Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa
File:                     be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa (raw, json)
Hash identifier:          ytpgyY3n2HvjBMN/UQ1RaBFC4OZHIOEnxFUq8stfdvc=
Subject key identifier:   94:C7:B8:78:02:34:0C:74:A6:56:77:8A:4F:31:BC:0B:76:D2:0F:59
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D10D07A81E3876D3A0E880
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     396961
IP address blocks:        2001:468:2806::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0d:07:a8:1e:38:76:d3:a0:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=41e1e283-0641-4589-bf5c-e798e5077776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:41:ba:e1:62:5a:d4:b8:30:20:45:50:49:
                    50:c2:f6:84:f5:50:94:39:04:18:9c:f4:63:f5:b3:
                    89:7b:d5:22:28:e9:33:39:d7:d7:d4:58:6a:47:58:
                    fb:c6:19:60:be:d3:4b:db:00:50:3c:32:a1:bc:f9:
                    fc:2e:be:d3:25:ea:7a:76:f3:86:05:cb:04:70:66:
                    15:74:4c:00:d6:cd:fd:50:4f:42:9c:52:cd:7f:34:
                    f2:5f:df:1f:45:4c:0c:3b:68:41:58:df:2c:84:45:
                    9f:68:02:b3:09:d5:50:cb:e8:cb:81:a0:49:b2:9c:
                    a0:ab:dc:6b:75:eb:f6:09:a7:9d:b1:da:9d:0a:3e:
                    0d:e7:43:df:88:18:17:1f:60:a2:fa:c5:a6:51:82:
                    89:09:ac:22:b8:ac:75:c2:1d:9e:f7:e5:bc:8b:7f:
                    41:f5:a9:f3:24:b5:6d:52:e1:78:29:7a:e2:9d:9e:
                    ae:7d:a8:20:2b:bb:48:e1:26:58:db:ae:03:43:47:
                    2d:64:fc:85:80:a2:4f:09:13:34:7f:9f:d7:b1:da:
                    90:52:c4:dd:e6:d9:f3:7a:f5:1c:67:1e:52:33:6b:
                    4e:5f:6b:88:bc:ab:59:6f:4f:db:fc:cc:5e:13:fd:
                    8b:65:ee:16:db:44:3c:ea:48:80:9d:41:16:61:2f:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:B8:78:02:34:0C:74:A6:56:77:8A:4F:31:BC:0B:76:D2:0F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/be11d5dc-60b6-3803-97f3-cb6c0a516f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2806::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:82:49:04:a6:40:7e:00:41:68:b9:3e:4e:4a:4d:25:6c:
         a2:b4:c0:59:88:b4:9b:62:45:dd:bc:86:85:e4:ae:08:fb:d8:
         fc:84:60:6c:5e:f6:41:c2:ee:1b:69:85:97:c9:b0:7a:a2:d5:
         42:dd:b7:c2:92:04:7c:48:5b:d4:cd:51:5e:4e:05:5f:ff:63:
         04:be:3d:34:d9:10:c6:1e:73:1d:3b:9e:9d:20:46:67:8e:e1:
         34:4b:47:b0:42:15:07:9a:ac:b8:5b:0c:45:12:36:ad:50:64:
         b7:50:20:ed:cd:fa:73:50:26:28:53:ed:49:f4:8a:3a:ed:d4:
         16:9d:8d:29:ea:49:fa:f5:90:d6:92:30:b2:64:f3:51:6e:f9:
         fa:b0:22:6c:7a:85:7d:6b:60:af:5e:54:e2:88:0d:10:52:7a:
         0f:cb:e6:03:f9:3f:a7:8a:2b:f2:22:f3:df:49:83:40:66:b0:
         d8:00:e8:71:2c:24:bf:75:74:55:db:02:0e:8c:49:af:ed:82:
         cc:6b:e7:9d:ba:ca:e0:43:58:eb:31:87:53:d2:d3:ce:aa:2b:
         d3:28:1e:9e:6d:c3:67:99:35:b6:f5:4e:ac:d5:39:66:6a:7a:
         25:da:65:9a:b7:89:65:5a:d6:c4:ac:8a:62:47:0c:bb:58:bb:
         43:f8:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:54 2025 by rpki-client on console.sobornost.net