Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa
File:                     c665f46b-83a0-3159-8392-368a8eda0dad.roa (raw, json)
Hash identifier:          Xg1JwkCBaRBRrCWtHuSprH6+b/hv1aiTyIegNmLWj9Q=
Subject key identifier:   7E:DB:F0:3F:37:C8:5B:B2:9B:9A:14:B0:C6:4E:57:9B:90:28:69:95
Certificate issuer:       /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
Certificate serial:       010D0C9F4328584937D93E707198B5EFDEA14100
Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     46757
IP address blocks:        2620:123:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3e:70:71:98:b5:ef:de:a1:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=4593753e-afa8-4ae2-9366-521ab84a5512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:3a:d0:d9:47:ef:8d:1c:fc:4d:ff:70:80:
                    e9:c3:f5:7d:db:83:85:c9:c3:d9:44:46:2e:94:dc:
                    40:cc:94:48:a2:24:e7:6f:fd:57:2d:16:45:b5:ac:
                    b2:4d:9f:7f:c4:72:8d:e4:be:a3:27:6b:bd:74:26:
                    4c:a3:60:fa:e2:58:ca:37:ef:84:a2:b5:1c:85:0d:
                    0e:c5:d0:ba:ec:e7:f5:9b:79:c8:53:d2:16:67:8d:
                    8d:a5:be:fa:36:17:3d:e8:24:ca:4a:af:fa:0f:e6:
                    c8:a0:a8:86:fd:b5:3e:4b:a8:fc:79:a0:c4:46:2f:
                    d4:62:dd:3d:dd:bb:fb:b2:17:66:80:39:5f:67:0d:
                    28:da:bc:96:6b:a3:02:5f:02:d6:c7:4d:66:1d:73:
                    a0:c5:af:4f:74:3d:72:55:16:bd:9c:e5:f4:3b:61:
                    b1:d9:2d:92:02:75:c2:33:3e:b5:04:d6:3a:f9:4a:
                    5c:c7:cf:da:6b:0d:04:98:16:e6:3a:17:bd:c0:67:
                    36:e4:86:4b:dd:3e:e2:d5:aa:d6:39:e5:30:5a:bc:
                    b3:27:35:0b:ae:b8:bf:5f:55:85:2e:2a:36:de:c4:
                    c2:05:b9:d9:52:cb:85:d9:b3:11:ba:96:15:4f:29:
                    d9:16:27:be:ae:99:85:81:90:2e:94:b1:5d:49:0b:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:F0:3F:37:C8:5B:B2:9B:9A:14:B0:C6:4E:57:9B:90:28:69:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/c665f46b-83a0-3159-8392-368a8eda0dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl

            X509v3 Authority Key Identifier:
                keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:e0:4d:08:0c:16:24:43:02:e3:a3:de:f6:2f:51:29:ad:
         7d:b8:05:38:15:62:64:ff:30:ad:78:37:ea:07:30:b3:53:9c:
         aa:89:6e:6d:ae:ae:ca:00:ee:9b:17:c7:51:36:f7:0e:39:3b:
         4f:90:92:3b:9d:b9:4e:61:cc:96:c2:d4:6b:62:b2:62:82:ae:
         fe:6f:5a:56:f9:49:07:e6:80:a0:14:3c:dd:ce:75:0e:09:21:
         8c:2a:02:38:a3:ac:70:17:14:6e:80:72:fb:8a:98:35:f2:19:
         8b:b5:1b:6d:81:52:92:34:8c:8d:94:d1:4c:c9:f4:84:90:47:
         0d:c5:7e:39:46:ec:64:76:cb:fe:ed:ae:c8:9f:e3:b3:12:7b:
         d0:bf:72:dc:fc:f9:32:e2:b5:f1:2b:06:4b:57:cb:58:68:20:
         4e:63:f7:a8:60:d9:cb:fc:18:07:35:16:a4:99:87:6a:f8:55:
         f2:b9:b8:63:4b:f8:b2:e4:02:f1:00:d3:bb:dd:bf:8f:10:e8:
         0e:49:cd:ba:68:d6:d2:4a:d8:0d:50:b7:2c:1a:9f:67:c8:f3:
         ec:07:00:77:6a:6d:6f:f4:b3:e0:2f:26:2c:87:46:6f:68:77:
         93:1a:df:db:d6:b5:57:b5:cd:5f:50:8f:35:d8:8f:2b:13:1c:
         9c:57:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net