Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/b95e3b07-74fd-3245-9562-fe15bdde76cf.roa
File:                     b95e3b07-74fd-3245-9562-fe15bdde76cf.roa (raw, json)
Hash identifier:          BVnmbJYUH03WyVpN5rtP1tYvO4H4TOGxje/ozz1T4DM=
Subject key identifier:   72:F0:B1:6A:F2:BA:C7:F0:D1:DF:6F:64:71:1E:7F:50:C8:31:D9:FF
Certificate issuer:       /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Certificate serial:       010D0C9F4328584976A98CC80A18033084929440
Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/b95e3b07-74fd-3245-9562-fe15bdde76cf.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     394896
IP address blocks:        2607:1740:2000::/36 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8c:c8:0a:18:03:30:84:92:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=faed4534-3806-46ac-aa69-f8187e44ae96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:19:92:d3:ab:15:11:15:05:16:b6:7c:4b:
                    2e:97:90:96:d4:d2:db:fc:56:32:d2:76:d2:16:8f:
                    51:64:dd:4e:e5:bf:a5:a4:8a:e0:fc:13:1c:91:96:
                    79:29:60:c3:53:2a:53:0d:7e:3d:3c:c8:e1:d9:f0:
                    34:31:5e:2d:03:b4:8d:9a:be:61:2f:ad:bd:be:0f:
                    d2:b7:64:44:a0:ba:c1:d5:fb:90:20:43:52:23:e3:
                    36:33:da:75:b3:e9:6d:55:48:0b:c8:9f:df:22:b8:
                    d2:9a:a0:36:21:2d:c8:5d:2b:8c:69:2a:ef:69:48:
                    06:3c:45:7f:36:fb:ad:e3:92:b6:c6:d8:2e:da:5a:
                    6e:5b:fb:fe:1f:f8:d1:14:cb:f6:7c:10:2e:50:9c:
                    fe:a4:50:a2:df:05:2c:44:bb:79:92:92:cb:f9:61:
                    2b:9d:60:9a:30:f4:e3:af:a4:4c:d1:47:d6:d4:99:
                    05:79:c4:c3:9c:a8:37:5b:ee:44:01:72:b7:e4:00:
                    d4:a5:5d:d2:3f:a1:9b:7d:11:ab:41:83:d4:80:78:
                    1d:79:a1:49:76:fe:43:94:f8:6d:93:fb:32:a3:5d:
                    16:61:8f:d5:bf:33:d0:d1:4d:3a:2b:4e:09:6e:5d:
                    a9:82:9f:6c:d0:22:47:c8:10:7c:6e:36:dd:f5:7a:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:B1:6A:F2:BA:C7:F0:D1:DF:6F:64:71:1E:7F:50:C8:31:D9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/b95e3b07-74fd-3245-9562-fe15bdde76cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl

            X509v3 Authority Key Identifier:
                keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1740:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:17:e5:00:d8:c1:bc:bb:99:d8:f5:93:76:a6:d1:67:2d:
         e1:e8:d4:55:be:0b:5e:c5:3a:09:44:1a:7d:5a:07:c5:07:67:
         17:e3:ac:32:04:c2:51:a2:3a:71:be:ec:da:27:b3:f8:11:5d:
         d9:78:38:24:7e:54:4b:68:aa:a4:06:4c:69:a1:7d:c0:f2:0b:
         b1:2e:af:f4:7a:0c:99:a1:07:30:e6:01:7d:da:2a:ab:10:62:
         1f:aa:38:d5:aa:ae:a1:1d:c2:ef:a7:25:d8:9c:05:05:1b:ea:
         c7:c4:32:19:69:52:94:0c:55:8d:d7:05:29:41:99:7c:7a:40:
         28:e8:c8:59:76:bf:c2:b0:65:99:a0:a3:e9:1d:a8:57:e9:a9:
         18:c4:7a:5c:37:eb:7f:50:ba:bb:50:a6:15:67:b1:a3:bb:9b:
         f9:16:36:30:2d:78:2e:6c:d7:95:3a:18:a0:5d:c7:aa:9f:1e:
         7b:81:91:1c:d5:a4:1d:93:f6:48:f5:d7:a2:68:48:7b:40:ee:
         28:2e:a8:ec:c4:db:78:56:09:51:73:f7:5a:91:09:17:00:10:
         a2:ed:5e:80:35:90:e1:75:66:c4:59:79:bf:b1:92:46:e0:5d:
         db:bc:a4:bb:7a:36:6d:a5:91:d2:d8:58:62:db:fe:65:51:98:
         f2:40:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net