Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa
File:                     bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa (raw, json)
Hash identifier:          Y89SET8KdolC+5+kS+VMPBdc9bNwW51h3gX1vT9Lw6A=
Subject key identifier:   76:79:4C:40:11:1C:06:B6:0C:B5:B1:00:4B:FF:5D:E1:29:7E:94:05
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848BFEB8E63A42B5731F8DA9E82
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     27257
IP address blocks:        2001:470:3c6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:8e:63:a4:2b:57:31:f8:da:9e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=d6388b78-44c5-4939-b549-d682dd2c90e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:02:91:98:15:ed:31:8d:57:c4:6e:09:87:
                    eb:db:dc:1d:b7:4a:ff:10:d9:b0:90:58:d2:2f:13:
                    8d:39:bc:04:2f:4a:d3:db:5c:c8:e3:2c:d0:cf:cd:
                    3d:dc:81:bb:0b:ba:3d:70:d3:20:4c:0a:e7:a8:fe:
                    17:73:73:34:a7:b9:99:59:dc:9a:b0:ab:1c:b0:f3:
                    bf:d0:44:b1:49:a6:cb:29:7e:63:3a:fb:d9:1a:6a:
                    b6:08:b1:95:2b:68:9a:bd:ef:90:6f:4f:35:e1:ec:
                    46:30:67:a5:bd:ac:aa:d7:c0:a5:8d:01:dc:83:07:
                    31:fe:d1:7f:f1:cf:56:6f:d5:33:b8:4b:7d:b6:db:
                    52:a0:a1:43:f0:0d:38:ac:bd:90:dd:8c:6e:a7:94:
                    f6:05:c8:dc:1d:89:66:8b:7a:65:46:e3:1a:ea:04:
                    1c:40:49:8d:1f:39:c5:b5:3c:6e:df:ec:54:89:0c:
                    50:ba:d8:0b:10:84:89:12:be:c1:1f:7d:db:b4:fd:
                    ff:0f:6a:01:f0:fe:5e:f2:9f:20:53:1a:89:f3:24:
                    3c:a0:22:87:3b:19:94:9f:86:69:e4:dc:18:df:5c:
                    5f:04:bb:85:fb:45:75:6c:53:86:ab:5f:05:5c:c0:
                    19:ad:e5:16:e1:4c:b7:03:b8:6f:6f:fc:37:9e:9e:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:4C:40:11:1C:06:B6:0C:B5:B1:00:4B:FF:5D:E1:29:7E:94:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:44:9d:4f:38:66:95:89:7d:36:0d:e6:a0:36:8e:cd:72:5f:
         b8:0e:07:8b:53:c4:5a:ab:8a:d9:e3:15:cc:94:c5:50:a6:86:
         b8:e3:be:71:f3:c3:d3:97:a1:0e:bc:54:76:0c:18:f3:c5:0f:
         7f:13:a5:9b:d1:aa:74:b4:7e:bf:06:85:29:36:1d:a6:07:0b:
         c1:60:97:63:fb:c2:76:4b:1a:3b:b6:dd:c5:f7:6d:92:03:4e:
         0d:62:74:df:6c:1e:09:11:d3:98:b3:0c:83:79:22:e3:42:1e:
         22:25:e1:28:28:f5:39:a3:fb:f2:36:2a:48:92:87:ea:87:f7:
         94:e7:0d:49:81:6b:19:e2:c5:fa:57:0d:9a:8c:d3:4d:73:9c:
         ac:18:56:c0:98:b3:1a:2d:27:78:15:2c:bc:41:ef:06:ef:73:
         13:a7:e9:50:41:55:e7:d6:a6:82:0e:a1:a8:ce:0a:87:d7:5c:
         0c:71:60:7f:93:6c:b3:00:8f:16:68:5f:db:91:a4:a5:03:f9:
         3d:95:9c:39:73:6d:5d:09:25:2d:06:e0:d2:90:b6:21:54:4c:
         e8:2d:31:0a:74:8a:2b:0c:6d:4e:6d:62:f2:21:48:87:2e:df:
         ff:1b:90:7e:98:13:00:be:82:1b:4a:c5:ca:97:ab:25:a3:0f:
         23:79:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:00:48 2025 by rpki-client