Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa
File:                     c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa (raw, json)
Hash identifier:          lOadjPBB+cri1sm/mZxybrLgTS2v9Cy3jHvT3SEFrJ8=
Subject key identifier:   6C:3A:86:42:97:4C:B5:A0:F3:E4:FC:CA:E5:46:68:2A:29:5D:C6:97
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01BBA659A81A169AFEE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     48957
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1b:ba:65:9a:81:a1:69:af:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=eeae26ff-57e3-4f18-adf3-8954710bb2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:7a:99:46:ff:74:a6:c5:0a:48:75:e0:20:
                    6a:4b:e0:27:fd:5e:bb:ed:bd:64:33:25:d5:c3:3d:
                    0d:6d:97:51:89:56:a5:fb:68:13:af:95:de:f5:94:
                    09:f2:70:64:a5:ea:8a:e5:c9:a5:35:ae:9c:71:4f:
                    09:f3:9a:fb:18:09:e1:fc:02:cf:52:14:92:f5:d7:
                    06:19:6e:90:12:e4:25:1a:cf:c8:4e:e8:cf:cf:b3:
                    a7:b8:0d:66:bc:be:76:2b:d4:c6:e3:55:1f:4a:eb:
                    11:2b:69:cd:cc:70:a1:a4:67:6b:99:f2:b4:35:f3:
                    d7:77:57:c9:1a:eb:73:0f:ee:f3:aa:e6:45:02:25:
                    19:d5:ed:a7:86:c7:10:44:2a:44:83:8b:0a:1c:5d:
                    63:0d:fe:18:f4:a5:c6:5a:68:82:f8:f8:ba:be:74:
                    fb:d7:1f:a2:8b:3c:4d:89:61:bc:33:3d:94:3b:9c:
                    2b:f0:16:98:5e:49:54:dc:8a:53:1b:75:bc:02:f8:
                    fc:d4:e9:a2:f4:31:62:b9:10:55:4f:02:42:3a:a0:
                    0a:99:30:32:16:29:3b:89:3d:0d:44:f1:6e:7d:24:
                    73:af:79:04:fb:4b:9e:e4:d9:a1:a0:d8:db:d3:0f:
                    79:cd:2e:d4:46:ee:79:22:92:cc:f9:44:6f:27:6f:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3A:86:42:97:4C:B5:A0:F3:E4:FC:CA:E5:46:68:2A:29:5D:C6:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c0f31269-a1d9-3a8e-98a7-06e00ed3d9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:ff:59:18:72:75:da:ce:ce:83:fb:bb:bd:6a:a6:b5:ab:
         58:f8:6d:bf:47:85:dc:b4:6f:fa:f3:23:66:e8:6e:9d:a3:dc:
         64:de:e1:b9:b2:2c:38:1b:c4:e9:8b:64:a7:f2:7f:1f:82:a6:
         c6:74:2f:25:41:f6:dc:c1:ad:f2:2e:ca:9f:40:41:f4:6f:1f:
         4b:93:b8:34:b1:60:c7:f8:cd:2f:75:46:65:d5:db:1b:be:43:
         31:41:5c:0c:49:98:07:0f:6e:c5:32:3b:a0:b0:f6:59:6a:a9:
         ee:ec:e7:d7:26:ac:52:64:50:16:16:10:a8:3a:f1:b9:c3:ef:
         05:51:81:1b:f3:d7:bf:38:f2:4d:e9:95:0a:4d:34:be:c5:0d:
         69:e2:b1:60:4c:90:9c:3e:19:8c:7e:4c:b0:fd:48:db:a9:9c:
         e9:db:4d:c5:15:42:59:9c:37:3d:dd:78:97:de:73:78:e1:55:
         36:83:8b:f7:1a:1a:46:4e:af:67:c7:7a:7c:ea:32:c3:66:b9:
         03:0b:4e:a3:c1:ae:11:7b:d6:b8:9f:57:0a:a2:e3:82:36:e1:
         b0:d7:0c:5e:0d:59:25:86:65:58:50:a8:3d:e5:10:a0:31:ba:
         61:3f:6e:aa:bc:b9:4e:f3:7b:d7:a1:6b:b9:a4:5e:e5:66:a3:
         96:21:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 17:50:30 2025 by rpki-client