Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c977ac4-30b5-3bb4-a191-7985def2fdcf.roa
File:                     4c977ac4-30b5-3bb4-a191-7985def2fdcf.roa (raw, json)
Hash identifier:          230EtGocljx6vRm0spHzTGXUehAHAq7w0w4roLW+zaQ=
Subject key identifier:   E5:8F:C4:4D:A3:DD:87:4F:B5:F3:78:4A:F8:67:C6:EB:FC:0F:E1:56
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849394D16E3588E279BC9B9B900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c977ac4-30b5-3bb4-a191-7985def2fdcf.roa
Signing time:             Tue 18 Mar 2025 01:30:14 +0000
ROA not before:           Tue 18 Mar 2025 01:30:14 +0000
ROA not after:            Mon 16 Jun 2025 01:30:14 +0000
asID:                     401604
IP address blocks:        2001:470:283::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:4d:16:e3:58:8e:27:9b:c9:b9:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 18 01:30:14 2025 GMT
            Not After : Jun 16 01:30:14 2025 GMT
        Subject: CN=79818279-94af-4df9-aba0-2b0d0672d6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:60:30:6f:f8:b2:a4:c3:6c:0b:5b:9b:2e:
                    29:fb:5d:3d:c3:e0:c8:d8:99:45:a0:dc:18:d8:72:
                    5e:00:cd:b1:53:7f:10:11:db:e1:3e:f0:dd:ce:c8:
                    fd:49:37:77:39:26:ee:05:46:ff:51:a3:41:47:33:
                    b5:3d:9c:6a:f1:ee:60:20:f9:46:6d:4f:5f:71:e2:
                    9a:cf:f6:42:22:cf:6f:f5:72:76:a6:a2:d9:5d:17:
                    28:0d:7d:6e:d6:a8:fb:39:f0:a0:cc:c0:92:9d:ff:
                    bd:34:a3:8e:bb:56:e6:ed:1b:7a:bc:b3:da:84:79:
                    c5:f2:6a:41:97:e4:0b:72:a1:3e:16:83:11:a9:a9:
                    88:0d:a4:86:fe:0b:9e:c7:7b:00:f9:d4:23:83:26:
                    fd:3b:31:68:ae:bf:a1:78:e9:72:b8:69:d5:9f:21:
                    75:4d:47:1e:23:20:1e:e6:20:ef:b8:8f:34:05:79:
                    21:7c:ac:82:d1:02:54:8d:5d:3d:83:59:7f:68:fa:
                    8d:bc:1c:29:4e:bb:44:0b:32:ae:9a:f9:f1:8d:87:
                    05:a2:ac:01:3f:95:fd:db:05:89:0d:5d:00:9d:51:
                    77:35:f3:54:50:97:2b:0b:be:f7:3b:84:39:08:77:
                    9f:8e:2b:fa:9d:69:ce:75:95:21:4e:ff:5a:cf:df:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:C4:4D:A3:DD:87:4F:B5:F3:78:4A:F8:67:C6:EB:FC:0F:E1:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4c977ac4-30b5-3bb4-a191-7985def2fdcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:283::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:21:c6:3c:8c:87:cc:89:60:03:40:9c:c6:8d:c9:1f:fd:
         4e:7a:9c:14:9c:81:6c:ca:dc:95:75:58:b6:4a:68:46:a5:e4:
         1f:6b:85:d5:8f:4d:2d:19:7d:1d:ff:a8:43:70:c7:a8:9a:33:
         58:13:63:71:cb:e0:b0:3e:8f:8b:9e:ff:e9:54:f3:af:6c:a5:
         4a:fd:df:4c:d7:09:4f:3e:79:2f:da:70:89:7d:b5:cf:16:e1:
         c4:6d:e2:f0:39:fe:c2:df:71:66:64:22:98:d6:1b:ed:fd:a5:
         41:1a:da:31:ce:30:cb:b0:13:45:61:ac:00:a2:53:58:86:1d:
         43:a0:ef:23:fa:be:24:94:f0:be:33:22:38:73:eb:7c:54:de:
         da:e9:e8:66:01:c9:71:a3:c2:45:2f:20:dc:d9:20:77:ca:09:
         47:6a:8b:ad:8a:85:af:c0:0a:55:d6:4e:9f:0d:a4:6d:8b:86:
         ef:f9:02:56:d0:58:b8:63:6d:20:94:62:07:3f:23:c6:bc:04:
         3b:da:10:6d:fc:d5:b9:a3:12:99:f1:5a:d5:ca:15:77:e7:cf:
         f6:05:0b:ec:77:fc:05:fc:43:8e:8a:32:79:52:57:e2:b3:41:
         6b:85:c3:ba:5c:20:1b:99:f2:8f:97:9a:06:1d:3e:a7:e0:3c:
         e8:9d:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:46 2025 by rpki-client