Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa
File:                     f6142388-e8df-3153-ae91-c8e66d3117bf.roa (raw, json)
Hash identifier:          o7TUpV8yOc+wBqryTUoOiiz7k0B6NkiInGMjs1tztB4=
Subject key identifier:   C8:66:03:85:14:81:B8:8A:98:38:D8:CD:8A:93:EB:75:42:CF:0A:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584812D540751B220465C8321B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     62371
IP address blocks:        2001:470:aa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:40:75:1b:22:04:65:c8:32:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=c057b145-8818-4579-ab07-c5a1e804aadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:e0:bb:36:4d:a4:60:a1:95:cd:dd:e6:f9:
                    ff:b6:52:b7:eb:80:db:1e:aa:63:95:ff:e9:8b:80:
                    94:37:64:a3:86:d6:04:83:0a:63:0f:56:08:3d:ae:
                    84:b1:63:2a:b4:aa:3d:36:4d:9c:3c:22:cd:2e:27:
                    7f:e7:03:05:e6:63:e2:b2:51:1e:6f:c4:34:cb:3f:
                    a1:63:61:87:2f:10:ed:47:c1:81:a8:be:c7:a5:f8:
                    14:9e:1b:91:fe:c4:4a:39:91:6f:22:14:71:76:73:
                    86:67:d4:2b:53:f8:44:6b:f0:02:89:52:34:8d:0f:
                    58:f1:a1:2e:fd:13:d2:22:19:e2:6a:b5:2d:ad:87:
                    2f:f4:22:93:be:1a:75:33:57:b2:fd:3d:fb:43:c6:
                    a6:24:6d:6c:1c:10:60:dd:22:dc:9b:6a:45:98:62:
                    cd:b5:b3:6c:b1:53:2d:f9:ab:c3:43:37:8e:06:c7:
                    c2:08:64:f9:d4:30:e7:10:7b:81:7b:ac:e8:e5:00:
                    4b:be:0f:37:9d:6d:79:7a:41:0c:f8:36:c7:39:72:
                    70:13:80:8a:f1:31:ce:ab:de:b9:5b:86:68:18:fa:
                    4d:d7:fa:03:ec:ef:17:f3:67:c1:9e:08:e6:10:99:
                    88:0d:8b:70:4e:44:08:45:49:2c:b8:f1:c3:ae:a6:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:66:03:85:14:81:B8:8A:98:38:D8:CD:8A:93:EB:75:42:CF:0A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:07:db:21:ad:3a:e8:a2:38:3c:44:4b:88:43:9b:b3:8c:
         ce:38:57:02:74:8a:ed:42:34:09:22:87:39:c6:b9:68:6f:d8:
         af:f9:64:90:5d:45:cd:5f:da:ca:a2:03:0d:a1:ef:d0:a0:3e:
         bf:ad:06:76:6e:c0:9d:df:26:db:5b:d7:02:6f:4c:b7:34:6a:
         a8:42:db:60:cf:c9:0f:59:2a:3d:27:94:f8:8b:79:83:09:60:
         fc:fe:ed:34:cb:f0:51:c6:54:b2:a8:fc:c4:c1:ef:09:6b:78:
         5d:1d:a3:41:3f:ff:1e:e1:cc:7d:38:ff:af:c5:e2:da:96:73:
         44:8f:53:1e:99:67:41:15:29:b7:05:e7:53:ad:50:03:d7:ea:
         ac:4a:74:3c:1c:50:cf:6d:26:39:27:2d:75:40:47:15:1d:af:
         04:61:b4:9d:ea:02:9d:9f:d9:86:32:87:ba:f8:db:79:f1:cc:
         da:3d:f4:36:c7:d6:f3:c5:fa:8a:0f:7f:77:fb:67:d7:bc:56:
         37:a8:48:1c:fc:04:8d:02:08:2a:1e:48:69:69:0f:c5:e1:c5:
         01:a9:ec:d5:b0:62:96:56:52:50:62:96:2a:ef:f7:f4:16:98:
         ff:32:a3:22:01:7c:59:92:e3:e6:ab:46:f3:e3:b9:63:8f:26:
         27:0b:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:49:54 2025 by rpki-client