Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b65b98bc-b1d0-3f8d-b854-1be484363d15.roa
File:                     b65b98bc-b1d0-3f8d-b854-1be484363d15.roa (raw, json)
Hash identifier:          5lJ5hCrZvfG0ni8/rGHQtd0103gG9BvcW1p0obJFMuA=
Subject key identifier:   02:88:BB:56:B3:D2:C0:CB:DC:7A:ED:00:96:0B:27:16:BA:DA:C4:1D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01F64BC610A7DF2E932E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b65b98bc-b1d0-3f8d-b854-1be484363d15.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     17806
IP address blocks:        2001:470:2b7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1f:64:bc:61:0a:7d:f2:e9:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=6dcbc18c-5509-46d2-8c36-af4ceb4e4f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:af:6a:fb:9c:7e:32:a5:ca:43:b9:63:dc:
                    5c:cc:4a:21:76:16:d6:cd:21:9a:70:24:b3:e0:42:
                    01:b8:0d:cc:6e:57:2f:0d:b2:54:52:c4:d0:17:ee:
                    dd:55:17:85:64:8f:f1:f6:09:51:8b:ce:89:f2:47:
                    42:39:a4:12:3c:6b:5f:7f:f0:6a:34:01:3f:52:47:
                    94:46:aa:42:8f:12:12:8e:66:ac:5d:22:25:a2:e7:
                    bb:e5:1c:1e:8f:c9:3a:3a:81:14:b8:5c:8f:aa:5f:
                    72:b2:7b:09:57:fa:72:1a:77:7d:68:3d:fe:bb:c0:
                    82:02:6f:b6:f1:0b:84:34:89:82:91:b3:3d:1f:c5:
                    9e:28:13:4c:1a:28:35:62:32:b5:01:82:9d:f7:78:
                    61:61:26:2f:bd:b9:1a:3e:74:51:fe:ba:e4:41:fc:
                    77:39:df:5f:72:74:63:06:ad:03:af:05:40:d1:96:
                    69:ca:87:f6:a0:94:fc:95:62:85:1b:9d:2f:c9:f1:
                    1a:43:e3:c3:08:58:9f:2b:bb:6b:a4:fd:16:89:c6:
                    fd:d2:4d:0b:82:ac:46:d0:69:c5:30:60:20:00:02:
                    4b:13:f7:26:d1:da:7c:22:af:3f:87:0d:ef:2c:cb:
                    cb:21:3d:d0:99:13:1e:cc:c1:90:1b:97:eb:8d:a4:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:BB:56:B3:D2:C0:CB:DC:7A:ED:00:96:0B:27:16:BA:DA:C4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b65b98bc-b1d0-3f8d-b854-1be484363d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:5e:33:1f:c2:00:2c:35:8b:17:ef:7f:a6:41:d2:2a:f8:
         c2:da:30:d9:bc:42:85:31:fa:20:7b:96:a3:47:bc:d3:c5:a5:
         10:d9:97:c7:75:8f:33:76:43:91:34:ac:9c:ce:17:85:19:42:
         3b:0e:41:35:27:cc:2e:df:46:a0:16:97:4b:c7:6b:ce:96:8c:
         a2:ea:93:db:ff:b1:e7:29:2d:22:c6:37:59:78:9d:ef:05:ec:
         4c:ce:82:04:58:4d:20:d2:44:fc:ea:2d:2c:d0:9e:bb:75:14:
         6a:ba:a7:53:be:aa:f7:f9:a7:eb:3d:75:c1:73:db:1f:59:f5:
         a7:e1:44:66:b4:e1:5e:0b:bb:0a:5d:af:b5:7f:06:a9:b6:78:
         96:ee:80:ef:b0:90:67:7d:3c:80:5f:e5:4a:51:6f:1d:6d:6a:
         f3:5d:13:a0:1f:4e:a1:5e:4e:8b:da:e9:3d:0c:0d:36:df:8b:
         2d:b9:3f:de:e8:c1:4c:fa:84:62:8d:52:f6:c5:5d:ec:b7:cd:
         c0:8c:2d:77:d7:ef:7a:ec:77:dc:ce:ae:7f:d0:86:28:9a:98:
         91:4c:04:08:2a:c3:94:3b:43:75:ab:f2:9d:54:4f:4e:55:c5:
         04:ee:a4:a2:c0:e8:0c:ea:e7:59:dc:c5:2b:8b:24:12:28:59:
         92:06:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 17:52:25 2025 by rpki-client