Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa
File:                     7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa (raw, json)
Hash identifier:          djurCyeDVYrNtHcsvLU6ZtJjofDvXhZigWABRdwvkvk=
Subject key identifier:   45:95:94:8F:FC:C3:63:F8:B7:02:31:4E:70:3D:AF:44:10:0E:E3:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926DD958B32BB5E763BF480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     57043
IP address blocks:        2001:470:18b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:dd:95:8b:32:bb:5e:76:3b:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b586c55e-0bcd-4f3c-be50-d4e279bdc0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:ba:e2:90:89:04:62:cb:ad:9a:74:35:6a:
                    16:a7:0d:5e:21:3c:fc:e2:00:bd:9f:71:94:5a:ec:
                    c6:58:f7:bd:1a:31:63:2e:0c:fe:2a:30:32:c9:1c:
                    52:2e:01:16:af:c0:a4:4d:33:c4:6a:db:6f:53:14:
                    05:8a:0b:ca:73:55:3b:72:ab:37:a2:e6:53:f6:18:
                    99:8d:bd:03:7d:09:02:f5:17:08:de:23:ac:7e:25:
                    c9:77:6e:4e:e6:29:f7:ac:3d:70:12:9d:59:55:57:
                    61:e7:fa:97:62:a3:2f:96:80:9c:b2:b4:d1:98:bc:
                    b8:07:03:b4:45:2a:38:dc:98:5c:9c:42:a1:e4:9e:
                    71:98:4c:66:c0:c8:4e:54:04:03:16:6c:86:72:40:
                    8d:87:76:ba:29:3b:10:50:ef:e1:6f:9d:09:e8:b4:
                    e6:9c:51:11:4c:77:ad:68:e6:85:03:a1:65:ab:8c:
                    d8:96:51:e1:3e:f4:84:7d:4a:b6:80:1e:34:d8:99:
                    dd:83:06:97:ed:06:75:dc:6b:b9:df:55:56:17:f8:
                    29:3b:67:32:df:2c:e9:75:80:36:a0:a1:da:cb:02:
                    ef:24:3f:79:ee:48:ac:5b:a9:9c:a9:b9:7b:df:fb:
                    9a:a9:e0:92:eb:21:fd:cb:8b:47:0e:90:3d:fb:93:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:95:94:8F:FC:C3:63:F8:B7:02:31:4E:70:3D:AF:44:10:0E:E3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7539c3-30d7-37f2-b9b2-f072b7d7b666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:18b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:24:ab:9b:ff:6b:1b:04:85:8d:df:01:f0:36:1b:2f:8b:
         61:d4:70:eb:b1:82:d3:4a:4b:67:59:14:95:2d:30:5e:96:88:
         28:b5:7d:d1:ab:2b:0a:bc:eb:80:b4:ba:75:35:6b:13:9e:2a:
         ff:bb:26:a0:87:f2:11:2c:5e:65:27:bd:32:aa:8d:ac:da:62:
         e4:38:cf:a7:f6:1a:b4:01:f2:84:c1:3c:7e:b4:f9:71:1b:cc:
         ce:de:54:81:b2:e4:1b:97:a8:4d:88:92:13:d6:d6:39:f8:15:
         92:85:ea:c5:e3:cf:57:2c:de:22:7d:24:a8:0e:c7:0d:51:77:
         d7:1e:c3:18:4d:44:33:8f:7b:d3:67:a6:76:c9:0e:00:4e:bd:
         79:4c:4b:81:22:11:1c:f6:93:c5:9e:70:7c:8b:d6:73:f5:4b:
         9f:bb:bf:a1:25:94:d8:4f:e1:84:c1:05:6f:19:c8:64:4d:c6:
         d4:58:2f:9d:b2:a9:ea:4c:72:6a:33:bb:e4:1f:06:50:6a:40:
         e4:6c:62:11:69:2c:39:b4:bd:fb:dc:22:d8:4e:d5:11:72:d5:
         87:b5:cd:86:01:7b:f7:ec:21:30:fc:9c:1e:60:f1:e3:d0:e0:
         65:72:f2:3c:a8:dd:0c:ca:22:6c:bf:1e:0b:fb:fa:59:21:7d:
         3d:ce:74:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5Jt2VizK7XnY79IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjU4NmM1NWUtMGJjZC00ZjNjLWJlNTAtZDRlMjc5YmRjMGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI264pCJBGLLrZp0NWoWpw1eITz84gC9n3GU
WuzGWPe9GjFjLgz+KjAyyRxSLgEWr8CkTTPEattvUxQFigvKc1U7cqs3ouZT9hiZ
jb0DfQkC9RcI3iOsfiXJd25O5in3rD1wEp1ZVVdh5/qXYqMvloCcsrTRmLy4BwO0
RSo43JhcnEKh5J5xmExmwMhOVAQDFmyGckCNh3a6KTsQUO/hb50J6LTmnFERTHet
aOaFA6Flq4zYllHhPvSEfUq2gB402JndgwaX7QZ13Gu531VWF/gpO2cy3yzpdYA2
oKHaywLvJD957kisW6mcqbl73/uaqeCS6yH9y4tHDpA9+5NfVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEWVlI/8w2P4twIxTnA9r0QQDuNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2M3NTM5YzMtMzBkNy0z
N2YyLWI5YjItZjA3MmI3ZDdiNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABzOJKub/2sbBIWN3wHwNhsvi2HUcOuxgtNKS2dZFJUtMF6WiCi1
fdGrKwq864C0unU1axOeKv+7JqCH8hEsXmUnvTKqjazaYuQ4z6f2GrQB8oTBPH60
+XEbzM7eVIGy5BuXqE2IkhPW1jn4FZKF6sXjz1cs3iJ9JKgOxw1Rd9cewxhNRDOP
e9NnpnbJDgBOvXlMS4EiERz2k8WecHyL1nP1S5+7v6EllNhP4YTBBW8ZyGRNxtRY
L52yqepMcmozu+QfBlBqQORsYhFpLDm0vfvcIthO1RFy1Ye1zYYBe/fsITD8nB5g
8ePQ4GVy8jyo3QzKImy/Hgv7+lkhfT3OdIc=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:06 2025 by rpki-client