Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61bdc7b1-b4c4-3642-8ca5-b79780bb3400.roa
File:                     61bdc7b1-b4c4-3642-8ca5-b79780bb3400.roa (raw, json)
Hash identifier:          kMKZ9oXU0L7g1gXD/W7CiL+RPZArUyy22FjiqzNNmQw=
Subject key identifier:   6A:85:0D:E3:A3:72:70:CC:BA:74:6F:1C:3D:5E:21:27:3C:0F:9F:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB1499B3B055505F9544B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61bdc7b1-b4c4-3642-8ca5-b79780bb3400.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     36630
IP address blocks:        2620:0:5050::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:49:9b:3b:05:55:05:f9:54:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=1645d8ef-09a0-4b72-9cbd-7284adde3af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:ac:30:5b:cc:52:12:7b:fa:4b:52:0d:d3:
                    d9:30:b2:9f:4c:5e:06:a3:b8:23:aa:00:0b:af:0b:
                    cd:75:f4:d4:7b:39:b3:dc:62:72:04:9e:14:24:27:
                    95:17:e7:a2:1b:85:cc:cf:43:b6:41:8f:42:1f:04:
                    b0:e5:69:45:89:0a:cf:f8:f4:cf:f3:6e:c7:5c:71:
                    95:09:e7:b7:0e:cf:b0:d9:19:23:d7:7e:5c:63:f6:
                    72:ce:57:f5:d0:ae:df:a0:30:7d:6c:ed:82:3b:0b:
                    08:24:be:16:42:e1:bd:dd:36:26:d1:3b:13:15:d2:
                    cf:84:36:4d:8e:6a:2b:6f:ca:e1:d3:e5:af:de:33:
                    a5:37:90:87:ec:85:70:62:4a:a1:7d:eb:12:f9:5e:
                    b4:84:ca:38:76:08:fb:68:18:e6:a4:28:58:8f:22:
                    f7:33:99:57:8b:c6:39:21:a5:fd:fd:84:c0:9c:75:
                    59:e2:c3:cf:1d:11:73:52:9b:ba:bf:59:12:6a:f4:
                    c5:3f:0f:a9:ad:eb:84:ea:cd:17:20:31:1b:1a:6c:
                    c7:29:91:04:74:bd:9c:50:54:55:e4:dc:19:c7:df:
                    12:ac:76:f7:92:c3:65:94:a8:a8:f9:72:43:cb:33:
                    73:78:6e:27:ce:1a:a0:68:89:54:91:c8:80:9e:4a:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:0D:E3:A3:72:70:CC:BA:74:6F:1C:3D:5E:21:27:3C:0F:9F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61bdc7b1-b4c4-3642-8ca5-b79780bb3400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:50:87:1a:f1:45:34:db:f0:28:d0:76:77:e1:be:b7:bc:
         b9:d0:cc:11:13:21:ed:68:7e:23:56:28:cf:5a:6e:8d:7f:ba:
         98:29:21:1c:36:10:70:40:ef:32:e8:7c:94:0c:53:a1:2b:a0:
         e9:32:56:d8:80:c9:5c:b0:de:b7:72:7a:8f:b4:b3:1d:68:88:
         3b:58:9a:21:ad:80:56:c9:04:01:aa:76:06:8c:87:61:1c:e7:
         2a:d2:47:fa:35:70:ed:70:c2:2a:ee:69:5a:fc:c3:c6:17:dc:
         f1:19:dd:4b:a6:f4:d1:2f:fe:84:4e:bf:f0:d0:66:97:e0:85:
         35:c2:57:26:9e:90:4d:fe:76:7b:6f:b6:8a:9a:11:e8:80:a2:
         b4:59:26:e0:6a:38:93:d1:99:34:88:b8:d8:d6:2e:c8:99:dc:
         04:c9:69:aa:f0:80:a2:50:dd:f5:64:ce:ce:06:ed:a8:65:f0:
         8b:54:78:dc:af:b2:63:ee:41:8a:62:60:e2:32:77:28:7f:ab:
         a0:95:7d:3b:bf:af:cf:bc:ba:ab:2a:00:db:fb:73:67:18:35:
         c8:6e:4a:a4:23:7d:85:d4:be:c0:67:26:3a:74:5f:3c:4f:1b:
         e4:e6:fe:d1:11:d0:76:3b:84:ba:3b:bc:27:0a:35:b9:5e:44:
         42:50:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:47 2025 by rpki-client on console.sobornost.net