Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/862d85df-0feb-3897-973e-652ac129203e.roa
File:                     862d85df-0feb-3897-973e-652ac129203e.roa (raw, json)
Hash identifier:          OrDp7QFoyDxnfrwzWTO4zuM5lUbA0Mmt8lSMHoZLajI=
Subject key identifier:   F9:81:FB:1C:91:97:7E:39:6A:35:53:A2:36:D5:47:EE:29:EB:C7:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C5BADB509178EBB9E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/862d85df-0feb-3897-973e-652ac129203e.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     396599
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c5:ba:db:50:91:78:eb:b9:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=8d6cd47f-dd45-4698-aaf2-79a2ced32fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:7e:72:db:ee:7f:64:4a:aa:d2:89:26:fc:
                    8e:c3:e3:f9:ec:4c:47:96:b4:eb:4c:3e:25:52:54:
                    eb:2d:31:53:0f:c2:1c:ab:42:a1:39:bf:c4:ea:d3:
                    47:f1:72:46:ab:73:7b:78:7c:f0:cb:fa:58:9c:15:
                    a7:d9:19:cb:ce:7b:21:0b:12:75:d0:06:2e:b6:69:
                    fa:49:45:3a:a2:ac:cd:b1:ac:79:44:e6:cd:0f:b2:
                    bc:a7:e1:f2:8f:e5:8e:42:06:a4:f3:bd:9e:8d:58:
                    33:4e:ae:d9:89:67:dd:a3:e5:3c:08:8f:d2:d5:70:
                    ab:6d:8d:52:8f:fa:e3:95:a4:eb:91:df:95:c3:8f:
                    ae:f0:f6:9a:9d:08:5f:cf:a7:c2:bc:ce:5f:d6:44:
                    1f:4a:14:ed:de:d9:41:d1:79:ca:09:d1:2b:8c:c7:
                    1b:e0:d9:56:12:d5:0e:e8:c4:db:29:5d:cf:da:71:
                    35:74:d0:67:38:76:50:9c:3b:d2:b7:19:52:15:15:
                    ac:08:e6:4c:4a:45:f8:cd:af:e1:b7:6b:52:a2:62:
                    d6:eb:fd:ae:11:31:04:b0:bb:f3:ce:d5:37:48:d9:
                    e6:6d:d6:3d:1c:2c:47:8a:6d:af:24:92:16:72:36:
                    dd:54:30:cf:86:d0:b7:55:08:2d:25:bd:e3:ba:c0:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:81:FB:1C:91:97:7E:39:6A:35:53:A2:36:D5:47:EE:29:EB:C7:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/862d85df-0feb-3897-973e-652ac129203e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:51:e3:8a:85:39:83:23:2e:3b:ef:c8:e8:1f:e4:74:17:
         b8:56:d3:fc:f4:43:72:0f:2d:4b:fb:1e:85:68:80:be:9b:15:
         a3:42:cf:39:92:37:23:57:5c:c7:c3:43:ab:33:9d:6b:51:15:
         b9:41:aa:05:dc:e7:0e:b6:cc:0c:2a:44:57:4d:4d:e6:4a:f2:
         e5:e4:70:a3:fc:23:54:33:0d:e3:0f:c6:39:93:f1:ce:37:53:
         fb:7d:5a:cb:79:a3:62:bf:11:54:7d:59:fa:4b:fd:b9:c3:4a:
         ec:81:aa:5b:50:a9:45:1d:03:89:89:c0:26:c4:2c:8a:a0:95:
         82:1d:44:48:9b:c6:8e:2f:98:02:49:52:97:e3:07:55:ed:e0:
         6b:e3:09:44:11:24:c6:eb:f9:e0:89:32:35:5b:17:75:c1:44:
         49:69:d4:b7:3a:fe:f9:42:fd:b0:53:37:b4:ee:99:ef:34:a3:
         11:83:e7:4e:fa:62:f6:dc:27:ed:4d:b1:d0:73:9b:63:a6:c4:
         65:07:81:db:3b:dc:b2:21:89:17:c9:97:37:b5:d6:a7:5a:c6:
         9d:54:0a:6e:a0:70:e3:72:c7:cb:ac:a4:8b:fc:ce:43:bb:70:
         45:da:61:2a:9d:d1:47:9b:ea:93:00:0e:60:7a:d3:31:fc:3c:
         06:75:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:51 2025 by rpki-client on console.sobornost.net