Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
File:                     408e958e-b60e-30d3-bca9-4596afecccc4.roa (raw, json)
Hash identifier:          f9L80Nuz0hAYGEmMViMyuv8vKDUfNJ9q/9uU0Q02/YI=
Subject key identifier:   BC:BE:F4:EA:78:DA:4D:CA:33:87:E2:CD:2E:E8:98:76:9A:2B:5A:12
Certificate issuer:       /CN=478a0a21-d101-464c-8706-25bb157545c8
Certificate serial:       010D0C9F4328584976A98F6C99256C59D1708780
Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     401457
IP address blocks:        2602:f7bb::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8f:6c:99:25:6c:59:d1:70:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=788a78a3-aeb3-41ec-99bb-a9cd68f7a4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fa:7c:79:fb:2a:30:5d:df:c4:65:69:2f:5e:
                    08:4e:83:4b:4c:8f:a8:6c:35:03:19:37:db:1c:c1:
                    6c:e3:1f:dc:16:19:dc:b0:81:05:82:ca:74:2e:54:
                    3e:38:c1:ea:93:0e:10:77:6d:34:5c:3c:b5:a7:7c:
                    9a:b8:a2:29:83:98:cb:67:76:dc:9d:fa:30:d7:bb:
                    24:b3:b4:08:08:f8:22:c6:08:7c:68:ef:f4:21:a4:
                    56:e8:95:23:73:4f:55:05:28:0f:fe:e2:63:4a:0e:
                    e7:52:02:2e:4b:45:75:8f:53:36:5f:a6:1b:69:96:
                    67:f9:1e:b6:9c:5c:a8:4f:b9:55:ff:52:a2:aa:4a:
                    4d:43:75:86:79:aa:2b:2a:ce:22:0c:f6:b7:fe:e9:
                    03:3e:58:1e:8f:27:34:f1:95:64:bb:c9:96:26:c0:
                    db:e0:ec:00:f1:59:19:01:e8:31:c7:8a:99:4a:2a:
                    9e:a3:85:db:dd:37:98:7a:7f:3e:b1:d4:76:66:36:
                    5c:17:24:ba:3b:16:63:92:d2:21:4b:cc:63:0b:7a:
                    17:84:41:97:4e:97:0b:9f:55:d6:24:55:fe:bf:19:
                    81:c9:4a:12:10:82:9a:61:91:ed:c3:b5:82:87:c1:
                    45:86:07:c2:5d:97:c9:c4:22:ef:25:3b:20:ca:09:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:F4:EA:78:DA:4D:CA:33:87:E2:CD:2E:E8:98:76:9A:2B:5A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl

            X509v3 Authority Key Identifier:
                keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:30:89:43:06:f5:bd:66:62:d3:13:4b:2a:11:9b:41:84:
         ab:19:3b:b9:b6:52:f2:23:2a:0c:51:32:b6:d0:df:7c:4a:1c:
         ca:73:14:38:4a:7f:0b:f5:1f:6c:2b:9e:d7:98:36:3d:74:a3:
         51:20:46:dd:61:03:68:7e:5f:e2:c2:b7:56:bf:e3:1f:c3:c5:
         62:f0:18:32:95:6b:29:c4:58:88:98:7e:37:c8:d9:1d:eb:b0:
         a7:f3:ec:9b:5f:82:79:0f:40:d8:1e:bb:91:a2:7f:79:5e:dd:
         b6:fa:38:41:47:1d:54:4a:62:fb:4b:18:f8:ce:02:cc:72:00:
         5c:a8:73:65:07:71:a6:2c:1f:77:a8:4d:cc:16:6d:8e:d9:0e:
         f2:fa:45:ee:b8:c5:85:a8:5c:c7:59:20:89:d9:d2:45:0d:e2:
         74:cb:f1:b9:c2:22:b2:76:7b:16:0c:f5:2c:55:f9:13:25:de:
         90:92:9b:85:87:7b:48:9e:c0:8a:9f:88:20:81:09:1f:7e:37:
         b6:f3:b4:0d:51:7b:01:ea:f4:b6:92:90:78:c7:d1:eb:fe:50:
         70:e9:8a:67:a1:55:ac:ab:75:4e:ce:8e:02:2e:cc:6b:bd:aa:
         c2:77:62:10:8e:31:02:52:b6:2c:34:37:28:7b:02:34:39:3b:
         6d:b5:c3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net