Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa
File:                     7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa (raw, json)
Hash identifier:          8RTm9GWxY2HOGf8VDSQ+MTnXoaOO7fWMcRx6efwOf+8=
Subject key identifier:   AD:15:A1:B7:1B:4D:24:75:E4:B1:92:43:B1:1D:A8:6F:C1:F6:46:23
Certificate issuer:       /CN=41fd7014-304a-4567-8e40-00c686067021
Certificate serial:       010D0C9F432858497F09A3C4ABE5180C8D694AF0
Authority key identifier: BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     31788
IP address blocks:        2602:f844::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a3:c4:ab:e5:18:0c:8d:69:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fd7014-304a-4567-8e40-00c686067021
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=abebdbed-f358-4b86-92e1-055b4c65ceed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:3f:9d:8e:1f:02:5e:e4:df:aa:05:2c:5a:
                    8b:8a:05:6e:c6:89:71:8a:fb:69:ee:50:ef:97:b1:
                    57:a9:ad:b8:06:1d:cd:2c:b9:54:32:19:50:8b:60:
                    2a:ad:ad:20:9c:a2:03:5c:46:b5:45:2c:8e:ae:4d:
                    a2:7e:67:59:1d:64:77:08:29:8f:5a:06:75:44:93:
                    b8:77:6c:70:8a:d3:9d:28:40:cf:c4:85:6a:a7:8f:
                    63:66:05:8f:22:6d:a0:15:37:0d:df:57:67:5d:26:
                    d1:05:5e:c6:44:d4:a1:5b:e4:97:40:6c:6b:45:8b:
                    60:e7:e0:77:65:8c:16:df:37:a8:79:dc:ad:64:67:
                    76:29:11:39:bc:df:25:43:c0:f2:84:f3:84:ee:5d:
                    12:d1:9a:ab:af:82:27:07:20:eb:cf:a9:c1:15:74:
                    1b:c1:9c:f1:6b:ab:7c:2a:b8:a2:39:46:8b:af:92:
                    97:ac:b1:c4:3c:d0:86:c7:75:7d:f8:f5:25:45:17:
                    95:ec:d4:1a:5c:a1:ba:f9:d6:52:38:eb:9c:a6:6a:
                    a5:fc:e3:82:db:09:c4:fb:2b:d8:b1:67:98:87:ed:
                    c0:88:f2:7d:ac:03:ec:fe:c9:a3:14:84:41:e7:2e:
                    57:7b:94:66:53:6f:50:98:01:0a:b6:de:41:65:d1:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:A1:B7:1B:4D:24:75:E4:B1:92:43:B1:1D:A8:6F:C1:F6:46:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/7ac02b00-e2d5-3e8c-b263-d5304f7716d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021/41fd7014-304a-4567-8e40-00c686067021.crl

            X509v3 Authority Key Identifier:
                keyid:BF:02:DB:00:C4:CC:5B:8C:84:38:99:A1:A1:3C:21:B4:11:26:EC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/41fd7014-304a-4567-8e40-00c686067021.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f844::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:e0:7d:c9:72:10:92:87:04:05:eb:92:95:2d:82:73:96:
         3b:f3:7d:07:23:98:97:ad:70:d5:ec:80:e4:92:07:5e:3d:fd:
         5b:33:ed:43:24:59:db:28:0a:61:07:84:35:32:56:8f:e2:ad:
         d0:29:6c:bf:b1:e7:10:82:81:b3:c7:c3:7f:2b:77:ba:85:a0:
         a9:38:2b:49:0c:3d:79:5d:2b:4d:93:41:ac:f8:f8:c8:6a:01:
         07:da:c6:a7:56:28:a7:4f:4f:ad:d3:48:e3:b4:2d:24:a2:58:
         e4:fc:26:75:03:07:8b:71:46:1f:d2:e5:3f:20:04:b5:5c:0a:
         c4:f6:a0:44:e7:6d:c7:b0:18:a7:fb:a8:15:9c:dc:8b:dc:3f:
         58:93:00:8a:02:87:8e:58:84:1d:8d:61:25:c7:13:96:a1:f0:
         46:9d:4e:6a:a1:95:16:20:4d:d6:5d:26:28:67:39:f1:dc:cc:
         ec:ba:86:cc:d9:3f:93:2d:7e:2f:60:fc:58:0b:3c:39:29:60:
         6c:76:30:fb:1a:78:8b:2e:5a:78:85:81:54:06:be:08:93:07:
         b7:63:0a:b6:e2:e7:7a:ad:70:1d:05:63:d1:bb:73:ad:6b:b0:
         13:00:1a:38:bd:82:d0:6b:4c:b2:4d:da:ac:c8:d0:fe:f5:d8:
         50:f0:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net