Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec5f8a0e-9d30-30fc-8a0d-d00b3215cad5.roa
File:                     ec5f8a0e-9d30-30fc-8a0d-d00b3215cad5.roa (raw, json)
Hash identifier:          889csDKoskW6cNdXjrxlVbBtyNuz+op3vZ7nPWNAgFU=
Subject key identifier:   82:ED:4A:74:EC:F3:35:6B:7D:00:C1:65:29:74:F5:31:02:04:29:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFE8E0EAA40002C2C81280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec5f8a0e-9d30-30fc-8a0d-d00b3215cad5.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     12214
IP address blocks:        2001:470:4e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e8:e0:ea:a4:00:02:c2:c8:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=c8cc4a46-0e77-4b4c-8054-86faea16561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:4e:a7:3d:1e:41:d7:b9:ee:b1:3e:a1:b1:
                    10:86:9b:3e:1d:e1:90:7f:88:14:4a:49:72:bf:69:
                    7f:8d:3c:69:3a:fd:48:e9:96:28:c5:bc:10:3f:3a:
                    6d:40:00:a7:4b:9f:d9:98:00:5a:50:32:1f:e2:c6:
                    f4:58:f6:2f:ee:8e:93:e6:49:35:a2:4f:14:12:1a:
                    88:e6:0a:bd:29:5a:3f:f2:8e:03:07:e5:b9:80:9a:
                    89:0c:ad:df:ee:13:5f:b7:e2:4e:68:49:0d:4e:0b:
                    32:a8:de:06:7f:fa:d4:5e:45:31:20:96:d6:6e:9e:
                    dc:49:a4:d0:31:7a:2d:30:ba:5d:92:6a:75:1a:d7:
                    09:38:33:78:30:bd:a1:47:ff:33:ac:94:f9:2d:2f:
                    cf:97:88:a2:98:9f:ff:77:be:09:3d:b7:32:d8:4f:
                    8d:6a:6d:24:9c:f8:87:18:12:e2:3a:9f:4c:d1:bc:
                    80:89:be:52:5f:3a:c6:9f:b7:e3:e6:71:bb:f7:12:
                    23:2c:78:e8:69:9b:58:f2:00:16:4d:26:a3:e5:5d:
                    81:61:53:c2:aa:fe:ce:d2:9f:95:fb:27:b4:bc:db:
                    5b:4b:e4:d5:3d:f1:f4:6c:8a:e3:94:39:99:c0:8f:
                    01:32:94:7d:51:e6:32:24:b0:8e:f3:5f:3b:95:0c:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:4A:74:EC:F3:35:6B:7D:00:C1:65:29:74:F5:31:02:04:29:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec5f8a0e-9d30-30fc-8a0d-d00b3215cad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:d1:9d:cd:04:1c:16:96:39:ae:05:42:5f:c0:91:90:72:
         1b:6f:64:29:77:f9:2e:87:3c:94:d6:94:dc:c3:da:de:8a:e2:
         39:26:86:80:f5:dd:8b:bd:22:c2:cc:2a:89:6f:9f:29:a8:fe:
         5a:10:a1:d2:4b:5a:f5:ae:d7:af:a6:c1:25:9e:0a:92:79:5c:
         b4:38:f7:cd:ab:5a:90:a7:c6:9f:3e:c8:6f:c5:28:ef:4f:3f:
         5c:23:be:9e:ba:dd:d8:8a:3e:68:60:37:1f:fb:28:bb:54:04:
         25:54:85:f4:37:62:d5:44:fa:f8:c6:ec:5c:35:15:05:3d:4b:
         21:4d:2d:b5:45:e5:e9:d6:24:11:b4:aa:95:54:96:62:93:46:
         b8:53:7f:0a:59:e1:94:5a:f2:62:88:9b:91:da:89:0c:52:62:
         9e:9c:82:de:a6:1a:f4:96:2c:8e:53:4b:dc:4c:96:ff:b6:c5:
         da:d8:5d:2a:f4:9c:ba:99:2d:ec:33:d9:db:c6:68:e0:94:9e:
         62:d9:fb:40:2a:2e:65:cb:60:7a:87:c0:c2:12:3b:08:4c:fb:
         c9:3d:92:78:d8:83:ce:e0:b4:b2:15:e6:8c:2d:4e:78:b5:1d:
         60:4d:c1:88:f7:58:fd:e3:64:be:58:e4:1e:16:5c:c4:61:9e:
         d8:bc:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:05:28 2025 by rpki-client