Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
File:                     344c50bb-3dc4-3822-86f7-50e1888e6588.roa (raw, json)
Hash identifier:          E/kd0xiuO1WWjDbLWfISPAaReLYtJOABu2Ax+UF5/9I=
Subject key identifier:   53:1F:C1:C3:44:95:4B:94:2D:D4:92:B5:4A:72:5F:C2:07:3D:78:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C34343834CB8184082F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     40647
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c3:43:43:83:4c:b8:18:40:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=6889ce4b-3c34-4703-9465-28b56cd7402f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:88:a9:56:49:28:61:61:0f:c6:58:bf:ee:
                    c1:0e:b0:eb:52:c3:7f:89:93:37:71:a7:0b:5f:f2:
                    1a:90:7d:c4:5b:23:69:84:60:59:85:02:3e:f8:3b:
                    e0:85:ff:7c:48:d2:47:16:2a:00:df:fc:7e:03:fd:
                    f9:dd:b1:a2:ce:0e:ad:d0:7b:bd:38:d6:b5:ba:34:
                    12:55:03:e2:21:ed:b6:c5:ee:32:43:ad:c6:24:fc:
                    8f:0d:89:04:fb:25:40:11:d9:bb:4a:36:2d:7f:d0:
                    8a:d8:38:1d:73:4a:ff:ce:08:ea:80:07:29:6a:e7:
                    40:5c:d5:40:97:12:1e:fb:6a:04:7d:f6:46:0b:f7:
                    67:86:7b:a8:f6:04:2f:0a:d4:c8:a3:97:c1:19:d2:
                    e1:36:5d:69:57:a1:75:08:3b:14:82:e7:50:b4:e2:
                    9c:14:41:71:d6:d0:7a:b3:d2:9f:03:f1:96:95:ee:
                    fa:07:79:38:08:32:f2:44:e5:51:90:3f:28:90:76:
                    86:42:ea:8a:33:ea:97:b7:84:cf:b6:fd:28:0c:f0:
                    ca:b6:70:d5:67:38:88:f3:a3:61:fa:88:53:7d:4d:
                    61:e6:51:93:2c:81:69:d9:ae:f7:ff:80:b5:cd:64:
                    9c:0a:1c:5d:e0:fc:89:56:29:e6:2d:5c:35:0f:a7:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1F:C1:C3:44:95:4B:94:2D:D4:92:B5:4A:72:5F:C2:07:3D:78:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:c9:b4:81:21:79:65:94:c6:d8:d7:55:8a:54:1a:f4:a3:
         90:c6:8a:70:01:aa:ea:ee:f1:70:b5:fe:4f:49:d9:7c:21:bd:
         54:e5:d8:67:82:25:0e:f2:9a:d0:44:49:d5:70:96:47:c9:c6:
         db:50:9f:6c:2e:cf:32:57:5b:52:3e:59:00:53:66:e9:0c:5c:
         44:e6:d9:72:67:59:cd:0e:20:9f:c2:48:cd:80:a7:29:73:dd:
         4d:31:8a:46:a7:ef:fb:32:61:f0:e3:bf:fa:0c:98:19:ad:c0:
         4d:2c:a5:45:3f:87:30:d3:2d:d9:43:04:d9:df:fb:47:84:6f:
         d2:1c:4d:44:af:e6:77:bf:94:d9:c0:c2:a8:59:78:38:86:de:
         61:15:69:ae:45:b5:84:08:4a:a4:d2:5a:42:05:e2:b8:9b:1e:
         d5:49:2f:f1:3f:5a:db:a7:4b:0a:40:57:75:81:0e:35:1d:b4:
         ee:1e:af:0d:df:53:88:e1:c4:32:59:58:1d:79:d7:a0:6f:a2:
         81:f5:df:5a:ca:42:b7:2a:e0:a3:a0:92:51:1c:58:fc:db:94:
         ca:3a:bc:d8:df:b9:ee:a6:8d:b2:02:90:33:31:92:0a:85:fa:
         68:f9:f8:99:33:04:49:cf:af:82:db:60:f0:40:ae:ec:69:7e:
         0c:5a:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:35 2025 by rpki-client on console.sobornost.net