Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9504938-e1da-3e53-81df-7dcbfd45b148.roa
File:                     e9504938-e1da-3e53-81df-7dcbfd45b148.roa (raw, json)
Hash identifier:          PL1MrF47tZnrvGGlxZ7f5tncwLzmkAiK90FlelfYO1k=
Subject key identifier:   83:04:94:70:0E:00:7E:7D:A6:7A:D8:6D:3E:5B:E1:53:E4:6B:51:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CA81B8662C192E2F036C
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9504938-e1da-3e53-81df-7dcbfd45b148.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     54686
IP address blocks:        2001:470:251::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ca:81:b8:66:2c:19:2e:2f:03:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=0d1c2473-a0c5-479e-901f-3fc672a02031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:36:59:e5:58:dd:18:be:ce:c2:f6:57:ca:
                    62:63:81:51:d4:6f:05:3b:90:f3:07:f0:76:bc:fd:
                    11:e0:43:8a:12:27:8d:fe:87:a4:9d:57:9f:34:0e:
                    44:6d:e5:1d:82:1d:76:dc:24:86:74:92:90:82:2b:
                    94:71:c3:11:93:d3:4d:8a:ae:2b:d0:ea:c2:72:55:
                    be:86:d0:d1:43:36:cf:1e:51:7d:6b:ee:ad:b3:8d:
                    c3:54:d8:0d:e6:0f:cd:71:fa:78:ce:03:8a:83:a2:
                    37:97:66:38:50:0f:48:01:52:33:18:4b:4d:d1:67:
                    40:47:43:69:05:b3:0f:44:b7:bd:da:a7:89:0b:1a:
                    66:fc:d2:1a:fe:fb:98:16:6b:cd:c7:92:88:0d:8d:
                    f8:06:25:2b:51:56:cf:16:7b:5a:fc:97:ca:40:04:
                    2b:80:4d:08:4b:cb:9d:f6:a6:fd:fc:00:76:5a:79:
                    bd:e3:b9:c0:b3:a1:29:61:c2:15:b1:ec:a1:08:f3:
                    47:15:e9:dd:7d:93:0a:6a:ee:87:67:a0:c1:9e:dc:
                    17:05:73:a6:3f:f6:36:20:a8:01:36:76:43:15:7c:
                    8c:99:3c:f2:b2:f1:79:ab:4d:02:b6:26:9c:d3:0b:
                    5a:c3:f4:16:71:5d:11:ab:df:5e:02:97:b1:23:69:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:04:94:70:0E:00:7E:7D:A6:7A:D8:6D:3E:5B:E1:53:E4:6B:51:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9504938-e1da-3e53-81df-7dcbfd45b148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:251::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:9d:60:e4:36:27:49:9e:9a:56:04:bf:b0:32:71:6c:44:
         b1:d6:90:ef:d0:11:9f:24:ef:29:01:a7:49:cc:af:72:54:85:
         40:84:f6:50:0e:90:1d:ea:30:7c:9f:52:41:bc:b0:0c:f2:f7:
         4d:d3:ab:99:2d:6b:9c:8b:f7:f8:17:db:60:13:a3:bf:fe:b9:
         b2:dc:cd:20:89:1e:ce:3e:05:0e:3c:f5:52:0c:8b:37:c7:be:
         2b:47:d0:71:23:d7:be:7e:30:e2:bc:d4:82:39:b6:79:89:34:
         20:b0:a6:d1:ed:f8:b1:d1:cf:08:e5:78:07:1f:f4:6a:da:a5:
         f2:9f:f0:e5:59:07:2c:5e:fa:26:92:e5:72:64:0a:48:e5:62:
         99:dd:c2:c1:87:b6:01:27:58:78:64:54:c8:f1:aa:16:74:6c:
         46:4a:af:02:e6:c5:0c:73:1d:d5:34:ed:39:86:6d:16:a4:52:
         72:40:71:f2:49:d7:27:8a:fa:e5:42:cf:12:e5:b4:15:f7:bc:
         f1:de:29:e6:89:47:a0:8c:f0:df:23:8f:a0:1c:aa:c0:4a:d7:
         1e:02:ab:19:ec:fe:b7:fe:86:ca:7e:ff:b1:2c:df:d4:0d:9f:
         00:05:b3:f3:75:a6:2b:56:39:c4:61:ca:3c:34:3b:cd:7a:d9:
         fd:2c:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:14 2025 by rpki-client