Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45da96ea-1b7a-3099-b136-a6b5161437c2.roa
File:                     45da96ea-1b7a-3099-b136-a6b5161437c2.roa (raw, json)
Hash identifier:          fPJVy32pQmWCqjZt3Amr0alUNCG4m3YQuo7ABa9wVvA=
Subject key identifier:   7F:38:D8:79:6E:CE:D2:5F:E3:A8:0B:C3:21:B7:F3:5C:DB:32:12:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E21DD65F5450994F04A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45da96ea-1b7a-3099-b136-a6b5161437c2.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     32651
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e2:1d:d6:5f:54:50:99:4f:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=86e4c25c-81ea-42f6-b02b-af58f56d3350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:15:58:64:d7:70:c0:78:e3:32:65:7c:50:
                    5b:7a:5b:e6:96:6f:53:fa:4c:10:db:e2:56:d0:1b:
                    b7:6c:49:03:02:0b:f1:34:2b:11:1a:03:6e:7f:5e:
                    61:fc:e1:31:76:56:72:17:2f:1d:83:bc:79:24:f1:
                    1f:b5:96:d2:33:af:a9:83:3b:d6:37:0a:46:cf:00:
                    c2:30:d1:02:fb:e5:80:5e:17:d4:d2:63:0d:6e:00:
                    0a:34:d6:99:37:57:d7:9d:28:84:30:6f:e9:88:72:
                    1d:8c:d6:d8:9a:c3:ad:cf:2d:9f:ac:14:53:8f:8f:
                    68:9b:3f:01:e0:23:21:c4:f6:24:5f:24:0c:09:c3:
                    ae:ec:40:97:83:74:36:35:f2:b8:7c:2b:29:41:91:
                    17:72:0d:8a:f3:64:db:b0:5c:12:2b:3d:55:a9:9f:
                    ba:9a:16:bd:26:3b:2e:ac:d6:eb:df:7d:6a:cd:a8:
                    0f:7b:f5:4b:47:28:10:42:bd:39:60:80:44:56:b8:
                    9e:9a:81:81:b4:94:5c:e4:2f:ea:1d:9f:7d:29:5c:
                    ce:92:81:e0:df:f6:33:43:1c:c7:43:dc:ac:00:70:
                    cf:4a:e7:3f:16:9f:d8:4e:79:3c:29:a6:cf:c9:da:
                    05:73:03:b4:c1:93:bf:68:66:32:74:2a:5b:3b:d4:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:D8:79:6E:CE:D2:5F:E3:A8:0B:C3:21:B7:F3:5C:DB:32:12:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45da96ea-1b7a-3099-b136-a6b5161437c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:4b:a5:b6:d9:ca:89:a9:62:48:17:d8:19:a2:d9:2b:53:
         78:a7:9e:bb:98:63:a9:87:ac:28:db:be:b2:aa:3f:ea:5a:e8:
         92:bc:db:60:40:7b:14:39:ea:1e:5b:12:d4:6b:c7:52:3c:e1:
         59:ff:09:b9:69:13:30:33:83:a6:af:92:44:67:14:7e:6e:fd:
         9b:26:ea:fc:67:6d:91:48:cb:02:23:be:cb:15:cb:58:13:9d:
         25:f7:2c:af:2c:33:1f:4e:2e:98:37:68:b7:56:b4:f5:c7:74:
         f3:7a:d9:c7:7d:1b:42:94:53:d0:e1:9d:61:dc:e8:26:a0:d6:
         39:93:dc:70:22:ad:c8:bb:8d:93:bb:9b:4c:c6:d5:da:a0:68:
         c5:32:86:f2:98:35:d1:3d:29:d2:ec:db:81:cd:3a:52:f4:6d:
         74:17:af:78:b1:e6:1e:cf:5d:68:9a:91:54:09:e5:04:b2:56:
         b7:c0:6d:76:07:fa:f8:c2:fa:12:7c:a8:ab:a3:72:df:08:b9:
         1d:52:8b:27:93:c3:3a:53:6b:5b:1b:a7:cf:8c:44:c4:b9:1f:
         bc:ed:e1:b8:4b:6a:e4:6f:ee:b2:05:62:ac:19:13:d0:f8:ee:
         d6:a4:11:d8:ad:ee:fb:ea:76:d3:f6:ca:4a:39:fa:80:e4:9d:
         58:28:83:1c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmDOeId1l9UUJlPBKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
ODZlNGMyNWMtODFlYS00MmY2LWIwMmItYWY1OGY1NmQzMzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG4VWGTXcMB44zJlfFBbelvmlm9T+kwQ2+JW
0Bu3bEkDAgvxNCsRGgNuf15h/OExdlZyFy8dg7x5JPEftZbSM6+pgzvWNwpGzwDC
MNEC++WAXhfU0mMNbgAKNNaZN1fXnSiEMG/piHIdjNbYmsOtzy2frBRTj49omz8B
4CMhxPYkXyQMCcOu7ECXg3Q2NfK4fCspQZEXcg2K82TbsFwSKz1VqZ+6mha9Jjsu
rNbr331qzagPe/VLRygQQr05YIBEVriemoGBtJRc5C/qHZ99KVzOkoHg3/YzQxzH
Q9ysAHDPSuc/Fp/YTnk8KabPydoFcwO0wZO/aGYydCpbO9SyMwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFH842HluztJf46gLwyG381zbMhIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDVkYTk2ZWEtMWI3YS0z
MDk5LWIxMzYtYTZiNTE2MTQzN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB9pkulttnKialiSBfYGaLZK1N4p567mGOph6wo
276yqj/qWuiSvNtgQHsUOeoeWxLUa8dSPOFZ/wm5aRMwM4Omr5JEZxR+bv2bJur8
Z22RSMsCI77LFctYE50l9yyvLDMfTi6YN2i3VrT1x3TzetnHfRtClFPQ4Z1h3Ogm
oNY5k9xwIq3Iu42Tu5tMxtXaoGjFMobymDXRPSnS7NuBzTpS9G10F694seYez11o
mpFUCeUEsla3wG12B/r4wvoSfKiro3LfCLkdUosnk8M6U2tbG6fPjETEuR+87eG4
S2rkb+6yBWKsGRPQ+O7WpBHYre776nbT9spKOfqA5J1YKIMc
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:37 2025 by rpki-client on console.sobornost.net