Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12262777-c090-3b49-b57b-c361013e3513.roa
File:                     12262777-c090-3b49-b57b-c361013e3513.roa (raw, json)
Hash identifier:          XaxASKS5/vomvOPg3Ip/RPeYI8hAjG7jkXplJzgQzZg=
Subject key identifier:   F5:78:BD:63:6D:B7:B5:22:25:BB:32:D0:F4:0B:B8:D7:46:DB:00:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CC56218AB84482702100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12262777-c090-3b49-b57b-c361013e3513.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     61616
IP address blocks:        2001:470:293::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:cc:56:21:8a:b8:44:82:70:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=1a279628-18c1-44ad-89be-a11587244005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:ce:76:58:f5:c6:f5:d6:1e:78:77:1f:e9:
                    33:4a:c9:1c:fb:7b:a5:33:cf:ca:b5:e1:50:57:76:
                    90:fe:77:d0:b9:9b:eb:cf:a0:20:0d:1f:60:71:9e:
                    8a:e1:62:e9:02:3c:a5:c0:21:62:5d:ae:4b:de:26:
                    57:87:e7:c6:de:59:53:d5:fd:23:ab:64:7a:76:ce:
                    7a:7d:30:27:f6:95:a5:6a:17:4f:33:2f:52:bb:cd:
                    cf:5a:34:af:46:26:60:11:09:4a:8a:cd:a7:0a:78:
                    9b:8c:c5:d6:81:37:a5:e8:bd:c2:b7:e9:2e:7c:6a:
                    cf:a5:23:e4:be:fa:a6:bc:3a:e3:60:2e:d0:b1:50:
                    3d:a5:72:9e:6c:60:87:2c:9e:dd:97:20:1e:f2:a6:
                    0e:f8:e0:51:12:76:7c:d4:4b:c2:59:02:0c:8a:8b:
                    55:5b:bf:d5:59:a7:e1:98:1a:89:9b:97:a0:c5:fc:
                    f1:1d:6b:9a:1b:ed:73:29:eb:c1:d2:96:96:f9:2e:
                    e2:8b:e4:ff:fc:ca:5d:74:e2:b3:9c:d7:ac:f9:24:
                    4a:b2:14:28:e2:b2:35:cb:00:8e:48:da:31:20:9e:
                    81:0e:b7:6d:49:16:82:22:29:66:dc:38:b8:a6:6c:
                    b4:ab:ed:38:07:ae:a2:5f:f8:fa:85:c4:1d:16:b9:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:BD:63:6D:B7:B5:22:25:BB:32:D0:F4:0B:B8:D7:46:DB:00:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12262777-c090-3b49-b57b-c361013e3513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:293::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:98:e5:b9:d0:f7:6b:db:7d:04:84:fe:86:c8:51:68:5b:
         2d:8f:eb:68:ff:bb:d8:9a:d7:af:79:ed:42:d5:9e:f8:19:01:
         92:e2:91:f4:69:5d:78:59:54:7f:10:a0:68:e6:41:fd:f3:3a:
         7f:9e:41:ac:6d:df:39:55:77:7c:31:14:c5:8f:6e:c3:8f:b8:
         81:18:35:95:e7:0d:b8:80:9a:02:64:ea:f5:f8:f9:9e:7c:c5:
         4f:3f:3d:5c:97:62:2c:1d:a7:ab:f8:ed:72:f9:51:36:cf:99:
         07:5c:22:df:03:d5:9d:34:81:d5:cc:d9:60:3e:39:cc:6b:6f:
         2a:69:5e:09:22:9d:3b:46:ae:bf:94:c0:2e:8d:f0:53:2f:dc:
         4b:5c:a7:ea:c1:3a:a8:f0:7a:fe:92:64:35:f5:50:e6:1e:eb:
         99:e9:f7:1c:64:6f:89:bc:50:ca:c5:46:21:c5:fc:15:a6:f9:
         63:fe:a9:d3:fe:1c:c8:53:e5:05:ee:37:fc:e9:29:8e:54:18:
         3b:c1:ff:6b:4c:2b:9d:43:77:ab:7f:04:13:d9:e0:74:81:db:
         1d:26:f2:43:72:e1:c4:59:bd:a0:1c:c0:f2:74:97:e5:77:e5:
         5d:5e:60:10:20:dd:b9:41:a3:82:05:ae:16:8b:74:b3:90:95:
         10:0c:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:55 2025 by rpki-client