Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6deec4db-dfd9-3508-b6b3-f7a235afedb7.roa
File:                     6deec4db-dfd9-3508-b6b3-f7a235afedb7.roa (raw, json)
Hash identifier:          VCUMOvh8USeUEvjs8QhuYxbU4u9V5ebEEAEKaR7WiBw=
Subject key identifier:   35:8B:03:D4:43:F9:96:A2:A2:CD:17:C7:8B:FC:90:D7:72:C9:EE:E6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E97E498C5CF9AF63F1E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6deec4db-dfd9-3508-b6b3-f7a235afedb7.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     19364
IP address blocks:        2001:470:310::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e9:7e:49:8c:5c:f9:af:63:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f2deb4bd-e92d-4b97-a1e6-a2ac39d51157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:0d:f6:6a:ff:a7:0e:d4:6a:ff:e9:f8:8b:
                    ac:1f:5f:da:b2:d2:dc:74:d4:64:ef:66:b5:58:7c:
                    86:60:21:dc:f1:40:0c:ad:9f:2d:ae:43:3c:40:f4:
                    de:26:d0:45:a5:f9:42:b4:49:c2:44:c1:7a:8e:cb:
                    47:f4:ba:60:f9:28:a4:42:41:5d:85:2d:37:05:c5:
                    3a:1d:42:ed:31:fe:ff:2a:50:ef:88:f2:ac:d2:15:
                    f6:2a:d0:87:4c:50:94:96:e8:7c:e7:08:b3:c0:62:
                    83:07:20:f1:22:05:ae:44:f5:de:2b:fd:12:47:52:
                    d6:5e:82:c9:7a:b1:19:4c:ee:5f:85:cb:e7:be:90:
                    f4:03:10:be:bb:2f:59:0b:0e:4d:1d:8a:b5:db:5b:
                    07:63:0a:b2:70:35:d2:fc:f8:d9:99:a8:b3:d7:bc:
                    c6:09:57:6a:b2:e3:86:a4:cc:61:c4:0c:ed:d9:22:
                    2d:d0:92:20:3d:48:b2:c5:d8:af:83:0b:67:39:80:
                    04:b5:91:3f:fa:de:64:1f:99:da:82:6f:ad:43:2d:
                    3e:49:d4:5d:de:5f:84:1d:b5:27:e2:36:de:e9:e6:
                    91:9d:a3:87:0d:a2:6f:b4:53:d6:7d:c2:aa:2e:21:
                    ee:a4:86:9d:13:f1:c9:a0:ec:d9:9b:a7:0d:ef:2a:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8B:03:D4:43:F9:96:A2:A2:CD:17:C7:8B:FC:90:D7:72:C9:EE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6deec4db-dfd9-3508-b6b3-f7a235afedb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:310::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:e9:86:b9:5b:b5:e8:65:7a:7f:1a:a5:5f:d7:9e:a3:31:
         3e:d3:fb:a4:ab:c5:af:8d:12:a3:fb:1e:a3:65:35:17:c7:91:
         fc:5c:46:7b:8d:7f:8f:15:c3:dd:0d:fd:e6:54:64:4c:fd:ed:
         a2:f1:01:2c:ed:0b:d3:6c:72:53:27:29:bf:c2:fd:97:88:e6:
         b8:45:d8:84:fa:31:9c:d9:08:6b:5d:2b:7c:d2:52:9c:ce:d5:
         4b:ec:88:b6:c6:2d:8a:f0:e5:ca:e6:a9:3b:d3:7c:69:7a:2f:
         a0:70:b9:d5:9c:0c:76:ae:f5:01:71:22:8a:56:dc:ff:3e:17:
         26:26:2b:7f:5e:10:74:49:20:44:2d:87:ed:a5:49:e9:63:01:
         78:1d:47:e0:bf:ee:79:71:18:d5:90:23:e1:c9:36:8a:db:de:
         e0:bc:47:d4:71:6d:cd:b5:7e:86:08:80:4a:9f:b6:51:34:ac:
         62:bb:68:a7:89:e4:89:ae:fa:0c:de:ec:42:14:3d:50:da:f4:
         7d:84:22:5a:79:76:9b:47:57:35:44:1c:83:69:af:b7:63:e6:
         10:33:6d:26:3d:8b:3c:ad:ba:ae:55:7b:73:e1:9d:60:3e:9c:
         62:53:4c:fd:12:54:f3:ec:e9:b1:f4:82:60:62:3c:56:3e:65:
         d3:cf:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:20 2025 by rpki-client