Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edafe759-3d3f-3a19-9158-e751a8767e4a.roa
File:                     edafe759-3d3f-3a19-9158-e751a8767e4a.roa (raw, json)
Hash identifier:          kqwNvBwQgaNIz8sbANGNspG4dcI9D4NzFpm87A3CL4U=
Subject key identifier:   FE:EF:D8:71:24:86:3F:17:23:8C:54:4A:81:2F:AA:BC:41:F5:52:2D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E6E52CB025896A10F680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edafe759-3d3f-3a19-9158-e751a8767e4a.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     58715
IP address blocks:        2001:470:2b7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e6:e5:2c:b0:25:89:6a:10:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=bd8ea6e9-8094-42b7-9691-f8c252a9e562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:7a:60:84:00:f6:ff:33:cd:03:51:93:87:
                    47:d0:c5:c3:fc:30:c7:a0:96:93:1d:83:2d:31:63:
                    da:42:51:ad:11:8d:ef:90:7e:d5:31:35:00:3c:d7:
                    ca:fd:ea:8a:5c:8f:e9:4d:c2:73:40:d9:34:14:6a:
                    54:aa:81:b2:3d:3e:5a:e6:e6:24:09:ab:c9:a4:8f:
                    dd:d0:dc:63:13:63:4d:3f:de:b9:c8:1d:2f:f6:7f:
                    cd:66:74:a9:95:6d:68:62:4f:9f:e8:90:62:9c:b5:
                    69:ac:41:37:d9:38:0b:b2:e5:72:12:8d:45:37:82:
                    f8:60:a0:c7:f5:54:e0:25:fb:8e:a2:4f:d5:88:bc:
                    69:3b:0e:81:5e:56:c0:df:fe:34:04:3e:27:07:01:
                    07:e1:d5:bc:b6:b8:d8:b3:d1:f3:74:ef:05:2c:f5:
                    03:57:65:e7:06:e5:a5:28:2d:93:26:a9:5a:b1:cf:
                    99:d2:52:c4:2c:9d:74:87:a9:a3:90:65:0d:c6:76:
                    c3:55:fc:04:4c:a1:f9:05:01:ff:c1:71:2c:42:4d:
                    ba:df:1a:5c:9f:73:8e:cc:e6:aa:43:f9:b9:86:df:
                    9e:5a:f6:1e:64:7b:a9:70:09:9b:50:b9:be:85:5a:
                    09:b9:59:f9:35:a8:78:fe:37:ae:e5:56:17:2b:a6:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EF:D8:71:24:86:3F:17:23:8C:54:4A:81:2F:AA:BC:41:F5:52:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edafe759-3d3f-3a19-9158-e751a8767e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:8e:99:72:31:82:06:bf:6f:c3:15:bd:20:dd:49:9c:7e:
         66:43:b2:35:27:db:dc:a2:76:c7:98:c1:3f:a5:ba:1c:31:85:
         d2:88:01:42:72:54:d6:45:ff:e2:9d:44:bd:5d:47:4e:24:4f:
         c0:ac:d2:42:36:80:a0:ff:04:4d:7a:67:a1:9e:d3:fa:fa:05:
         ab:3c:1c:b1:75:c5:a1:80:b3:9c:8c:3b:c2:35:27:d6:d5:aa:
         42:13:80:72:cb:8d:4e:79:cc:52:06:00:a2:92:ea:05:62:48:
         fb:48:b8:35:d1:fc:f4:2d:d8:82:f9:b9:4c:a7:47:df:72:56:
         c9:ad:b3:b6:b6:99:f3:a9:c3:e5:f7:5f:ec:9f:50:3a:41:1d:
         95:17:f6:39:ea:f7:51:d3:d8:b7:a4:56:9d:1d:00:7e:6d:81:
         67:06:b3:ce:1d:7f:d4:0d:77:8d:21:74:da:7e:9a:9e:0e:40:
         fc:70:39:55:dc:0b:17:12:30:11:3b:bd:36:2b:41:80:b9:ec:
         11:bc:0a:cc:6a:0c:4e:45:f2:6a:cb:e3:ca:06:86:20:3d:b4:
         f7:cf:dc:56:50:e6:c1:60:fb:a0:57:ab:c4:9d:c7:a7:4c:3d:
         d1:8e:14:7a:ce:35:f6:61:85:a3:f8:3f:2c:aa:a6:75:88:48:
         73:6f:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:45:08 2025 by rpki-client