Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
File:                     5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa (raw, json)
Hash identifier:          4ph6oAoHsau2qm6lZuZIt8p6+XBr4ttxIuQV4OkpfVQ=
Subject key identifier:   1D:EB:C9:F1:03:33:E7:02:91:9A:08:24:A0:26:80:76:5B:FA:04:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE47E2E89F768C25D48FC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     396543
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:7e:2e:89:f7:68:c2:5d:48:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=81adf50d-aaa1-4292-b660-470e0f0a4cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:1d:f6:e1:fe:5b:a1:1c:4c:69:7c:09:43:
                    a7:98:cd:15:a3:b9:ef:33:c3:98:5b:8f:d0:dc:92:
                    d9:bd:f0:e3:c3:71:e4:62:d8:c3:16:c8:a8:bf:4a:
                    aa:bd:92:f7:c2:d3:47:2b:19:d1:ef:08:fd:48:3e:
                    d8:0a:de:8d:a4:18:29:96:8e:f0:50:00:e5:a8:d4:
                    50:0e:02:3a:b8:00:f5:81:54:cc:82:ec:fc:30:c0:
                    09:3a:fa:65:e8:1d:7d:a3:df:6f:31:d3:bf:50:db:
                    2f:88:37:cd:2b:37:74:3d:93:58:6e:21:7d:cc:b1:
                    43:db:44:d3:8e:2c:cd:87:60:29:c6:04:ba:27:09:
                    9c:de:2a:70:26:3c:6f:c2:ec:da:e2:7e:c7:2e:ed:
                    c8:cf:9d:97:a5:d5:c7:b3:21:2f:61:69:11:58:ca:
                    19:93:df:a2:79:86:dd:78:75:67:10:9d:02:23:21:
                    94:0e:91:4c:37:9b:3a:b2:6c:54:65:0c:ea:64:ed:
                    e5:05:02:68:14:c4:e9:5a:f2:22:c5:bc:77:15:04:
                    09:1c:ce:4b:13:6b:c9:86:6f:1a:fd:fb:77:bf:27:
                    17:b1:f6:fc:d7:39:5a:d7:1c:84:c2:3b:c0:05:75:
                    f3:a1:b8:9a:8c:69:5d:6c:4b:c5:70:69:77:df:fa:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:C9:F1:03:33:E7:02:91:9A:08:24:A0:26:80:76:5B:FA:04:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a89986a-8b40-37a5-9b6b-bf931dff8dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:06:56:e9:01:72:f2:ba:b8:c8:83:98:b8:3a:32:f8:87:97:
         58:f0:2e:31:96:4c:58:b8:4d:40:a9:02:95:0b:f2:0b:71:8c:
         2b:30:95:d8:9c:88:5b:21:32:93:07:45:66:28:2a:fc:5c:d4:
         61:e8:f2:cc:a4:ff:64:fc:19:4e:37:59:e4:d8:49:12:9a:c6:
         22:4b:77:3a:e9:d4:0b:74:b2:12:10:52:14:ec:30:ce:3d:fa:
         21:41:4b:1f:79:31:42:36:d7:f8:4d:be:2b:3c:59:3b:06:4e:
         45:10:0e:5f:98:02:3f:14:79:fb:d6:2e:f7:69:86:11:2e:7e:
         bf:2c:b2:a9:77:07:0f:a2:23:ea:15:77:97:d2:66:04:e9:85:
         d6:7a:d3:83:73:f8:5e:46:4b:75:28:7a:65:21:e5:4a:8a:0e:
         9c:67:cc:94:db:72:c6:f9:2f:95:d4:6f:b5:44:77:3e:c0:f1:
         9b:52:39:e1:3c:e9:c7:04:ba:19:ad:c9:c8:55:8d:cc:4e:9b:
         7c:51:39:23:7e:b2:12:fa:8f:e7:22:e6:f9:a1:b9:e7:88:59:
         80:21:d5:1f:98:6b:f9:7c:43:6e:f2:f7:3a:be:08:6c:22:b9:
         24:ba:8e:a8:5a:28:04:96:38:67:59:b4:9e:cb:93:3b:d4:86:
         6a:b0:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:47 2025 by rpki-client on console.sobornost.net