Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
File:                     ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa (raw, json)
Hash identifier:          hOez5Gq+mR0f2xIRON5imWTD4qo/CvUSUb3xQK6jhsM=
Subject key identifier:   67:21:C0:43:FB:9B:DA:2D:07:2D:E5:4A:82:91:C7:01:4B:28:FE:C2
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F43285849393E6B540B7C514D12CD9F00
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     25875
IP address blocks:        2607:9f00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:6b:54:0b:7c:51:4d:12:cd:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=e39d4c03-cb5a-4c1b-b536-fa931adf75a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ac:f6:49:ba:89:d3:c6:36:a9:ca:1e:91:84:
                    fd:1d:a8:6d:1e:b1:90:df:e9:f5:2c:15:3a:78:77:
                    39:28:72:ea:d9:4f:16:27:2c:3a:05:0b:10:50:b2:
                    74:2b:71:c3:2e:24:c6:01:03:d9:a3:40:35:27:ae:
                    8e:0a:de:7a:3d:4f:46:7e:53:3b:7a:f0:86:3b:42:
                    b3:82:b3:6e:27:c5:9a:24:89:93:a4:89:00:c3:f3:
                    64:5f:e1:13:3c:d0:6c:83:ab:98:02:ef:c2:23:b8:
                    9a:b5:da:3b:3d:6b:90:af:9f:7d:a1:10:59:de:85:
                    5e:9d:45:73:6f:6e:c6:06:fa:62:62:9b:a7:f5:88:
                    2a:97:d9:26:f9:27:6d:57:d6:64:59:7a:cc:43:63:
                    dd:f7:d7:48:9f:bc:2f:97:4b:ea:cd:53:18:3d:9c:
                    f4:0c:3a:ec:63:cc:4d:f5:fb:1d:ef:3a:07:06:9d:
                    3c:03:fe:39:2f:f6:56:58:50:08:49:95:8e:9d:95:
                    a1:6f:74:df:77:92:6a:34:1f:1b:d4:f6:fb:4d:92:
                    e8:5a:d8:27:8a:16:fa:97:d5:fd:49:a9:ac:b2:e8:
                    90:67:da:5a:23:70:5d:2b:37:e5:53:99:11:05:2e:
                    b3:98:33:f0:08:10:7a:ec:56:08:e5:73:54:db:b4:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:C0:43:FB:9B:DA:2D:07:2D:E5:4A:82:91:C7:01:4B:28:FE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:8c:ab:ba:a9:51:e4:3e:4a:d8:0b:61:74:4c:23:cd:8a:
         55:f0:aa:9a:bc:80:99:9f:25:1e:52:4e:29:7a:e5:bc:27:f4:
         51:b8:6c:69:b1:c8:d5:b1:ea:bb:34:da:78:9b:2c:cc:b1:4b:
         f7:e2:90:f3:2d:a0:a8:df:2f:3f:a8:1a:b5:4c:70:8f:8c:af:
         17:94:9b:04:af:71:ef:4f:3d:a1:60:e0:a1:f6:d3:41:37:d1:
         b4:8b:1a:4e:d2:da:9d:dd:1f:e2:b1:7f:c6:02:97:40:ed:ed:
         70:af:0c:1b:c0:5f:09:3a:a7:bc:87:23:21:06:c5:76:44:d0:
         01:c9:05:32:a8:ca:9a:42:01:91:a5:78:c1:52:05:87:c1:ff:
         b4:bd:d4:63:fb:b1:5b:81:4e:90:5f:22:de:20:49:e7:82:3d:
         b7:a4:dd:c3:44:72:4d:de:67:28:4c:37:e1:d4:63:82:91:5d:
         00:53:ad:7a:59:8f:89:60:c6:1d:6f:da:98:c5:89:5e:5b:9f:
         27:45:f6:8d:5e:be:e8:79:a1:33:04:67:86:2b:ad:d7:7d:34:
         db:56:39:03:ec:ca:9a:bc:b3:01:a1:41:24:eb:9e:ed:32:a7:
         7d:e8:ee:42:1c:ed:22:c6:af:7f:f0:13:dd:02:bb:4c:b6:9f:
         0b:4a:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net