Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4b7672c-c910-399f-8339-5fcbe1d106f9.roa
File:                     d4b7672c-c910-399f-8339-5fcbe1d106f9.roa (raw, json)
Hash identifier:          iMUvjb2DhT+xLtUnbnRG7F7GOEeQTtnQq/w4UTHnd+4=
Subject key identifier:   ED:52:46:DC:8F:52:DC:BA:D0:EC:20:2B:E8:CA:24:E8:CB:02:DC:9A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E999F21481B416128420
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4b7672c-c910-399f-8339-5fcbe1d106f9.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     133734
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e9:99:f2:14:81:b4:16:12:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=0ac9e891-102d-4d5e-bd7f-1346a2df0e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:31:10:8a:67:d1:fa:26:1d:1c:a9:fe:5b:
                    d8:be:68:78:ba:e5:43:e1:56:44:3a:13:41:d5:9b:
                    e9:45:db:d4:bb:66:ff:9f:16:ef:fd:18:6d:b5:cb:
                    a4:87:8d:4d:7a:93:4c:86:ba:6f:c0:ea:e1:cb:7c:
                    f2:93:57:86:96:7f:98:1e:48:9a:0e:1a:aa:34:37:
                    36:99:61:6f:61:40:96:6c:6f:bb:48:01:c6:b8:5f:
                    39:ad:1d:d3:c7:a1:e2:89:9e:f1:43:53:42:68:d4:
                    40:30:03:39:2d:a3:a2:52:12:18:d0:48:50:51:59:
                    06:d4:04:c5:10:42:80:78:d6:f5:ac:85:e6:b1:5e:
                    ee:cf:a8:b9:3a:fa:d3:c6:62:a6:a7:47:04:29:9a:
                    f8:df:0e:1c:6b:6a:cb:63:f2:17:77:33:96:39:1f:
                    b4:16:8c:d3:c4:88:87:dc:37:71:6a:80:45:17:b7:
                    06:48:e8:37:3b:3b:a6:e4:d7:a1:c3:bf:c4:7c:71:
                    d3:b1:2c:14:77:ae:06:56:37:62:be:1d:28:1b:bd:
                    b1:a6:e2:d1:cb:da:6c:81:c1:48:0e:9c:d5:ba:dc:
                    ba:0c:d0:52:bc:86:68:0f:15:c1:b2:3d:07:71:08:
                    2a:88:0d:f2:ed:9c:78:34:85:e7:26:92:b4:59:36:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:52:46:DC:8F:52:DC:BA:D0:EC:20:2B:E8:CA:24:E8:CB:02:DC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4b7672c-c910-399f-8339-5fcbe1d106f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:30:c9:3d:40:2b:01:b1:34:82:41:50:70:26:9a:d0:dc:95:
         fa:68:53:d6:e2:5c:9c:70:48:45:28:d5:4a:e6:74:81:8d:4a:
         31:fd:bb:4f:5d:ec:7e:7b:3b:bb:a7:bc:83:3d:e4:b0:56:13:
         cd:b0:e3:6b:31:0d:76:61:cc:cd:2c:4b:f1:b9:1c:7d:b7:c0:
         0d:99:8f:b3:dc:be:b6:ee:c3:c2:0b:ba:c9:7c:e7:74:b2:48:
         fb:68:ea:a4:8a:dc:a3:03:67:fa:81:8f:79:4e:44:a3:00:8b:
         75:0e:27:d5:15:26:64:f2:f6:fd:0a:03:82:47:ca:74:36:5a:
         db:8a:9f:c0:b5:b1:41:0d:2e:70:65:ec:36:6e:88:7a:b8:67:
         2d:f6:a5:5f:b8:7c:75:80:87:0d:09:4f:7d:3f:88:3a:7e:f1:
         43:c5:4b:97:a0:36:fb:4f:9a:85:78:d3:86:db:0a:2d:3e:a9:
         5f:1a:83:1c:bd:af:b5:3a:f8:5d:cc:32:87:0f:e8:17:a5:29:
         07:b8:e8:6e:9f:6b:ee:bf:7e:24:bb:03:24:73:70:0a:01:ca:
         39:55:89:05:92:ed:9d:dc:a7:6a:a3:94:68:f3:cd:cb:d4:3c:
         19:f1:13:e5:f1:c9:85:a9:de:3f:9d:7c:80:09:c7:f4:ab:d7:
         fa:8c:35:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj5JumZ8hSBtBYShCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MGFjOWU4OTEtMTAyZC00ZDVlLWJkN2YtMTM0NmEyZGYwZTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomgxEIpn0fomHRyp/lvYvmh4uuVD4VZEOhNB
1ZvpRdvUu2b/nxbv/Rhttcukh41NepNMhrpvwOrhy3zyk1eGln+YHkiaDhqqNDc2
mWFvYUCWbG+7SAHGuF85rR3Tx6HiiZ7xQ1NCaNRAMAM5LaOiUhIY0EhQUVkG1ATF
EEKAeNb1rIXmsV7uz6i5OvrTxmKmp0cEKZr43w4ca2rLY/IXdzOWOR+0FozTxIiH
3DdxaoBFF7cGSOg3Ozum5Nehw7/EfHHTsSwUd64GVjdivh0oG72xpuLRy9psgcFI
DpzVuty6DNBSvIZoDxXBsj0HcQgqiA3y7Zx4NIXnJpK0WTaaDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO1SRtyPUty60OwgK+jKJOjLAtyaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDRiNzY3MmMtYzkxMC0z
OTlmLTgzMzktNWZjYmUxZDEwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAkwyT1AKwGxNIJBUHAmmtDclfpoU9biXJxwSEUo1UrmdIGNSjH9
u09d7H57O7unvIM95LBWE82w42sxDXZhzM0sS/G5HH23wA2Zj7Pcvrbuw8ILusl8
53SySPto6qSK3KMDZ/qBj3lORKMAi3UOJ9UVJmTy9v0KA4JHynQ2WtuKn8C1sUEN
LnBl7DZuiHq4Zy32pV+4fHWAhw0JT30/iDp+8UPFS5egNvtPmoV404bbCi0+qV8a
gxy9r7U6+F3MMocP6BelKQe46G6fa+6/fiS7AyRzcAoByjlViQWS7Z3cp2qjlGjz
zcvUPBnxE+XxyYWp3j+dfIAJx/Sr1/qMNXY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:03 2025 by rpki-client