Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7b6a740-9b65-34d1-ad90-1084bb0e0aaf.roa
File:                     c7b6a740-9b65-34d1-ad90-1084bb0e0aaf.roa (raw, json)
Hash identifier:          uTbd6G+oKQv/5/jay6fLV1xB0q84uUO07lLDSYBTEo0=
Subject key identifier:   C1:11:A5:3B:7E:99:98:D1:17:0A:7C:61:D5:69:C8:CB:D0:B4:69:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584863CB1784CF3427360F412980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7b6a740-9b65-34d1-ad90-1084bb0e0aaf.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     141196
IP address blocks:        2001:470:342::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:17:84:cf:34:27:36:0f:41:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=73aef144-273b-4f16-9840-cfc224ca6691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:08:71:da:1f:63:4f:52:1b:2f:18:94:fd:
                    30:4c:95:d4:e8:f8:3a:48:87:5a:b5:ca:3f:10:a7:
                    59:90:ef:f0:d7:74:b4:e5:4c:3e:5c:2e:5e:c2:5f:
                    b9:20:06:4b:08:76:0d:24:bf:c0:fd:8b:e0:a2:3a:
                    f8:a5:3c:e8:d8:b6:57:e4:60:17:95:8a:5e:48:49:
                    d3:5b:aa:0b:d7:81:03:35:f3:b6:c6:99:f0:4c:cc:
                    ed:78:99:ed:f2:bc:4a:47:a2:eb:4b:a2:2a:b9:4c:
                    25:93:d4:88:9e:cf:b3:99:db:47:1b:55:f9:b7:3e:
                    80:c8:3b:ca:2c:ae:37:d0:19:70:38:dd:1e:ea:27:
                    27:1f:24:05:6a:21:25:f3:d9:e5:c1:de:b6:00:76:
                    4a:54:cd:d6:0a:f1:dc:e6:e4:5b:58:f6:0f:9d:00:
                    42:db:8f:ca:34:22:0f:0f:ca:16:59:38:e0:7c:90:
                    fb:f2:c0:cf:d7:4a:c9:df:fe:1a:63:99:18:30:b7:
                    cb:1f:5f:f5:91:17:06:13:79:e8:61:03:ba:54:12:
                    8f:79:39:23:a1:cc:ca:4d:45:c5:36:98:ab:4a:00:
                    77:ab:12:9f:5f:6f:79:29:3a:cb:14:7c:bb:97:d5:
                    d9:a9:24:81:1d:52:2d:13:c3:cb:3a:bf:79:8a:be:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:A5:3B:7E:99:98:D1:17:0A:7C:61:D5:69:C8:CB:D0:B4:69:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7b6a740-9b65-34d1-ad90-1084bb0e0aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:342::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:25:69:b9:79:39:cb:55:2c:12:70:c3:0e:46:29:93:74:f4:
         fe:02:f1:68:36:e3:9b:e9:84:a7:d5:cf:64:ea:24:cd:b0:21:
         22:01:bd:97:96:23:de:87:a4:0e:3b:06:a4:f9:9d:b7:25:8a:
         4e:5f:7d:78:46:4d:8c:95:bb:f1:2f:54:13:35:9e:27:1b:2c:
         eb:2e:4d:46:eb:fb:32:1a:ba:71:1e:ea:18:91:a2:a5:c1:5c:
         a4:f5:73:a2:d8:b8:76:d1:f9:24:01:aa:4f:b3:0f:ee:74:4a:
         6e:18:b6:4f:58:14:b2:bb:01:7a:7f:82:dc:04:b4:1c:1e:fe:
         3d:83:ca:41:36:40:16:4c:61:1f:b4:8a:15:74:03:de:d7:20:
         9e:3a:52:e3:6c:cb:e3:ba:18:3a:89:14:47:df:e8:c7:2f:b3:
         b5:4e:9b:41:de:f4:44:4e:65:37:20:24:9f:e0:7f:a8:78:fe:
         9c:83:4d:49:82:a0:22:9f:77:d8:60:e1:86:ba:09:31:76:85:
         fe:97:6d:b5:ca:2e:af:06:0c:4a:64:af:b9:26:b3:41:49:a8:
         24:da:f5:1b:df:bc:a1:70:9d:a2:f9:67:96:32:fa:41:ca:de:
         1b:b1:e2:98:a2:0e:f9:14:ad:4d:72:19:94:77:26:c7:e1:b1:
         79:df:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:48:18 2025 by rpki-client