Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/497534f7-9d32-3206-82e5-25371b211b57.roa
File:                     497534f7-9d32-3206-82e5-25371b211b57.roa (raw, json)
Hash identifier:          vkHGgPCnd4SmurMEtgU014q4nuaK9AYBD+W87uSmvPs=
Subject key identifier:   71:86:C7:D0:85:AE:EB:97:03:51:CF:B8:09:5A:1D:F5:1D:74:97:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C5168FEE27B6DE54DEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/497534f7-9d32-3206-82e5-25371b211b57.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     36629
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c5:16:8f:ee:27:b6:de:54:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=c8a4149e-daa3-4245-bb5e-9c5c329f7446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:ae:c6:6f:39:93:b2:cc:90:bb:f4:b9:cc:
                    58:8b:ba:f1:5f:64:a8:95:a3:c8:c1:65:d7:3b:ac:
                    dc:7f:55:04:cb:75:b9:9e:fe:b6:ec:3c:17:16:02:
                    5d:10:a7:55:25:af:b4:18:27:ae:a3:3f:53:59:e1:
                    cf:cc:9e:81:b8:fb:09:02:f0:4f:22:99:63:25:e9:
                    ff:30:f8:75:1e:c4:b6:2e:03:e0:30:37:e9:82:77:
                    40:b2:49:60:48:72:c7:ed:f2:8c:a8:a2:b4:f2:62:
                    a2:4e:a8:99:f3:4a:8b:9e:e5:e7:5f:d6:7f:e0:c3:
                    98:d7:f9:31:ed:67:ab:24:2d:a6:c0:d9:d3:ec:af:
                    44:61:1a:86:56:62:fe:25:74:cc:5a:fe:45:1c:99:
                    23:8e:e8:d6:50:c1:32:20:c4:bf:22:e8:10:27:f7:
                    99:36:07:c8:24:66:09:ed:a7:98:c4:01:b9:99:b6:
                    92:f3:b1:32:13:26:b6:66:26:75:e2:85:38:de:22:
                    bb:d9:d2:b1:0e:0c:ac:62:15:91:53:c4:c0:8f:ea:
                    a8:5d:ae:8d:73:9a:c8:8f:12:75:9d:cc:45:15:8b:
                    64:92:a1:70:92:f0:a7:19:ee:1a:b8:4a:ba:dc:fe:
                    ee:c9:ca:f1:5c:c9:60:4d:74:21:16:28:8c:f4:85:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:C7:D0:85:AE:EB:97:03:51:CF:B8:09:5A:1D:F5:1D:74:97:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/497534f7-9d32-3206-82e5-25371b211b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:48:43:a8:bb:28:99:c7:84:ff:04:cc:8f:78:69:42:10:67:
         62:15:11:b6:89:fb:5a:36:7a:f2:de:24:13:ea:97:0e:f6:3c:
         f6:e1:83:4f:86:7d:be:bb:62:64:4f:d9:f6:45:8c:ac:68:37:
         45:0c:08:09:00:79:7c:f8:e1:39:e0:9e:95:aa:f0:b8:c1:3b:
         cf:d0:d7:ee:7a:4f:0c:3e:f0:ff:ca:61:22:c1:df:da:81:fd:
         b0:4a:ff:87:cc:70:71:47:03:2b:c1:c6:d1:ae:24:72:cd:b4:
         63:44:dc:c0:4a:0c:aa:85:02:d5:6d:27:84:9f:30:89:c6:86:
         17:27:ec:da:6f:21:6b:85:b8:99:5c:bd:3b:8b:7b:e5:d5:c2:
         9b:36:a6:dd:8a:1b:c9:45:df:cb:9f:31:d9:34:55:30:5c:93:
         2d:5a:b1:76:1f:fa:49:0a:42:9a:f8:8d:2b:8d:3d:c1:a9:08:
         b1:14:db:48:d6:37:e8:1d:5b:9c:4c:10:b8:3d:01:d5:fc:df:
         e0:64:98:7b:87:6c:84:ee:b2:ee:4e:3b:3b:ed:44:d0:26:fc:
         3a:02:7f:e7:bf:f9:c1:90:fa:20:00:da:c3:47:a9:9d:3b:a2:
         02:89:ed:47:c6:c9:ed:61:18:10:a5:4e:05:7c:d2:b8:e6:10:
         8d:ce:8e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:45 2025 by rpki-client on console.sobornost.net