Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa
File:                     cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa (raw, json)
Hash identifier:          xEX5ITNakWxAx6fab6t2NNCwaemXNBL3OGbLWhTjyC0=
Subject key identifier:   D2:DA:A2:20:8A:37:1E:5E:A5:1E:A0:D2:D8:B7:77:DB:85:28:86:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01D188F14A84716DC3A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     46766
IP address blocks:        2001:470:232::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1d:18:8f:14:a8:47:16:dc:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=335d2e50-eab3-4acc-ab41-9937601fb227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:82:1c:6b:b2:b4:2c:59:83:44:9b:40:27:
                    ea:16:d4:3f:bc:4f:12:7b:fb:f4:4e:d9:2d:9d:3e:
                    76:62:cd:de:d1:22:c7:7a:1f:81:33:b0:90:11:bf:
                    d9:ae:6f:e9:5f:fe:06:4f:d7:30:61:3b:90:eb:23:
                    d0:2f:c6:99:65:33:6c:28:12:a0:e3:bf:7f:5d:e1:
                    fd:70:e6:d6:4a:a0:30:dd:e4:e1:82:5b:20:b4:c4:
                    4f:c0:a2:1f:31:56:4e:19:b1:f8:81:00:95:8d:98:
                    2b:92:ff:cc:f4:79:bd:3c:1c:47:df:2a:58:7f:7f:
                    03:b0:90:62:09:fb:b4:0f:4c:da:78:d4:38:70:cf:
                    f1:96:56:e6:4a:48:7a:48:8c:30:75:2a:09:c7:6d:
                    d2:5f:de:ad:2a:72:e2:48:39:aa:b6:46:43:34:a8:
                    b8:ea:d9:c1:ff:5a:95:87:c6:c6:12:5f:51:5c:7c:
                    ae:32:4e:f8:42:96:fb:7d:a5:6f:a4:bb:b8:ab:56:
                    cf:2e:49:47:89:3c:14:a9:40:f5:ce:30:8a:7f:4e:
                    e1:4f:eb:b5:32:5c:65:f7:7d:5a:3f:d1:8b:e4:43:
                    78:81:08:98:94:cc:2a:f3:dd:1c:f4:44:e3:d2:79:
                    9b:65:ef:25:9b:47:68:2c:bc:f2:1b:f2:4a:05:50:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DA:A2:20:8A:37:1E:5E:A5:1E:A0:D2:D8:B7:77:DB:85:28:86:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbe5deb0-b0ba-314b-97ce-69f143c0da65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:232::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:18:6d:c9:3c:bf:75:e8:46:24:2b:c0:29:a8:3f:99:95:5b:
         9b:8a:fa:fd:7d:3d:37:7c:23:6a:ec:e4:4e:df:20:ac:16:59:
         67:ec:41:5a:b8:2c:11:a2:9e:13:bd:95:f5:ce:d0:32:75:cf:
         06:2b:02:0b:dc:d0:4e:69:0e:53:6d:3b:bc:f2:ca:cc:c8:cd:
         d0:3c:af:24:f6:9a:27:d5:66:7d:3d:f5:7f:23:a0:f4:20:04:
         86:53:c7:7f:f5:b2:41:43:39:f8:6c:eb:9c:2e:25:27:76:d5:
         51:f3:7c:01:38:30:4a:c7:4d:ee:0d:bb:3b:1a:02:5a:41:ab:
         13:84:95:5f:f4:de:ba:81:99:fc:6c:71:f2:d6:3a:80:5e:73:
         92:9b:30:ef:0e:e2:94:3e:bd:c2:7c:5e:9f:52:8c:2a:cb:06:
         ec:f6:4f:44:dc:78:53:53:43:b6:86:0b:30:ad:37:28:ed:2c:
         0f:2b:fa:22:be:92:58:35:bb:7c:d6:88:2f:67:57:55:2e:e3:
         89:be:2b:31:ba:98:9c:41:10:1f:0e:23:6e:b6:54:be:17:39:
         23:c3:ac:d8:52:4a:f6:27:08:a4:4a:8b:b4:03:a6:b7:91:0b:
         2a:d6:8a:02:9d:d5:55:a8:b3:48:89:4f:2a:76:3d:7e:d5:23:
         c0:ca:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:42 2025 by rpki-client