Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ced096e3-ff3c-3361-aa4d-105b3dfa88b4.roa
File:                     ced096e3-ff3c-3361-aa4d-105b3dfa88b4.roa (raw, json)
Hash identifier:          PVVtRtR3Kl5k6KpeNbe+apkeAlQIG+O0Mjecn7QQ5dk=
Subject key identifier:   29:60:CE:CB:E5:1F:1C:1C:81:E0:BA:DD:3C:5E:80:3A:DD:FC:D5:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848E7011F3E5E2B36B23B57E400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ced096e3-ff3c-3361-aa4d-105b3dfa88b4.roa
Signing time:             Sun 16 Feb 2025 14:00:52 +0000
ROA not before:           Sun 16 Feb 2025 14:00:52 +0000
ROA not after:            Sat 17 May 2025 13:00:52 +0000
asID:                     32267
IP address blocks:        2001:470:112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e7:01:1f:3e:5e:2b:36:b2:3b:57:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 16 14:00:52 2025 GMT
            Not After : May 17 13:00:52 2025 GMT
        Subject: CN=833a0d6d-e538-40d3-92d3-4dec07930a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:4c:5c:77:42:db:10:e8:91:e3:70:4a:f4:
                    ed:0a:72:ed:91:18:92:c2:37:c2:cb:23:45:94:03:
                    b2:b8:a1:52:29:cf:15:03:da:a9:2f:56:89:fc:1b:
                    dd:7f:2b:5b:19:51:65:3f:fc:a7:2a:c4:57:e6:9b:
                    ae:22:53:f5:dc:e1:13:83:2c:b6:00:0e:23:7b:a2:
                    1e:3f:de:26:9e:43:1d:a2:ea:a0:c9:37:44:58:b7:
                    10:c5:a7:52:8f:06:d1:7e:7e:a8:42:a9:f2:4c:55:
                    00:9b:83:33:f8:2a:82:88:b8:3e:54:b4:84:25:fa:
                    9e:7a:72:ca:0a:9a:2b:f1:2c:9d:d7:f8:0b:fa:37:
                    fb:aa:26:ac:19:ec:fd:52:03:c8:68:ad:c1:81:e4:
                    0a:bf:db:ba:19:1f:22:1b:76:ff:cc:d6:aa:d7:01:
                    28:2a:26:42:fc:80:11:a6:ea:1c:f4:7b:65:2f:ed:
                    05:8b:01:eb:b8:d9:94:27:74:f0:84:05:1f:d1:54:
                    f8:04:0c:5e:fe:3b:46:2f:8f:ab:47:af:df:a2:ba:
                    00:d8:41:33:01:1a:dc:13:31:14:f9:64:1b:37:08:
                    6e:c9:dd:90:62:12:7b:d8:1c:82:02:c9:71:59:d6:
                    be:2d:86:f1:3b:b9:fa:0f:9c:80:c8:e5:78:d4:e5:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:60:CE:CB:E5:1F:1C:1C:81:E0:BA:DD:3C:5E:80:3A:DD:FC:D5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ced096e3-ff3c-3361-aa4d-105b3dfa88b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:75:b0:fd:48:89:e6:c2:5e:57:d6:74:3a:84:3a:85:a8:
         80:06:05:ac:9c:79:74:b7:af:c9:45:1a:a7:06:ca:2c:b1:dd:
         39:ea:8b:7c:98:30:cf:37:5a:1e:63:51:ef:56:e7:1d:4e:8f:
         a8:ee:11:5c:c5:c2:a7:df:3f:e0:85:95:82:e8:86:ee:1d:45:
         c4:4d:75:3f:09:3c:8c:76:75:2c:31:12:80:5c:3a:b2:81:c9:
         87:8d:26:3f:0e:bf:c8:dd:37:9e:55:07:97:88:48:c8:22:57:
         bb:fe:da:47:2d:b4:64:24:91:3e:e0:42:d3:8c:7a:10:0d:16:
         3e:ef:de:b0:05:cc:65:f9:87:10:17:b4:b6:b5:ea:a6:19:c0:
         67:ae:c0:8b:81:56:74:48:a8:69:7a:75:89:a7:96:d4:66:c0:
         06:42:4e:75:f3:f8:f0:d1:82:a1:11:3a:48:ce:1d:93:dd:0c:
         08:53:73:2b:02:7f:78:c6:63:9c:62:0e:a0:04:b3:e8:fc:f1:
         c8:7f:46:12:25:43:ca:52:10:9e:6e:44:56:5e:39:7b:c8:c8:
         b4:e7:95:90:ea:c9:62:7d:70:d2:ed:1c:a1:09:b5:9d:3a:e2:
         cf:de:97:7e:dc:2f:51:92:5b:9b:70:67:46:d2:c6:dc:5d:00:
         aa:66:6c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:30 2025 by rpki-client on console.sobornost.net