Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b28aeda-d3fe-3272-824f-f471968d1444.roa
File:                     7b28aeda-d3fe-3272-824f-f471968d1444.roa (raw, json)
Hash identifier:          bkBU4d0REgV6goJNQ7srrquqyGJQNi4FU4mYoZTqVao=
Subject key identifier:   E2:9A:50:05:33:FB:61:5E:3C:58:A9:1F:1E:ED:19:08:15:CE:8E:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858494FA2933D165A3794172F2770
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b28aeda-d3fe-3272-824f-f471968d1444.roa
Signing time:             Wed 26 Mar 2025 01:30:15 +0000
ROA not before:           Wed 26 Mar 2025 01:30:15 +0000
ROA not after:            Tue 24 Jun 2025 01:30:15 +0000
asID:                     149290
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:a2:93:3d:16:5a:37:94:17:2f:27:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 26 01:30:15 2025 GMT
            Not After : Jun 24 01:30:15 2025 GMT
        Subject: CN=9ab78a9f-31fb-4484-aaaf-b0078d32b37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:a4:17:4d:3f:1e:1a:40:91:ac:4e:a4:2b:
                    f5:14:04:2c:5c:d8:ac:9e:1f:52:85:c7:7f:bc:20:
                    a8:bc:0c:1e:ec:5a:63:3f:99:b2:d4:78:ad:01:14:
                    ee:b6:b8:16:4b:53:52:3d:9b:c2:4e:57:10:15:70:
                    e0:e1:da:3a:3f:8b:ad:1f:91:a2:7a:09:ea:17:8d:
                    f9:3b:c3:b0:36:ab:4f:a5:ee:72:85:fc:ac:b9:58:
                    ab:b3:b3:b6:94:19:b8:ac:55:03:1c:4c:34:47:47:
                    e3:5e:64:7f:d0:c5:b0:43:73:ba:bb:2f:34:49:d7:
                    b6:58:ee:39:de:52:19:1f:fa:3a:d3:fe:4f:d2:0e:
                    a0:77:d0:58:e5:f3:88:54:46:d6:03:cc:84:78:8d:
                    cf:b6:fc:40:a8:3e:96:66:ee:c0:28:49:96:4f:d7:
                    16:0e:76:08:75:81:55:67:1e:42:51:13:f6:07:47:
                    fb:7b:74:ae:78:c4:81:7a:b9:d0:e9:7b:6e:d6:d1:
                    61:47:61:85:2f:97:11:a4:e4:2b:2b:d5:d1:5f:4f:
                    ab:e5:8e:62:68:02:2c:64:1f:cc:af:8a:cc:71:15:
                    df:91:80:7b:0d:98:1b:37:da:39:6c:f1:1e:74:a8:
                    8f:8e:1d:4b:1e:b9:53:31:33:b1:b1:11:6f:80:5a:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:50:05:33:FB:61:5E:3C:58:A9:1F:1E:ED:19:08:15:CE:8E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b28aeda-d3fe-3272-824f-f471968d1444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:75:ae:2e:df:b3:9d:16:65:1f:39:1f:d7:1a:3c:e5:a8:
         98:05:2c:9f:5f:a5:9f:63:24:b6:81:2f:2d:6c:71:b9:72:9a:
         f0:30:8f:89:ac:5e:58:d8:f3:db:08:9a:e8:1b:dc:f4:16:1c:
         83:d5:3a:de:e8:4b:af:a5:ed:b9:96:00:ca:38:7c:2a:71:86:
         4e:c2:a4:69:24:dc:72:0b:ad:97:7f:e6:38:79:d0:a3:cc:f9:
         32:aa:2c:b3:03:90:ce:f0:95:0a:7a:09:79:6a:78:a7:e1:59:
         30:44:53:b1:ab:d9:6e:25:f0:19:e1:75:49:09:b0:0d:4c:9b:
         4c:7c:74:e7:01:76:88:c5:23:14:fd:89:86:1e:ba:2b:b2:fb:
         bf:df:9f:cc:39:3a:ea:4f:d1:c9:6b:6f:03:70:54:f9:c4:24:
         d1:56:62:fe:e6:b1:77:14:86:1f:bb:6c:06:2c:c5:fc:fc:a4:
         17:ea:d5:4e:50:4f:c9:d5:36:c5:14:80:50:c9:5e:a4:c2:fa:
         7c:6f:70:6d:b7:29:86:43:ca:ff:0b:17:fd:66:0c:0b:56:3d:
         55:a7:97:1b:ad:ba:6b:e7:76:b4:ae:f9:ca:8d:57:e2:8c:2e:
         8e:d8:99:b5:34:46:4f:65:23:f3:19:4e:79:47:00:a2:29:7e:
         f0:2b:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:39 2025 by rpki-client