Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbc1229e-dfd5-3857-a477-22589fff3fbc.roa
File:                     bbc1229e-dfd5-3857-a477-22589fff3fbc.roa (raw, json)
Hash identifier:          /BwSS+DHy32w5swcA9BVJy37ns567tFE3ge4gSR8TEM=
Subject key identifier:   25:53:6E:A9:85:62:65:01:68:AE:05:A9:8A:57:A8:68:87:8D:63:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA651324FCDC0BD06040020
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbc1229e-dfd5-3857-a477-22589fff3fbc.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33667
IP address blocks:        2601:200::/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:51:32:4f:cd:c0:bd:06:04:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=73682fd2-9607-495d-9212-d1ba2b5ce74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:d2:c8:d2:29:59:4e:f4:0a:88:cc:58:df:
                    bf:50:d9:83:17:45:f0:ab:b1:7b:fc:47:4c:b4:cd:
                    a4:20:89:1d:21:bd:26:59:4a:99:d2:7a:a9:cd:98:
                    51:d6:ed:0d:5f:0b:4d:ba:9a:71:7d:16:9b:56:ed:
                    67:e0:44:fb:3c:ea:e6:61:80:97:02:fe:5a:b6:d8:
                    ef:20:43:f8:9c:3c:bc:09:50:9c:d3:26:d4:d7:47:
                    b2:fe:60:e6:b9:01:1e:a5:5d:06:22:b1:35:78:e4:
                    20:be:15:df:1f:d6:8f:dd:0b:56:59:84:60:dc:0e:
                    df:6e:2d:0b:d0:89:91:c8:db:0c:12:e9:41:91:b2:
                    11:8f:92:66:99:fa:e2:91:61:d7:61:64:f7:0f:f6:
                    b0:3d:3f:0b:81:bc:15:97:cc:ed:af:ae:3d:71:4c:
                    b7:64:9f:72:d0:91:51:54:fd:ff:d0:9c:73:b4:d5:
                    0e:54:0f:7b:8c:41:9c:4e:8d:6f:b2:a4:93:de:6a:
                    74:1e:46:b4:4d:65:6c:a4:4a:0e:fb:3a:5f:2d:f0:
                    dc:99:6d:37:e0:ef:68:0a:2d:ae:9e:b4:19:f6:bd:
                    06:85:c9:b1:8a:97:6d:f3:bb:17:02:78:d2:d1:d8:
                    b5:e7:23:43:0d:61:97:ac:83:12:ba:0d:8e:74:ee:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:6E:A9:85:62:65:01:68:AE:05:A9:8A:57:A8:68:87:8D:63:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbc1229e-dfd5-3857-a477-22589fff3fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:200::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:16:5d:64:3f:b3:2b:bd:00:9e:39:ce:85:8b:70:b1:66:
         b7:78:8d:9f:e5:be:f3:b7:ec:fc:a9:d4:06:58:a8:ca:6e:21:
         cb:b5:47:e9:1c:a8:04:c4:bb:98:67:bf:98:53:e6:fd:b4:06:
         e0:27:c6:bc:cf:2d:50:20:66:4b:d3:a7:00:e9:29:5d:0c:44:
         8f:5d:e0:d5:14:f2:3d:cb:d7:23:a4:5d:86:ad:58:57:81:10:
         f4:41:2d:7a:19:f5:89:da:2e:32:1c:6c:ce:de:2d:df:c8:5b:
         ff:07:4f:fb:33:6e:ff:e0:74:5d:13:47:a7:a5:45:dd:0d:a9:
         b3:eb:4f:a8:0c:a4:8e:3d:c7:55:42:1a:f3:77:cb:f7:47:99:
         8d:79:2b:61:76:5c:6b:af:93:7b:cc:dd:2b:98:bd:15:ed:6f:
         a5:12:9e:0f:91:14:3d:78:cb:b2:8b:59:bd:aa:85:44:5e:68:
         0e:c1:60:86:bf:1b:2f:aa:0d:62:3d:28:d1:05:35:34:30:b1:
         b2:4b:90:41:a9:40:6a:12:a0:65:cc:ea:3e:1c:f5:ef:6c:27:
         d6:10:6b:eb:2d:e8:98:4e:5e:ae:8c:b0:b0:16:30:e3:b1:f2:
         15:4e:bd:b9:a3:97:d4:75:c8:44:e9:c7:66:3d:fa:fc:0f:c7:
         61:63:17:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:07:31 2025 by rpki-client on console.sobornost.net