Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa
File:                     9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa (raw, json)
Hash identifier:          YuNrCIgdsZykNsrnZgSbjzMXimK9YWio2SME7jnbQn4=
Subject key identifier:   58:15:AB:7D:64:8E:A2:EC:AF:74:F7:12:B1:F9:06:8D:A8:7B:7B:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C57334C110DD9CBBFC54B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa
Signing time:             Tue 04 Feb 2025 13:33:15 +0000
ROA not before:           Tue 04 Feb 2025 13:33:15 +0000
ROA not after:            Mon 05 May 2025 12:33:15 +0000
asID:                     396584
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:34:c1:10:dd:9c:bb:fc:54:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:15 2025 GMT
            Not After : May  5 12:33:15 2025 GMT
        Subject: CN=e5996f44-ae70-4c9a-bc25-879cf9fa22eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:cb:68:5b:86:80:e7:89:0d:7f:62:e5:1b:
                    fc:88:2f:30:2c:93:8e:74:59:8b:f2:f0:04:8e:96:
                    e6:40:72:a5:72:1e:d2:71:c6:a7:2d:97:27:f0:e0:
                    8e:ee:0a:e5:52:85:05:c8:26:f0:28:5a:39:6b:a5:
                    ed:36:ee:0a:86:87:aa:5a:0e:43:ca:17:8a:56:30:
                    1c:87:11:d8:3d:3c:d1:44:25:45:c1:fd:5c:85:b8:
                    b2:d8:f6:9e:d3:19:74:0d:a8:a5:97:16:2b:95:56:
                    57:4e:c7:56:4b:30:26:4b:7a:8c:ce:f5:1e:db:3f:
                    7b:4f:19:ed:a3:98:b9:43:c7:82:20:88:a3:31:54:
                    b8:54:d5:2c:1e:03:91:c3:b8:8b:f7:10:aa:8a:93:
                    6c:f7:7d:c3:b4:98:6d:b8:21:77:24:fb:04:d2:01:
                    18:65:af:27:4d:be:4e:a4:14:11:6a:2b:b3:09:ff:
                    54:54:03:7e:34:27:23:58:0f:17:0f:44:ce:ed:0f:
                    13:b3:6a:00:2b:c1:da:90:61:aa:60:ac:9f:1e:bb:
                    b5:04:1a:c8:1c:8f:05:ea:c4:46:dc:29:06:10:d1:
                    7b:8d:db:e7:94:fa:4e:95:7e:08:18:2b:0e:61:13:
                    5f:f4:31:aa:87:30:eb:be:79:3e:71:fc:18:f3:74:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:AB:7D:64:8E:A2:EC:AF:74:F7:12:B1:F9:06:8D:A8:7B:7B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d6523f2-fbe1-3875-bab0-0b1bb769acdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:46:ab:20:54:2e:22:39:65:c0:69:0b:bd:3f:a0:12:52:
         b2:d2:8a:d5:4a:1c:d6:13:97:c9:87:7e:a3:a4:3b:27:20:45:
         4f:65:2d:6d:0c:af:bd:b6:52:38:d1:67:b3:a3:d2:f4:89:83:
         fb:86:81:80:08:54:2f:59:23:f1:aa:73:91:13:01:ad:fe:06:
         4b:35:15:1e:ee:57:39:c4:42:3d:13:2d:65:34:74:db:36:9a:
         cb:8d:db:1d:28:61:29:0c:00:9e:e6:60:71:3b:e2:22:28:89:
         dc:a9:1e:1d:88:00:90:1b:c2:ab:43:70:29:ca:ce:ad:e5:35:
         da:4e:1b:a8:0c:8c:1e:55:cb:bf:cb:cb:9a:a3:ea:11:79:61:
         5d:0b:4a:01:27:2d:32:53:a0:08:35:6a:ef:36:61:42:27:5c:
         b4:2a:14:ee:6d:e8:02:60:13:12:7e:b3:28:95:ea:05:52:84:
         7a:e3:7c:6f:ca:be:22:01:a5:80:a6:fa:fe:33:6a:37:c8:f7:
         0b:d5:1c:91:e6:5e:c9:91:34:9f:26:23:f2:eb:0b:3e:83:79:
         2a:34:a0:5b:6b:34:c8:7d:be:d4:d2:f1:ce:e8:d0:89:08:4b:
         d1:2d:3e:19:f2:8b:8f:89:e7:e2:2c:6c:cd:4e:74:9f:02:01:
         57:a6:ee:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:53 2025 by rpki-client on console.sobornost.net