Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e86fd7d-c86c-3fc9-8c3c-2cea1eba7aaa.roa
File:                     2e86fd7d-c86c-3fc9-8c3c-2cea1eba7aaa.roa (raw, json)
Hash identifier:          tWp2PydbUWOFTzlAyAcX/EY5+Nl6RbUfAKoMVKDxyCM=
Subject key identifier:   2F:66:2F:7F:A2:67:DC:CA:A1:13:4B:13:0A:1C:B5:0D:C5:D6:DA:E4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848AF2BAA1D1B8C7881E571C800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e86fd7d-c86c-3fc9-8c3c-2cea1eba7aaa.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     56322
IP address blocks:        2001:470:36b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:aa:1d:1b:8c:78:81:e5:71:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=2f84f66c-0efc-46c9-ae7d-d05ed7d8928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:a3:de:64:61:57:50:49:86:cb:cb:5d:19:
                    55:76:df:99:8a:bc:69:ef:24:37:cd:40:9d:6b:e0:
                    9b:f9:9b:ae:85:f4:78:7f:4c:bb:ac:a7:93:38:9b:
                    0a:e6:45:9e:ba:ee:1a:d9:6d:b3:24:05:55:c9:f6:
                    97:b0:5e:9c:41:ee:7c:e8:e6:eb:19:27:98:3f:13:
                    04:7f:f6:70:69:61:3c:b2:0b:1b:9e:e7:3f:4c:37:
                    f4:78:d4:59:8c:e7:4b:c1:b4:3d:3b:c6:13:d0:03:
                    b0:ee:21:a2:29:42:d7:ad:d4:a5:fe:f3:9d:cc:84:
                    ce:00:53:8a:91:1e:9c:14:4f:fc:8b:f3:33:50:1b:
                    f9:9b:cd:30:c0:c2:6e:8c:72:91:2d:41:72:7d:61:
                    37:23:e8:3c:01:4d:fb:55:85:50:28:dd:2c:33:37:
                    90:40:5e:e1:0f:18:a7:bf:76:af:04:17:8d:8b:68:
                    fc:e3:e5:80:30:91:08:74:7b:25:7e:f6:27:4e:6c:
                    5c:0f:fc:c1:68:30:d6:75:fb:d2:3b:2d:4d:58:42:
                    09:14:1b:61:04:d3:d7:09:8a:f7:cd:f5:3b:17:fe:
                    e0:56:41:20:30:32:8f:3e:70:f9:b3:80:ca:aa:3a:
                    82:1b:ce:60:38:19:7b:15:94:b4:4f:53:02:58:88:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:66:2F:7F:A2:67:DC:CA:A1:13:4B:13:0A:1C:B5:0D:C5:D6:DA:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e86fd7d-c86c-3fc9-8c3c-2cea1eba7aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:36b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:03:cc:27:9f:e5:77:61:9a:d4:fc:34:84:9e:f3:5d:8b:78:
         a4:31:3f:bb:84:3c:88:52:57:3b:af:20:f8:1f:40:0e:7c:fa:
         bc:c8:65:e2:56:32:d7:2b:de:75:eb:7b:dd:40:c3:e7:f8:de:
         6e:c2:d9:f8:68:19:16:a1:21:af:28:40:3e:f8:96:d7:a1:bf:
         f9:fb:10:fd:46:c4:1e:cb:20:f1:b9:99:4d:f1:a4:c1:f8:57:
         00:4a:56:2d:72:4c:e9:89:e9:14:6c:48:aa:46:5d:b6:ce:02:
         58:52:df:a1:54:ce:34:a7:54:03:60:c6:bd:08:6c:bb:1c:1b:
         12:cd:55:b8:46:65:26:9b:0b:a9:5b:65:aa:17:3d:70:3d:a1:
         fd:d6:60:c2:7e:b1:85:bb:a4:a5:1c:48:6f:e8:ea:47:da:65:
         c0:66:cd:b2:87:2f:92:4f:48:40:3d:78:d8:e0:a4:b2:a5:73:
         d6:b7:ca:71:4d:f5:43:8e:c5:c5:69:2e:ea:1d:f7:bc:a4:5c:
         70:1e:43:22:5d:3f:8a:4f:87:bc:27:86:9e:d9:95:8e:c3:83:
         6a:d2:63:6c:99:6c:b2:ad:40:25:f5:a3:c0:53:5f:68:a6:52:
         8c:20:58:7e:00:1a:32:7a:a2:84:04:82:76:69:21:86:a9:94:
         67:e3:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:27 2025 by rpki-client