:b6:60:50:a9:af:ef:33:1d:86:1f:60:8d:
                    6b:c6:8e:76:99:13:9a:07:b7:0e:80:15:ca:0a:f6:
                    64:e3:1a:cf:4d:02:15:27:55:d4:32:35:25:a4:1d:
                    16:e0:8b:2a:d5:a9:af:93:e5:c7:78:09:ea:eb:6c:
                    cd:86:66:5a:7f:70:ed:83:5c:9f:94:a7:16:7b:97:
                    c9:f1:0f:66:65:71:56:cc:55:d1:7d:0a:7b:7a:f8:
                    18:ed:c4:15:4d:94:35:ac:39:82:2d:5f:86:38:c1:
                    8b:b0:69:6e:98:09:86:cc:e6:38:4e:d4:40:96:48:
                    b7:71:0c:c4:f2:7e:1a:d1:f5:10:44:e2:86:ad:4e:
                    7b:a0:c5:37:4d:87:4d:42:9b:c1:54:a4:9f:a6:67:
                    d8:9d:0d:01:f5:a8:b5:79:d8:70:09:15:3f:74:88:
                    55:51:cd:7a:aa:d9:f6:db:9c:50:db:5a:09:cd:8b:
                    2b:5e:ea:10:0d:f5:a1:64:7f:00:8a:63:db:96:14:
                    56:50:e4:5a:22:cd:fb:c4:ab:6f:35:74:91:1f:50:
                    5a:8a:66:e1:78:f0:ee:d2:50:91:4c:72:b2:82:32:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AD:F8:C8:B0:19:6B:53:E6:1C:F0:A1:BD:AB:92:F5:1F:55:96:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fcb47e4-2631-3189-b033-c457218cf93c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4f:1c:05:7d:3f:d2:75:ca:dc:08:5f:27:aa:4d:af:6a:30:
         60:63:9b:dd:e6:30:87:c2:f4:36:eb:cf:3c:d0:83:92:b7:e1:
         c2:b9:08:4c:d0:72:e6:75:ae:3d:11:93:37:97:25:87:6b:43:
         81:27:3f:87:6f:5f:f4:ac:99:2b:d1:75:88:30:c0:cb:fd:fe:
         1e:68:50:c1:98:26:08:5f:56:93:b8:95:19:a6:61:88:f2:e2:
         be:c3:c5:31:60:34:b5:a3:27:04:51:4e:aa:2c:19:1f:f9:57:
         65:9e:7f:64:32:06:95:01:eb:b0:d4:5e:a1:3b:cc:14:a3:88:
         2b:e0:9f:35:62:8a:58:88:bd:98:b8:27:12:e3:30:cf:d4:f4:
         02:0d:91:0d:36:fa:b2:37:96:14:73:2c:94:1a:50:56:cf:49:
         3e:8e:ca:b1:89:48:c0:20:dc:db:26:83:1a:5f:03:8e:1b:4e:
         8c:d3:2e:72:c7:cd:cd:c9:53:0f:f6:65:06:cd:9c:3f:fc:e3:
         9f:05:0e:f4:28:03:68:45:f9:44:4a:8d:8a:e2:56:b0:e5:20:
         1d:7e:18:de:52:10:c1:ea:29:43:51:4a:58:c3:41:83:52:98:
         62:8e:b8:fa:47:40:fe:bb:ab:be:96:c9:2d:fb:9f:9b:03:5e:
         5c:94:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:23 2025 by rpki-client