Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa
File:                     7c7788c8-0052-3a9f-8848-47f429da02ae.roa (raw, json)
Hash identifier:          fDzRhYc69lVDsY7DV81s5q/a15fIpGkqHZ/tTXacnns=
Subject key identifier:   D6:CF:97:D7:E5:8D:68:A5:3A:0C:EF:85:B2:6C:DD:C0:58:6A:2B:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926C941E713036650106A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        2001:470:241::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:c9:41:e7:13:03:66:50:10:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=bd7118ca-d3c1-4c44-a509-a55a631f932f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:7a:68:8b:a1:fe:32:99:5f:d7:bb:1c:8f:
                    66:e3:55:ca:18:dc:43:7a:f3:65:ba:7f:29:c9:19:
                    35:be:ca:61:8d:c4:fd:1f:e4:f0:52:a3:ab:27:8f:
                    c3:23:d9:f0:05:1a:e9:b8:dc:b0:da:e1:e3:47:66:
                    56:83:db:a2:74:2b:33:f7:7d:28:4b:fb:3d:16:fb:
                    4b:b3:05:c0:fb:51:00:ed:56:37:85:4e:1c:9c:ce:
                    30:30:89:a9:51:47:9e:b0:3f:67:79:bb:e4:72:d0:
                    1f:42:ec:6c:4a:c2:43:62:d1:41:fe:df:f4:d2:bf:
                    b5:92:0f:c0:93:ac:f2:54:a5:ab:db:f2:45:f8:a8:
                    33:14:47:fe:32:aa:60:7c:70:dc:6b:d9:80:fd:b3:
                    a6:b1:15:a8:58:3e:49:44:bd:df:bc:67:26:57:d3:
                    a8:61:19:9c:a6:b3:8c:42:f0:04:e3:bc:42:cd:15:
                    8c:33:c8:78:ab:d0:cc:16:bb:00:e1:6b:18:d7:64:
                    a9:26:e0:04:d2:5e:dc:38:a0:a9:24:3a:1f:a0:31:
                    48:c8:bb:fa:ff:2d:0c:4a:f0:fc:94:84:38:6f:b2:
                    bd:49:66:b2:44:16:1a:6e:5f:93:12:88:91:c7:28:
                    10:22:d7:e1:ca:09:ce:5f:99:d5:03:70:57:7f:95:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CF:97:D7:E5:8D:68:A5:3A:0C:EF:85:B2:6C:DD:C0:58:6A:2B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7788c8-0052-3a9f-8848-47f429da02ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:241::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:01:17:22:26:80:3a:ed:33:d9:ae:1e:51:fb:b3:9d:e9:
         cb:89:fb:f2:68:68:ce:a8:40:ea:31:18:36:9b:ec:88:14:b2:
         a5:b8:8e:3b:a3:60:97:45:85:55:a8:72:b6:1e:da:ab:49:93:
         bf:ce:fa:5f:00:92:eb:35:10:be:7d:d0:cb:72:c4:df:f1:e7:
         36:7e:a6:aa:ac:83:22:a6:50:c5:35:56:b1:ab:cc:0c:d5:eb:
         a9:59:88:41:8d:f4:00:7e:69:1b:34:fe:5d:43:55:ff:6d:7a:
         55:3e:41:03:75:f5:ae:70:af:ea:91:4d:1e:0e:0f:62:2e:69:
         15:df:27:38:54:20:8c:63:2e:17:2e:aa:44:dc:0e:04:ff:6a:
         80:56:4e:f5:de:48:7c:d5:25:ec:b9:ab:81:70:4e:32:da:a8:
         f7:2c:1c:b5:b9:fc:ff:02:08:82:7b:62:65:21:23:63:22:42:
         f8:66:15:3a:87:88:c2:d1:5e:65:13:bf:16:76:eb:02:ef:67:
         1b:04:9f:70:69:ae:c5:10:db:52:3e:0f:8f:30:47:1f:9d:0d:
         ff:ee:1e:9d:6b:f5:6c:8a:fd:16:9b:6e:31:96:67:13:42:09:
         b6:5a:64:66:e1:f0:f1:6d:26:3f:bb:d3:81:05:e7:ca:54:2b:
         54:3a:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:48:47 2025 by rpki-client