Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa
File:                     467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa (raw, json)
Hash identifier:          rl9UYQyAIJuFR5dfHPw7DH0dkEMe+Fma5DPADvN1WHI=
Subject key identifier:   15:AA:28:E9:A7:7C:D9:63:FE:60:51:CA:3C:DB:C9:93:C8:AD:AE:08
Certificate issuer:       /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Certificate serial:       010D0C9F432858496A19A55D145052DD19B56700
Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     26661
IP address blocks:        2620:12b:2000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a5:5d:14:50:52:dd:19:b5:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=4941a085-edd6-4d0c-b93d-f826b1b59bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:25:6b:8e:3f:4a:68:a5:64:90:3e:7c:20:
                    86:cd:c8:33:9a:a3:f1:21:a8:34:5a:6e:2b:79:b4:
                    96:e3:5e:9d:65:3e:18:a6:3e:16:09:5f:2e:4b:00:
                    70:71:9a:33:52:ac:13:57:ad:10:66:61:de:96:a1:
                    f0:77:43:74:be:6a:3f:08:ce:01:ce:56:2c:5d:92:
                    53:a2:07:2c:78:27:40:ee:f2:5c:47:f7:d1:84:aa:
                    fa:97:b9:55:c3:10:b3:8d:18:c3:0e:f2:a4:b2:18:
                    97:29:f8:83:18:75:ca:a7:dc:51:b8:48:0f:59:79:
                    1e:28:0b:61:3d:62:af:bf:a7:83:68:60:6d:ff:ab:
                    ca:52:a2:25:1a:83:2e:6d:10:3a:71:8e:f3:ce:9d:
                    c4:a3:07:9a:1d:dc:ce:8c:49:31:cc:d9:3c:46:7d:
                    b8:64:e1:30:8d:be:32:ba:2f:e8:e8:be:0c:8e:90:
                    cf:88:19:5e:cf:56:1a:af:df:b9:cf:fe:93:16:ee:
                    92:a5:75:e7:de:d3:94:a6:b1:80:a0:b2:9a:a4:98:
                    17:f3:15:6a:72:ce:cb:24:81:b4:50:b1:0d:2c:7c:
                    5d:93:44:be:4f:5b:55:df:96:dc:5b:15:ea:e2:0c:
                    b6:e4:42:d1:62:a5:72:a4:8f:26:fb:62:d1:b4:f6:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:28:E9:A7:7C:D9:63:FE:60:51:CA:3C:DB:C9:93:C8:AD:AE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl

            X509v3 Authority Key Identifier:
                keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12b:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:20:83:8c:83:ff:bf:38:51:37:69:92:97:60:cb:50:67:20:
         cb:8b:27:c5:fa:60:9a:f1:68:c3:0e:ce:3e:49:cc:e7:8f:1a:
         04:bd:1d:cc:7c:f1:4a:78:04:2e:4b:cf:a2:c1:25:38:05:17:
         90:e8:f0:f1:8c:fc:d4:d7:b7:49:bf:2b:c2:b1:7b:6d:f8:64:
         e9:79:ee:e9:51:0e:96:40:0f:3c:95:20:a6:a2:a5:50:f1:ca:
         10:e7:12:5b:0d:3c:7f:35:c3:19:29:74:1c:de:fc:a1:20:c0:
         21:bb:c2:39:69:6b:66:b0:ec:44:b6:c1:8f:23:b1:52:21:21:
         38:0b:96:fc:39:18:78:e9:f8:4d:59:86:17:1b:11:de:ef:0b:
         67:92:22:42:f9:22:ba:55:92:f1:0b:fe:d2:43:da:9f:8d:82:
         d3:07:6f:7e:aa:65:be:6d:6a:cd:b6:02:f6:b7:8b:61:9d:0b:
         f0:24:57:cd:a1:56:99:dd:11:6f:70:89:85:16:79:a5:f8:bd:
         3c:8c:73:74:7b:5b:b6:0f:bb:d0:f8:49:c8:15:ec:d2:fa:d4:
         a1:a8:88:b9:2a:0b:9c:28:5d:b8:96:3b:89:ce:c0:7f:72:7b:
         96:03:16:aa:d8:59:0c:03:93:71:45:2a:b7:cf:c5:46:6a:27:
         69:75:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:39 2025 by rpki-client on console.sobornost.net