Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa
File:                     bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa (raw, json)
Hash identifier:          8KKC9kzfdZDNz4aSROH//fPToybZb6wULEY52+QcqPU=
Subject key identifier:   2B:98:82:E1:48:5C:E4:A7:3C:7E:7B:B0:FA:F2:18:B2:DE:DE:55:82
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFED9D0842867692C07980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     395717
IP address blocks:        2001:470:143::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ed:9d:08:42:86:76:92:c0:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=73e2dcff-0839-4a71-8976-cff8d05ff681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:52:f6:c2:04:60:f7:45:83:ac:2b:c4:28:
                    79:b3:15:c8:c3:1b:32:eb:b6:a1:d0:aa:b8:2c:26:
                    3d:e5:5d:b4:b8:23:d5:78:ac:eb:f0:ff:76:64:ce:
                    c2:8f:c0:b2:bc:41:b7:76:6b:d2:9e:99:3d:f5:d0:
                    4a:9a:aa:4c:8f:30:33:d5:96:b7:83:a9:f1:b8:c9:
                    fb:01:47:47:f8:3a:4f:9e:6b:ef:dc:fb:96:54:04:
                    92:5a:01:18:d7:8f:a1:49:92:63:91:41:7e:b6:eb:
                    8d:3c:22:53:e8:f8:84:e8:0f:25:84:81:32:84:db:
                    c3:c8:53:45:31:4f:f8:55:61:9a:6f:dc:92:aa:b2:
                    65:d6:b1:fe:57:81:78:7f:c1:d1:16:b2:d5:51:d0:
                    39:43:65:32:c5:2a:56:8f:b3:df:b1:8d:a5:5a:5d:
                    96:e8:f6:37:48:e2:da:57:f4:e4:de:08:d8:38:92:
                    52:75:5f:2d:35:3b:25:7c:da:db:2f:15:78:12:4c:
                    3d:2f:d4:27:9d:29:b2:bf:46:7f:e2:ba:f7:df:df:
                    89:c3:e4:6e:44:2f:37:41:26:cc:d6:1c:d2:d9:ce:
                    1a:6c:fe:c7:a7:94:04:d5:60:66:40:49:12:c2:03:
                    37:8b:4c:8c:1e:b1:59:98:91:af:ba:6c:25:79:fd:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:98:82:E1:48:5C:E4:A7:3C:7E:7B:B0:FA:F2:18:B2:DE:DE:55:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:143::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:c7:10:2e:07:ee:a8:28:b6:91:87:e7:6e:ad:be:ec:73:2f:
         84:6d:98:6c:63:a7:1f:50:fd:d7:f1:2b:e8:ce:4a:47:e6:45:
         b1:5f:69:f8:e6:52:66:75:0c:fe:86:04:ca:b6:f3:fd:e6:98:
         f5:f0:de:5a:56:af:63:3c:67:63:e4:e6:4a:7b:84:a8:52:4f:
         25:30:4a:bb:56:a7:2b:46:4d:8a:0c:7d:90:5b:89:a0:b0:ec:
         de:d1:56:30:35:e9:01:1a:07:fc:7b:ba:6c:06:9e:0b:cd:a4:
         ce:2a:a8:f8:2f:93:dc:42:20:b1:97:a9:a0:9d:de:0b:13:5f:
         ca:dd:bd:c1:c3:5f:14:24:83:93:54:c6:8f:a3:a9:a6:c5:29:
         83:78:59:89:d9:06:da:ce:cd:51:97:f6:04:83:19:17:bc:d1:
         75:21:75:a7:6e:25:06:fa:82:a5:6e:34:a8:4c:47:c4:9a:4a:
         42:70:93:4c:4c:7d:86:af:22:15:cc:99:8d:66:ed:58:96:08:
         5b:4d:13:65:99:61:52:b9:bf:4a:51:d8:ae:92:af:49:b0:20:
         f6:ea:55:a7:8a:cf:cd:fc:d7:00:ed:10:1a:28:e1:33:9c:5e:
         4c:53:5c:72:d4:4b:31:f4:bd:eb:4f:b2:95:85:1d:01:a7:df:
         04:79:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:45 2025 by rpki-client