Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/062e4153-d023-3217-9156-2b5be0727031.roa
File:                     062e4153-d023-3217-9156-2b5be0727031.roa (raw, json)
Hash identifier:          p+yx7k0SurWCvkrrrbvkVEliduOVlwuV4w12iwiOErA=
Subject key identifier:   E5:94:FA:47:7E:05:EC:5C:E1:A8:43:CC:50:9F:3A:23:39:1F:3C:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BA563855924465E05FB06600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/062e4153-d023-3217-9156-2b5be0727031.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396596
IP address blocks:        2001:500:134::53/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:38:55:92:44:65:e0:5f:b0:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=2d8cd024-9a9d-4894-9b15-64f3e325b363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:4d:62:da:75:f2:95:27:ab:bc:fa:b3:2c:
                    e3:39:a4:39:d9:99:b0:b6:a7:e5:6e:23:b7:71:11:
                    8d:32:34:e7:2b:9b:e6:7a:7c:9a:e7:6d:68:c2:4c:
                    f1:3d:a4:90:a4:f3:b3:e0:8b:2d:d4:82:7b:11:e0:
                    ef:4b:ca:6e:d1:98:82:f2:37:51:8f:40:1e:cf:19:
                    2a:e3:29:a4:b6:8d:63:f2:79:41:78:2f:0f:a9:34:
                    42:24:70:17:f8:8b:8b:55:c4:39:12:6a:2f:53:0f:
                    6c:4a:13:6f:cd:f6:8b:74:71:cb:6f:e8:e8:7a:90:
                    5d:6e:c7:fb:b0:7b:bf:52:dc:84:20:5c:bb:16:df:
                    a7:5f:69:5b:60:19:bf:c0:b0:ca:89:11:c7:bc:59:
                    63:a1:0b:3c:aa:64:68:8c:e7:65:8d:c5:2c:32:d2:
                    d7:7a:81:0f:06:5a:78:1a:39:73:69:53:49:e0:b5:
                    f5:a8:6d:31:2c:95:70:4c:a0:a8:82:ab:50:aa:0e:
                    49:f9:89:80:7e:60:25:2e:e4:5a:b2:52:fb:98:e6:
                    92:aa:f0:ea:7b:51:85:d0:ec:03:06:1e:be:9b:f4:
                    64:c5:a9:da:a9:e6:64:1c:1e:d8:47:7b:d5:d9:16:
                    39:1e:53:c1:25:c8:1f:b6:5c:e0:6a:01:30:e4:d3:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:FA:47:7E:05:EC:5C:E1:A8:43:CC:50:9F:3A:23:39:1F:3C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/062e4153-d023-3217-9156-2b5be0727031.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:ff:98:cf:6f:a3:67:28:a9:71:68:69:d7:ad:c0:a0:08:
         53:de:37:fb:f4:8a:c4:5b:35:6d:1a:5f:33:8d:e3:59:3f:ff:
         0c:11:26:2d:1d:87:40:46:a9:19:42:38:32:18:d4:f5:38:68:
         17:99:86:2c:f8:5e:71:8d:38:fc:ae:0f:ec:66:2e:ba:8c:d8:
         cc:0c:dc:bc:63:dd:e5:ec:08:7f:ef:ed:7d:49:f3:8b:53:b7:
         37:62:0f:73:0e:db:cd:28:dd:d9:eb:b5:0d:4a:a8:5e:0f:cc:
         d5:fb:c5:bb:22:35:f3:7b:72:12:cc:f1:48:b5:81:73:5b:94:
         99:47:5e:e3:ab:f1:64:3b:55:f5:b2:37:c9:84:f1:43:63:77:
         24:6e:59:07:c5:1b:1c:f4:44:c6:cc:34:ef:c8:88:ba:8f:26:
         6f:78:be:b6:2b:cf:74:0d:50:63:12:4c:e6:12:a3:11:c0:4e:
         7a:43:07:4a:50:2f:18:9b:45:20:61:a8:e9:d5:e3:8d:8e:f4:
         dc:f9:d7:c2:63:fc:d5:7e:35:38:d8:d6:d5:e4:c9:b9:26:ec:
         16:5b:bd:05:49:1f:bc:1a:7b:ca:8e:45:7a:1f:66:b7:98:6e:
         e6:d1:ff:38:c1:1a:29:05:b8:96:0c:f4:3d:46:79:92:18:08:
         f7:23:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:31 2025 by rpki-client on console.sobornost.net