Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a3a2f34372d3437203d3e203133383532.roa
File:                     323630323a663766663a3a2f34372d3437203d3e203133383532.roa (raw, json)
Hash identifier:          WAFPMB1t+/Q0oiD8aOFahVAtkV9vKq7w/1c7EjQhA70=
Subject key identifier:   35:9E:83:AE:F4:B0:DC:30:73:26:B5:3F:4C:0D:B2:EB:F3:E0:48:C1
Certificate issuer:       /CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
Certificate serial:       3D9F95A84E5A1B4C0122BEECAA97381F72712DDB
Authority key identifier: 2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a3a2f34372d3437203d3e203133383532.roa
Signing time:             Thu 10 Apr 2025 08:01:48 +0000
ROA not before:           Thu 10 Apr 2025 07:56:48 +0000
ROA not after:            Thu 09 Apr 2026 08:01:48 +0000
asID:                     13852
IP address blocks:        2602:f7ff::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9f:95:a8:4e:5a:1b:4c:01:22:be:ec:aa:97:38:1f:72:71:2d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
        Validity
            Not Before: Apr 10 07:56:48 2025 GMT
            Not After : Apr  9 08:01:48 2026 GMT
        Subject: CN=359E83AEF4B0DC307326B53F4C0DB2EBF3E048C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:f1:db:f7:1a:f5:a5:9b:61:1a:38:9a:46:
                    b6:d3:08:09:d6:34:fd:1a:11:3b:12:d5:39:16:e3:
                    38:55:ce:84:02:a4:f9:3f:40:c9:ce:16:f4:3a:e8:
                    91:a4:f8:d4:6f:32:b1:0c:95:e3:b1:a1:8e:d1:ba:
                    8e:d5:b5:88:12:68:e4:39:81:d5:0d:48:a6:02:51:
                    ab:f0:5e:3a:c7:3e:bf:cc:4b:53:cc:16:f5:4d:eb:
                    8a:2a:02:19:96:aa:e5:38:d6:65:f1:32:3f:cf:f7:
                    af:8c:f6:9f:31:71:54:0a:55:31:f6:59:48:76:a2:
                    63:ba:8f:8c:20:6c:ad:24:77:77:96:25:ba:b1:01:
                    63:cf:03:c4:d4:6d:49:01:80:8a:3c:b5:e3:ca:73:
                    ab:06:99:fc:8d:28:bc:4a:09:41:44:9a:65:e5:69:
                    84:44:e6:96:15:2d:a7:e9:b0:79:25:c1:f7:25:61:
                    94:e0:f4:36:1e:92:35:71:94:eb:36:24:d9:4d:db:
                    ac:70:d7:a4:21:da:d7:0d:2d:f1:9b:d2:96:32:db:
                    a9:32:43:6c:8d:60:f5:4e:3e:38:98:69:b8:d2:95:
                    e7:77:20:df:b2:2c:26:cd:e4:04:a6:d3:e2:f1:07:
                    44:f9:78:b7:b6:06:63:c8:0b:d3:29:9a:2a:44:46:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9E:83:AE:F4:B0:DC:30:73:26:B5:3F:4C:0D:B2:EB:F3:E0:48:C1
            X509v3 Authority Key Identifier:
                keyid:2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a3a2f34372d3437203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff::/47

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:53:59:7c:2b:f5:7b:6c:8d:b2:e1:2b:c1:aa:01:80:2b:
         b5:09:26:ec:5c:ac:18:04:0c:99:6f:9f:79:69:9b:ad:ac:90:
         0b:ab:93:a1:ac:86:9e:83:d7:94:7d:6c:1f:a4:81:55:47:b0:
         eb:ee:3d:5a:51:23:d6:4e:9e:8f:c5:b1:e4:43:a7:22:29:ea:
         15:57:64:da:13:e7:fc:2d:ff:7f:82:3c:d3:f2:da:cb:be:15:
         d4:ec:cc:2a:db:4d:d8:2e:08:b2:e2:79:b1:63:7d:35:8d:34:
         af:b7:03:68:a3:50:71:38:6f:04:7b:2f:9a:e9:af:46:26:41:
         0f:b2:a1:39:7e:ed:a4:85:10:fa:a8:50:35:76:c7:31:41:85:
         e0:b9:72:dd:3d:3b:57:5b:73:24:a6:2b:3e:4e:77:de:12:9d:
         31:a6:26:c4:92:fe:f6:70:d8:fe:9c:4a:81:38:ed:a6:87:79:
         73:fa:af:dd:d5:0d:6e:ec:c6:9b:7b:88:05:c5:d1:f2:30:e6:
         e7:75:83:72:f8:1b:61:62:2c:49:26:0f:34:5c:07:2e:95:9a:
         4f:26:15:ef:2d:49:df:5f:5a:20:1f:9b:19:4a:dd:8b:d1:e0:
         38:2a:a4:37:56:53:02:a4:5d:b7:36:45:11:d3:74:cc:f0:27:
         36:2a:6c:a9
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUPZ+VqE5aG0wBIr7sqpc4H3JxLdswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDM1NWI0N2Q4N2YxM2YxYjY4MDAyYmI0
YjBmMTkxZWYwZTYyNzk4YWMwHhcNMjUwNDEwMDc1NjQ4WhcNMjYwNDA5MDgwMTQ4
WjAzMTEwLwYDVQQDEygzNTlFODNBRUY0QjBEQzMwNzMyNkI1M0Y0QzBEQjJFQkYz
RTA0OEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSHx2/ca9aWb
YRo4mka20wgJ1jT9GhE7EtU5FuM4Vc6EAqT5P0DJzhb0OuiRpPjUbzKxDJXjsaGO
0bqO1bWIEmjkOYHVDUimAlGr8F46xz6/zEtTzBb1TeuKKgIZlqrlONZl8TI/z/ev
jPafMXFUClUx9llIdqJjuo+MIGytJHd3liW6sQFjzwPE1G1JAYCKPLXjynOrBpn8
jSi8SglBRJpl5WmEROaWFS2n6bB5JcH3JWGU4PQ2HpI1cZTrNiTZTduscNekIdrX
DS3xm9KWMtupMkNsjWD1Tj44mGm40pXndyDfsiwmzeQEptPi8QdE+Xi3tgZjyAvT
KZoqREba4wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFDWeg670sNwwcya1P0wNsuvz
4EjBMB8GA1UdIwQYMBaAFC4IODu9+J4KTJrA3zPc0Buhm6sBMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzAyNmNlNGQzYTU0ZjRhMTFhZTVhYmE5ODMzNDEwNzAxLzAv
MkUwODM4M0JCREY4OUUwQTRDOUFDMERGMzNEQ0QwMUJBMTlCQUIwMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzZlODNmYmYyLWI2NGItNGM1NS1iYTI4LWNhODRhZDBhZjVhYi9mOWQ0
YmQ4M2VkMzU1YjQ3ZDg3ZjEzZjFiNjgwMDJiYjRiMGYxOTFlZjBlNjI3OThhYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8wMjZjZTRkM2E1NGY0YTExYWU1YWJh
OTgzMzQxMDcwMS8wLzMyMzYzMDMyM2E2NjM3NjY2NjNhM2EyZjM0MzcyZDM0Mzcy
MDNkM2UyMDMxMzMzODM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEmAvf/AAAwDQYJKoZIhvcNAQEL
BQADggEBAC2dU1l8K/V7bI2y4SvBqgGAK7UJJuxcrBgEDJlvn3lpm62skAurk6Gs
hp6D15R9bB+kgVVHsOvuPVpRI9ZOno/FseRDpyIp6hVXZNoT5/wt/3+CPNPy2su+
FdTszCrbTdguCLLiebFjfTWNNK+3A2ijUHE4bwR7L5rpr0YmQQ+yoTl+7aSFEPqo
UDV2xzFBheC5ct09O1dbcySmKz5Od94SnTGmJsSS/vZw2P6cSoE47aaHeXP6r93V
DW7sxpt7iAXF0fIw5ud1g3L4G2FiLEkmDzRcBy6Vmk8mFe8tSd9fWiAfmxlK3YvR
4DgqpDdWUwKkXbc2RRHTdMzwJzYqbKk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:11 2025 by rpki-client on console.sobornost.net