Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640a2a21-1361-3b9d-8cb9-19b29ce75507.roa
File:                     640a2a21-1361-3b9d-8cb9-19b29ce75507.roa (raw, json)
Hash identifier:          a54wzIVSDevK6NIWl5PNVFemo1XfZ0kC5FVR9jlTp5o=
Subject key identifier:   B6:DF:5D:6C:8D:7F:3D:89:11:20:96:67:4A:A8:6B:B5:DE:8D:AB:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926D4CE8C9C25DBB7F6E180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640a2a21-1361-3b9d-8cb9-19b29ce75507.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     13925
IP address blocks:        2001:470:f6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:d4:ce:8c:9c:25:db:b7:f6:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=3a9a8c72-0ca3-4c4b-9459-ad982449c93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:ce:23:2e:ab:bf:e5:88:c7:44:3b:b4:18:
                    f3:d4:78:91:9a:a3:d5:98:61:d6:46:fd:74:0f:b8:
                    1f:8d:4f:53:dd:28:62:e5:4d:f1:36:c0:ee:96:33:
                    76:0b:83:d7:98:ff:bb:e8:89:e3:74:2d:46:13:a4:
                    3c:00:f4:b3:d7:2b:57:7f:cc:d6:bb:a4:ea:66:d5:
                    ce:28:80:83:11:2f:58:77:b4:d2:a4:c9:ee:a1:9c:
                    d3:81:8b:d8:54:fb:d1:69:e9:c1:99:d8:5f:eb:99:
                    f6:da:19:9b:17:dc:d7:49:79:1e:f6:d1:98:d8:40:
                    ec:70:67:cb:9a:e2:16:e4:57:9b:b4:3a:93:b0:aa:
                    ab:9c:f4:20:d1:76:2c:cc:92:31:d2:db:36:d2:1e:
                    d5:e7:e2:13:9a:53:e0:43:38:b1:ec:a0:58:cd:38:
                    c7:d8:3c:db:b2:1c:74:ef:2d:bb:cb:cf:81:76:e4:
                    a5:19:6c:d6:38:2a:2a:e5:7e:da:dc:88:2b:33:10:
                    ed:ac:8e:00:b4:ef:8a:ac:19:2a:c9:57:4d:7b:55:
                    77:95:42:f5:73:ac:ed:f8:94:56:19:e8:77:9d:2b:
                    d4:f4:72:6b:ef:4b:49:9d:9b:1a:40:73:70:94:64:
                    1b:bd:e4:3a:bf:c3:41:07:81:ef:b2:17:1c:de:5c:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:5D:6C:8D:7F:3D:89:11:20:96:67:4A:A8:6B:B5:DE:8D:AB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640a2a21-1361-3b9d-8cb9-19b29ce75507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:dc:c6:1e:cb:1d:6a:50:98:c0:c2:0b:28:5c:16:56:da:
         a4:e5:74:ec:d2:82:c5:9d:f0:71:c8:87:b2:d4:d0:e5:2e:6c:
         02:ac:38:93:71:cb:a5:dd:43:75:4a:ac:a5:7c:dd:ad:47:8c:
         0a:63:44:b9:20:48:03:a0:df:87:78:55:53:43:e0:8e:e7:e5:
         0d:fd:c2:ad:d9:8d:d0:3b:fd:11:85:e8:65:6d:59:a8:52:38:
         20:5c:a5:50:2a:fb:11:f1:76:bc:bf:e7:4e:0d:f0:87:9a:54:
         47:a7:9f:4c:9e:85:1e:c7:7e:91:e3:53:24:af:64:dd:d3:e1:
         4c:be:3c:47:14:28:f8:ad:d9:08:78:d8:0b:4a:9c:d4:7a:59:
         bb:d3:68:49:2b:9f:78:ae:30:ef:93:cb:ef:31:e9:59:73:de:
         8a:29:08:ac:03:24:c5:59:2c:05:c3:cb:4e:01:25:c8:ed:c1:
         d0:83:14:3a:1e:eb:8e:c5:cb:f1:db:a7:62:66:b1:72:c8:fb:
         ad:11:80:cf:34:8b:61:57:7d:5a:73:90:e9:b9:0f:70:7c:91:
         82:36:84:9d:97:ba:9f:ce:65:13:22:07:32:24:17:22:d2:b6:
         80:9c:46:b5:ce:67:d1:11:f8:90:d0:db:1f:54:92:77:04:50:
         66:0d:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:59:42 2025 by rpki-client