Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa
File:                     0d727262-1bb0-3afb-9aee-5b0284aa0434.roa (raw, json)
Hash identifier:          UoxVmCv6gCCx83QH5ekR6RbkamafrjKYGVDPwaH2V+s=
Subject key identifier:   0B:81:19:4E:2B:07:F8:48:8F:31:7D:78:85:B3:AF:12:F6:86:B3:03
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E1432FB5ED495ABECC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1008
IP address blocks:        2001:470:222::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e1:43:2f:b5:ed:49:5a:be:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=6b79d5dd-5820-49b2-b9e0-fd0351111181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:ca:cc:5c:db:a0:a1:1d:4e:7a:3b:60:24:
                    9f:e3:9c:7e:2f:eb:6d:b5:cf:ab:b3:84:85:3f:cc:
                    24:21:af:2d:fb:8b:81:5c:9a:b6:c4:b5:1f:ee:28:
                    9e:7e:67:03:61:0f:9b:32:23:bd:6a:70:c5:88:1c:
                    e6:73:f5:cc:b9:1d:44:c9:6f:85:38:38:9f:fd:c2:
                    11:29:d8:c1:e4:f4:6d:ad:f7:e5:84:76:fe:e9:21:
                    6d:6c:dc:99:12:8e:cf:91:c1:9c:4b:f8:fe:fb:7f:
                    a9:e2:0e:6e:ff:ce:91:7c:87:24:51:f6:e0:69:76:
                    72:f6:76:dd:6a:72:60:b6:b5:3e:fd:65:24:6c:79:
                    4b:5c:64:27:fe:be:5a:c0:f8:b9:48:ee:92:51:8d:
                    b5:07:77:d8:a3:08:42:b7:43:f9:ef:f1:99:ff:2e:
                    f6:8f:bf:86:fc:ff:df:a6:16:5c:c2:8a:51:32:93:
                    11:18:f9:ed:c3:7a:79:b8:da:a4:71:cf:a4:79:0d:
                    a0:aa:55:97:ab:c2:50:b3:b6:bc:dd:04:cb:d5:44:
                    99:2c:df:0a:fc:98:dd:9b:ab:02:f5:ef:ad:6f:b4:
                    07:fe:8f:14:8b:e7:00:a7:52:06:a2:2c:e2:97:52:
                    b6:61:84:93:b8:d1:f2:dc:5e:db:73:c1:86:e3:fa:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:19:4E:2B:07:F8:48:8F:31:7D:78:85:B3:AF:12:F6:86:B3:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:222::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:1c:49:3b:91:27:9f:9f:d0:a3:83:af:07:14:2d:be:26:81:
         03:6d:4c:0c:53:06:dc:00:62:51:42:03:11:7b:5d:06:a4:fb:
         09:d2:87:93:61:1e:6a:6f:f6:8a:34:78:9f:fc:2b:63:c9:46:
         4a:18:0d:90:5c:2e:9e:7d:d8:8c:8c:c3:6d:3d:55:64:46:30:
         cd:34:7c:b3:fb:95:ef:e4:76:ff:ed:be:e7:0d:1b:f1:f3:3d:
         73:b1:51:da:58:6c:61:d8:63:b3:d0:02:92:ca:3f:8d:66:19:
         0c:bc:9a:a1:2e:df:60:84:be:8e:a9:ef:50:d8:13:11:59:fc:
         98:c2:3d:e9:99:b6:77:5f:13:fc:f2:fa:7f:38:b6:5a:5c:48:
         71:24:d2:2f:ad:2c:32:c5:5f:35:fe:22:4c:71:6e:47:cf:1f:
         f4:15:38:a1:52:89:4e:16:8f:ca:66:c7:6e:a1:ac:3a:ae:75:
         bb:6c:2d:79:7f:ec:4b:2e:cf:c6:72:ee:76:b3:22:d4:f8:81:
         d4:79:e9:6a:38:a4:f9:47:71:68:cb:5f:91:6b:54:b3:1e:ae:
         35:c5:b1:63:24:8f:bc:b0:58:0d:a5:54:81:84:8c:a9:d2:da:
         02:49:7b:50:ce:14:0b:89:6a:02:75:f5:5d:7d:43:ad:57:91:
         29:dd:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:37:08 2025 by rpki-client