Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa
File:                     3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa (raw, json)
Hash identifier:          F7f6zDMhK4v+l52SbiowqZzf5MRrBka0CWwiq3ptOKs=
Subject key identifier:   1E:26:47:CE:BD:D1:BB:74:22:54:66:82:B7:2A:46:C3:DF:F4:9E:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243F0F31A21235997260930
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     36632
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f0:f3:1a:21:23:59:97:26:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=43cca155-59d0-4f47-82d4-42e3d3645c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:ec:87:c7:14:f2:42:2a:ae:8b:87:14:2c:
                    45:1d:c8:84:53:9c:74:98:01:ff:5f:dd:35:b3:c2:
                    5e:4c:a7:4b:4d:82:52:56:2d:34:4e:26:c7:d0:1d:
                    9d:1e:c0:93:a6:20:94:3b:51:2f:ea:92:1c:18:d8:
                    bd:df:f9:8d:67:5e:7e:80:ab:86:17:90:77:3d:d6:
                    f9:25:b6:db:ac:cf:60:81:2a:30:08:2c:e3:cc:e7:
                    7c:71:34:2c:06:da:81:96:a5:e5:2a:09:c0:bc:5b:
                    c8:63:d7:6d:cc:ad:b2:c4:19:64:99:4b:0c:68:7a:
                    ee:e0:26:ec:98:d4:00:16:64:36:f0:95:42:15:b4:
                    8d:b7:f8:ef:89:9a:b1:77:de:93:d8:d2:d7:ea:5a:
                    c2:21:4b:f4:b6:a8:17:4f:0e:4d:e8:04:12:ba:84:
                    5c:ac:7f:29:6b:e5:e9:9a:3e:a6:f0:99:29:af:c9:
                    55:25:b0:8f:cf:0e:36:50:ee:05:d0:03:be:fa:df:
                    5e:9b:3d:9b:f9:a7:68:b7:fe:52:77:aa:4d:85:b8:
                    a3:a5:a6:be:15:44:18:e5:9c:33:58:0c:e6:8c:de:
                    86:1e:e1:d3:ca:a0:a0:53:11:c0:18:b6:18:17:94:
                    71:ac:c9:33:51:56:b1:1b:53:84:8e:dc:05:5b:54:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:47:CE:BD:D1:BB:74:22:54:66:82:B7:2A:46:C3:DF:F4:9E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:e4:0f:d1:fd:ce:27:c1:fb:3d:d0:bd:33:1b:fe:dc:4e:
         80:3b:e1:9c:83:74:ff:91:02:4d:45:a1:e7:51:27:d1:77:0e:
         ed:07:f8:fe:40:43:4f:65:99:db:f0:49:54:16:c5:9f:50:03:
         d3:54:b5:11:a2:e8:a3:c6:55:2e:9a:f0:c9:48:f6:3e:92:b5:
         50:01:63:d4:68:f0:69:05:67:b2:a0:53:48:53:11:b5:72:26:
         89:d9:ba:3d:aa:32:4f:ce:d2:ef:bf:68:d6:0e:8b:f8:4f:e0:
         f3:72:a6:74:c0:ce:9f:91:bc:f7:4f:20:41:37:36:f6:2a:1e:
         6a:92:bf:c0:a1:64:10:51:01:f1:03:12:86:c0:f5:ca:5e:cb:
         30:a6:5a:6e:81:39:39:1f:53:53:8b:1a:91:6c:ad:fb:28:db:
         0d:62:b2:03:23:94:14:6d:8f:db:24:9e:32:7e:fc:74:81:a7:
         a1:f3:7b:b1:30:88:a5:a4:a7:e1:69:1e:ad:ee:26:52:dd:af:
         07:0e:73:8d:fe:f0:de:1d:74:7f:d6:25:69:e2:ea:f2:2a:b5:
         50:4e:b6:97:f0:0b:6e:d7:85:a3:b2:1d:4e:bc:6b:24:d3:54:
         c7:f0:55:7f:d3:5e:3c:dd:6c:67:ae:53:e9:67:e9:1c:5f:a9:
         79:9d:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:36 2025 by rpki-client on console.sobornost.net