Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e437c4da-f766-38be-a126-1963a65de093.roa
File:                     e437c4da-f766-38be-a126-1963a65de093.roa (raw, json)
Hash identifier:          TH8KpaDyMz9dL1pBAe+KUoJL/T+C0eSvRQXAGVNJtnc=
Subject key identifier:   CD:8A:08:F8:1A:16:21:47:69:38:6B:55:B7:6C:9E:D9:23:0F:E7:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFB9CE0D8C302F9470DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e437c4da-f766-38be-a126-1963a65de093.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     398146
IP address blocks:        2001:470:205::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:fb:9c:e0:d8:c3:02:f9:47:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=456f7f2b-f84e-4741-ba60-0dd47344463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:00:54:40:c0:c0:1a:86:23:f7:fd:ef:86:
                    18:bb:23:80:d9:21:84:16:fd:12:c4:d2:94:e8:6d:
                    fa:ba:e8:30:72:bb:8b:42:84:29:e0:79:eb:7b:8e:
                    47:e1:04:b6:cd:44:8d:be:e2:00:32:5b:88:d6:46:
                    b4:23:f7:06:df:c5:b4:0e:8c:89:28:80:61:82:79:
                    18:5c:c1:56:7e:61:a8:b7:f8:d4:7f:e7:2f:fc:00:
                    31:bd:24:59:5c:b4:95:e2:9b:0e:51:57:39:ad:3c:
                    3d:5c:ea:80:55:8b:79:4e:3c:b8:60:2f:92:78:1b:
                    92:47:a4:29:a0:f8:87:aa:5e:12:22:e9:72:f1:e5:
                    3a:eb:91:86:25:ac:a9:b5:30:44:e6:65:2f:11:af:
                    c5:f8:e9:57:6b:33:9b:9f:fc:89:95:ec:46:6e:0a:
                    e1:dc:10:53:19:b7:c8:23:fd:5a:7f:7b:2e:46:88:
                    35:ba:5e:e2:25:57:db:8b:73:53:98:03:5f:4e:85:
                    b2:74:0d:be:8a:1a:db:84:12:c3:40:26:f6:03:07:
                    be:cf:b1:b4:fc:77:92:26:6e:d3:74:f3:fa:f5:38:
                    ad:54:9d:9b:1e:bf:fa:8f:e6:f6:80:f2:fa:17:9d:
                    bc:71:cf:0a:6d:b7:c7:df:4c:70:bd:a1:1c:7e:d2:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:08:F8:1A:16:21:47:69:38:6B:55:B7:6C:9E:D9:23:0F:E7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e437c4da-f766-38be-a126-1963a65de093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:205::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:c5:eb:a5:0c:bb:b1:45:78:28:c0:fc:f0:c7:5d:b2:be:
         fb:e7:fd:78:3e:dc:66:8e:19:60:b2:c3:7a:b3:e6:ae:13:44:
         4f:17:4f:8d:73:c2:e7:13:ff:ad:22:43:7e:5c:54:ed:0a:e8:
         4c:f6:27:7c:eb:fb:87:5d:e5:2d:8d:37:0a:05:86:e7:e1:bd:
         c5:f4:f3:66:15:c4:07:dd:7d:1e:79:24:9b:b3:31:d6:0d:7a:
         8e:3c:5f:a9:69:d0:cf:72:d7:48:9c:66:dc:c0:c8:aa:a3:a2:
         da:70:d3:3d:6b:4c:52:00:11:d3:e7:22:6b:6a:4a:44:38:f1:
         96:50:18:2d:42:7f:2f:e1:04:84:ee:a4:7a:64:14:02:68:c7:
         ae:58:e9:64:29:c3:80:61:84:08:80:a0:36:38:36:c6:d1:9a:
         70:40:0f:63:3f:8e:39:c7:aa:76:16:92:d8:af:36:24:61:12:
         f9:64:06:14:c7:c0:ee:a7:9e:af:80:a4:11:f2:ae:38:56:b2:
         e8:b2:f9:df:26:fa:7d:e6:9c:5a:70:a5:bd:d6:ed:70:df:12:
         dd:6f:20:a2:c4:c3:e2:8d:3d:e2:b8:fe:d0:6b:44:15:c1:3b:
         90:06:03:f4:08:03:de:bd:20:f0:7e:f9:e2:ca:ea:e4:9f:1e:
         75:48:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 16:28:49 2025 by rpki-client