Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52e3902c-c1c7-3c92-8ab0-4df9c48e813b.roa
File:                     52e3902c-c1c7-3c92-8ab0-4df9c48e813b.roa (raw, json)
Hash identifier:          6vgLUnik1myb4bWI4Dz1RQu3jZvMEBPpvTLiVsiOUbQ=
Subject key identifier:   D8:6C:FE:EF:02:4E:DD:FE:CF:79:21:5A:07:91:90:5C:30:0E:A6:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E9FF8ADFF12593E8E2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52e3902c-c1c7-3c92-8ab0-4df9c48e813b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396561
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e9:ff:8a:df:f1:25:93:e8:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=471a98dd-d9ae-4595-a5a7-08a0f400f4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:9c:c7:92:47:d5:26:80:70:79:0b:92:fb:
                    6b:6a:34:ee:89:c1:c8:69:82:87:69:6b:4c:99:37:
                    0d:b7:56:26:39:f8:30:85:41:65:fe:30:5c:d7:ac:
                    27:78:70:30:95:3c:75:ff:b2:fc:9d:c2:ff:2f:c0:
                    2d:6b:66:51:be:d2:1d:d6:0c:96:81:61:d2:e7:a5:
                    04:b2:6c:86:58:67:2f:28:35:a3:9e:fd:20:2d:c5:
                    68:08:90:d6:f5:24:70:25:5a:42:9a:40:92:11:d7:
                    14:b6:73:80:98:8d:45:7b:01:d3:1c:9d:ec:2b:88:
                    3f:66:4b:a1:d4:f4:ee:54:c5:cb:9d:ca:3e:28:4b:
                    3d:2f:30:3c:f4:aa:6d:0f:95:b4:47:20:4c:12:13:
                    94:b8:40:4c:23:b6:b9:02:69:43:a5:16:7f:7a:2f:
                    ef:d9:2f:90:79:c3:13:f2:bf:ea:9c:21:28:59:ac:
                    dd:ce:63:f1:87:e3:0d:10:23:3e:35:c1:89:23:75:
                    6d:e7:45:cd:88:85:0e:53:bc:5d:97:6c:e5:58:da:
                    dd:cb:58:23:8b:84:26:04:80:47:42:cb:5b:14:cb:
                    28:61:be:4e:5f:d0:fe:28:0a:3b:ee:d2:ec:55:c1:
                    43:24:4c:08:19:3d:ef:09:9e:51:47:5f:09:ec:9e:
                    7a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6C:FE:EF:02:4E:DD:FE:CF:79:21:5A:07:91:90:5C:30:0E:A6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52e3902c-c1c7-3c92-8ab0-4df9c48e813b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:0d:1d:6c:06:85:ab:0d:4c:64:bd:7f:ad:58:6e:81:5d:
         d8:be:69:c5:1f:20:27:26:e2:ab:30:af:3b:9d:8e:ee:09:2c:
         73:0a:b1:65:c3:a7:dd:4e:90:40:a8:bf:b1:99:0d:8d:a1:85:
         2b:f9:cc:9c:3f:a0:e0:f4:57:f9:ff:4a:b8:60:69:ed:e5:19:
         8e:b7:e9:85:dd:60:41:59:be:be:25:40:3a:39:07:e6:ac:35:
         1d:01:39:c4:02:d8:50:1b:2c:85:5f:15:6c:fe:33:0f:8e:8d:
         cf:a7:25:ed:28:5f:ca:09:52:58:7c:ee:d5:61:7a:78:89:55:
         eb:ff:21:7e:d2:85:d7:07:3c:16:b9:5e:90:eb:1f:e2:ff:40:
         d4:28:4e:7b:ab:d8:e2:a4:3e:cf:b9:07:8e:51:a9:ac:4b:24:
         15:df:32:2c:15:cd:1c:d6:3f:e8:04:60:03:89:c7:4b:c4:5e:
         eb:15:d9:3a:91:56:3c:af:0f:64:63:a5:b4:c8:8e:7b:23:3e:
         fc:27:0d:d2:0b:71:5f:85:95:67:37:62:ce:66:12:93:b2:6c:
         ae:ae:83:bd:b4:11:50:5c:d1:8e:a1:93:ee:ab:d0:61:27:72:
         98:1a:ac:6e:76:53:c0:02:d4:1a:63:65:f4:0e:6b:91:a0:04:
         7a:e1:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:46 2025 by rpki-client on console.sobornost.net