Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa
File:                     f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa (raw, json)
Hash identifier:          gJigje6S6nMcd2Jk0f5/ai7e9qlpUvsN7a2Fpd5zkAw=
Subject key identifier:   4F:EF:F8:71:44:F3:CC:B1:4F:AF:9C:AC:45:C8:B8:3F:56:8D:19:78
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0040369FBB0290F753800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     26806
IP address blocks:        2001:470:2d8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:04:03:69:fb:b0:29:0f:75:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=6c88657d-d3d8-4eb7-82f5-f49e5a31cceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:92:69:95:dd:24:a4:80:e4:01:b1:8b:5c:
                    90:7e:74:3d:58:cc:83:79:7f:ce:d9:82:93:01:0e:
                    84:64:d4:e3:37:a9:d3:7a:f8:11:6a:c2:70:e5:1b:
                    b2:25:43:f1:33:c2:d8:42:a7:fe:9d:40:e6:11:57:
                    cc:68:92:fd:88:8b:51:86:e3:f2:39:f5:4e:1b:43:
                    d2:a2:9a:f4:8d:1a:80:72:ac:b6:61:68:f6:01:9c:
                    0a:c8:65:d2:9d:be:6c:af:33:35:a2:a4:9c:ed:8c:
                    3c:7c:b6:89:17:59:ad:a6:5d:af:cd:04:85:14:8b:
                    75:bf:fa:ea:c9:f7:f5:6c:d2:b1:2c:be:b9:c2:1a:
                    db:29:38:d6:d5:f0:64:33:34:59:95:5f:f3:aa:17:
                    eb:a1:a5:84:b0:03:56:21:3f:b9:35:a8:d7:49:97:
                    07:44:f1:e4:6f:7b:fa:fa:ce:ff:63:12:66:dc:b6:
                    89:5a:60:71:57:54:c9:7f:3f:e5:98:05:0f:cc:06:
                    eb:8b:a4:91:ce:48:9d:a8:b0:26:0a:14:b9:6b:23:
                    9c:99:53:65:9b:98:b6:1e:c4:80:cf:ea:c6:ea:8b:
                    e8:d6:e5:80:c6:10:5e:49:1c:d5:64:90:c4:be:74:
                    33:7e:09:34:87:06:e6:1c:78:07:66:67:ad:14:72:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EF:F8:71:44:F3:CC:B1:4F:AF:9C:AC:45:C8:B8:3F:56:8D:19:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f0cec2d1-57c2-32f9-ab05-ba3513dd9e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:84:bc:1a:30:dd:24:0a:9d:89:16:a9:d8:7f:7f:41:23:
         28:a2:a4:bd:bb:c1:1d:c7:f9:82:88:f0:81:ef:50:86:39:b4:
         62:8d:7a:12:80:4a:c0:49:0f:c3:65:e5:57:ae:4d:8e:4b:e0:
         a2:0e:d4:48:ba:17:e0:63:98:aa:3c:01:04:3b:ce:54:69:7d:
         18:65:e1:4d:ba:3c:21:58:19:8e:77:63:04:d7:fc:7a:3b:43:
         f1:f9:6d:af:80:83:3a:5f:e9:c4:0f:57:d3:a5:bb:fe:f5:70:
         70:0e:25:ed:bd:3c:ee:4a:2f:77:76:9a:03:70:e9:87:6d:ed:
         79:58:bb:a7:b6:68:2c:d9:1f:73:40:25:63:f9:ee:ca:b3:a0:
         66:85:ae:a8:37:d1:1b:d7:a9:cc:39:54:f0:07:fe:f2:b4:6a:
         a7:7a:c4:12:3d:74:60:7d:cc:fe:6c:ab:f0:67:75:29:fb:72:
         f8:8b:2e:fe:ef:6d:ae:68:10:a4:30:ed:44:4a:74:c5:e7:d7:
         49:67:a7:02:f6:59:7e:fd:47:2e:28:22:ce:bb:66:9f:af:6b:
         db:03:f8:c1:98:4f:0e:eb:10:9d:1c:eb:12:8e:b7:1a:51:e6:
         63:db:d2:38:c8:97:61:72:da:b2:ae:67:6e:50:47:17:e2:d3:
         96:11:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:42:57 2025 by rpki-client