Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75f2138b-b2da-3dd0-8d4c-63f029b9c85e.roa
File:                     75f2138b-b2da-3dd0-8d4c-63f029b9c85e.roa (raw, json)
Hash identifier:          Rsly5aOS0CJ2fmpncE5wU3SKCbWnTy409nRymGdrHKQ=
Subject key identifier:   B4:2D:21:50:BD:2E:D6:BC:92:A7:82:9D:50:26:E0:9A:03:56:9B:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584909E694F195169EBD0A27AB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75f2138b-b2da-3dd0-8d4c-63f029b9c85e.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     214648
IP address blocks:        2001:470:38d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:94:f1:95:16:9e:bd:0a:27:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=89a10d15-64b9-4a6e-a5df-ab03d13552f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:76:2e:f7:7f:67:0f:35:58:4e:7b:29:ff:
                    18:b7:c2:ad:34:6d:8a:d5:2b:67:34:6d:4d:41:96:
                    a8:1d:89:6f:8d:85:36:bd:f0:7f:c0:38:8a:b8:85:
                    a0:76:14:c3:e5:0e:e1:3e:ed:f2:1f:e3:d8:c1:b4:
                    ff:6e:96:03:63:a1:3f:45:f6:c4:5b:a4:1a:2c:21:
                    2c:1c:7b:7a:ad:ec:39:71:da:f5:c0:eb:81:4b:a1:
                    a4:aa:3a:5b:f1:c3:76:51:77:d3:67:54:fe:c6:15:
                    7b:36:1c:f5:74:ef:18:de:a0:e7:58:01:1f:56:74:
                    81:f9:a6:25:37:d7:21:84:dc:d3:9e:7e:d9:8e:83:
                    de:d9:b2:4d:ec:93:cb:d5:05:fb:62:9a:43:c3:2d:
                    f8:7e:35:16:a4:f3:68:02:40:5b:8d:92:47:e0:0c:
                    0b:d1:c9:ed:f8:a9:82:5b:df:d8:88:21:47:f9:cf:
                    04:68:c3:b3:d9:c2:68:55:6f:de:b4:f9:22:4f:76:
                    2f:df:50:39:8a:57:27:f4:e8:d7:34:eb:9d:a7:3c:
                    4e:83:02:13:4e:8c:40:5e:10:40:4c:e1:f1:3a:b5:
                    2c:cc:0e:b0:16:d7:b9:be:b5:42:7d:f2:7f:af:cc:
                    1f:86:a0:92:71:33:03:72:af:40:62:1e:95:df:57:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:21:50:BD:2E:D6:BC:92:A7:82:9D:50:26:E0:9A:03:56:9B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/75f2138b-b2da-3dd0-8d4c-63f029b9c85e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:dc:48:03:f1:41:3c:9d:67:48:24:cb:0b:64:0c:1b:78:40:
         3d:92:12:a7:ba:86:e1:85:57:a7:fc:37:34:b1:f1:7a:31:71:
         6e:76:11:67:ee:dc:01:ed:f6:41:39:27:22:4f:14:d0:9a:09:
         40:10:dd:76:b1:a7:0f:47:af:30:b2:6c:5e:87:01:16:1f:2d:
         c0:9f:05:6e:b1:36:d4:ec:a5:0e:1b:79:89:ea:b8:a4:b8:f7:
         c3:7d:a6:bb:b5:bc:54:a5:91:64:14:0a:c5:86:52:b0:9d:cc:
         30:ae:ed:97:f3:53:7c:c1:e4:92:ec:93:34:c2:4e:92:12:e6:
         6f:6d:3b:af:00:d0:9c:65:45:9a:2a:15:50:45:21:fa:df:52:
         68:22:0a:17:a1:4d:4e:23:af:7f:66:85:6c:5b:d7:49:15:e5:
         a2:75:1c:ee:8f:22:a1:da:ef:13:ab:5a:92:9c:3b:16:5e:03:
         a7:58:d8:78:43:04:93:7b:0c:c9:81:41:d7:b6:ca:48:33:c0:
         b2:65:94:68:2b:e4:fd:91:5e:b1:f8:65:1a:8f:64:48:57:be:
         a0:81:75:e9:4e:f2:42:e5:4e:e4:56:37:f4:8f:2a:ee:95:e0:
         77:31:dd:a0:c6:64:f1:b9:5f:21:03:04:a8:08:7d:c9:41:eb:
         c0:d6:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:18 2025 by rpki-client