Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98de9c5b-760d-32d8-8f9e-42665fcc2a38.roa
File:                     98de9c5b-760d-32d8-8f9e-42665fcc2a38.roa (raw, json)
Hash identifier:          zd9fgFZbhi57oufR+e5oNs1K7vfvEGqWz6VGy472u/Y=
Subject key identifier:   4A:01:DA:83:62:F8:A2:9F:17:CB:93:9C:EF:9C:28:64:F0:73:D3:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE47F3AD9F1304CFD99C400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98de9c5b-760d-32d8-8f9e-42665fcc2a38.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     396590
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:7f:3a:d9:f1:30:4c:fd:99:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=55d948b1-ecd7-4dd6-b0ca-a0779a468ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:73:63:ed:62:99:16:bd:5b:8f:79:04:1a:
                    ba:b0:85:ce:17:fa:5d:0f:3b:61:15:c4:5b:85:56:
                    cf:a9:35:12:5a:17:1a:10:84:47:7b:91:f3:9e:ab:
                    b2:f6:3e:05:6e:3e:05:e8:3f:ba:3a:a1:28:b1:29:
                    90:8a:59:e3:e4:66:68:cf:f8:67:20:4f:a4:00:63:
                    56:00:cc:35:84:20:ff:85:67:52:9d:a3:a1:55:b2:
                    dc:ce:76:21:6b:b1:d4:db:b6:81:09:80:d4:5b:51:
                    10:54:86:57:96:44:87:fc:b1:fc:78:04:83:ed:cd:
                    bd:c1:03:f5:71:b2:85:63:dd:31:42:6a:d9:14:ee:
                    46:94:65:a8:00:c9:68:f5:5e:8a:26:71:bb:42:19:
                    eb:80:82:54:d2:7d:a1:a9:5d:95:5d:89:9f:4a:32:
                    7e:27:40:1f:6b:e6:83:96:a7:fa:7b:18:e3:fe:af:
                    58:eb:fc:0c:a2:69:26:bb:9d:00:ae:b4:6a:0c:e5:
                    3f:80:eb:14:ac:ae:db:aa:64:32:3d:80:12:f4:76:
                    58:2a:3f:8a:43:2b:e8:7b:34:18:fa:c7:4a:e1:0c:
                    8f:91:bd:19:ce:34:7f:76:0c:1d:57:ea:8d:fb:71:
                    ba:f6:a4:c3:d4:8e:06:2e:56:4f:50:eb:6e:6d:de:
                    3f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:01:DA:83:62:F8:A2:9F:17:CB:93:9C:EF:9C:28:64:F0:73:D3:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98de9c5b-760d-32d8-8f9e-42665fcc2a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f1:7e:a6:d8:95:56:c5:c8:b9:93:9a:05:d4:5b:8c:a9:d9:
         c7:31:72:8c:e5:6d:ac:18:85:5b:27:03:5b:ef:5c:f2:1b:59:
         73:f7:01:31:8a:56:b9:cf:3f:ff:f3:21:00:48:00:ed:cf:0f:
         2f:24:77:4c:df:d4:83:34:19:36:05:6d:bd:2e:66:4d:51:c8:
         95:a8:74:f1:0c:0a:6d:a0:4f:12:19:bc:77:cb:82:1a:88:f0:
         90:d1:35:26:2d:b9:c2:43:23:69:70:52:e6:2a:98:ca:c7:d5:
         d7:44:7d:82:63:aa:2f:75:5e:b2:4a:1e:d2:34:8c:b1:c2:17:
         10:e0:14:36:b1:51:fd:03:09:76:aa:ff:68:4d:c8:7e:9f:ce:
         43:86:f9:a6:ff:55:e8:e9:20:82:cc:e7:94:b3:52:4f:b7:94:
         2f:33:21:98:ce:27:15:d2:1c:d6:f7:2f:d6:dd:ae:1c:57:c3:
         1b:57:7f:51:f1:67:38:68:36:b9:22:a0:4c:28:3c:04:46:2c:
         78:84:20:91:13:e4:6a:6e:f2:8e:35:9d:3f:8c:ef:33:c8:41:
         7e:44:98:be:88:32:d3:05:a3:35:b9:48:cf:5d:ab:96:2d:8c:
         5b:b4:23:86:e2:06:82:b9:6d:af:2d:43:e6:74:ea:07:fa:db:
         ad:56:bb:3f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5H862fEwTP2ZxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
NTVkOTQ4YjEtZWNkNy00ZGQ2LWIwY2EtYTA3NzlhNDY4ZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PNzY+1imRa9W495BBq6sIXOF/pdDzthFcRb
hVbPqTUSWhcaEIRHe5Hznquy9j4Fbj4F6D+6OqEosSmQilnj5GZoz/hnIE+kAGNW
AMw1hCD/hWdSnaOhVbLcznYha7HU27aBCYDUW1EQVIZXlkSH/LH8eASD7c29wQP1
cbKFY90xQmrZFO5GlGWoAMlo9V6KJnG7QhnrgIJU0n2hqV2VXYmfSjJ+J0Afa+aD
lqf6exjj/q9Y6/wMomkmu50ArrRqDOU/gOsUrK7bqmQyPYAS9HZYKj+KQyvoezQY
+sdK4QyPkb0ZzjR/dgwdV+qN+3G69qTD1I4GLlZPUOtubd4/eQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEoB2oNi+KKfF8uTnO+cKGTwc9MJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOThkZTljNWItNzYwZC0z
MmQ4LThmOWUtNDI2NjVmY2MyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCH8X6m2JVWxci5k5oF1FuMqdnHMXKM5W2sGIVb
JwNb71zyG1lz9wExila5zz//8yEASADtzw8vJHdM39SDNBk2BW29LmZNUciVqHTx
DAptoE8SGbx3y4IaiPCQ0TUmLbnCQyNpcFLmKpjKx9XXRH2CY6ovdV6ySh7SNIyx
whcQ4BQ2sVH9Awl2qv9oTch+n85Dhvmm/1Xo6SCCzOeUs1JPt5QvMyGYzicV0hzW
9y/W3a4cV8MbV39R8Wc4aDa5IqBMKDwERix4hCCRE+RqbvKONZ0/jO8zyEF+RJi+
iDLTBaM1uUjPXauWLYxbtCOG4gaCuW2vLUPmdOoH+tutVrs/
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:52 2025 by rpki-client on console.sobornost.net