Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/973626d9-0e99-3f45-9b74-9ab73137723b.roa
File:                     973626d9-0e99-3f45-9b74-9ab73137723b.roa (raw, json)
Hash identifier:          YDvE6K7eUK8Bop1KVwbN8+BM4bDFX7zxN7PNEdbl9+Q=
Subject key identifier:   DA:0A:0E:AB:51:51:2E:D0:56:49:F9:98:48:EC:F3:2E:D9:C8:AB:4F
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584902EC28F442A7E366E6C02040
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/973626d9-0e99-3f45-9b74-9ab73137723b.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     11269
IP address blocks:        2605:e80::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:28:f4:42:a7:e3:66:e6:c0:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=58eba58e-a624-4e0e-a150-561bab6f9454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:f6:b6:9d:0a:ea:d6:d1:d1:ef:d5:fa:63:
                    09:3e:23:47:ac:45:bb:df:d6:28:ae:84:46:61:d3:
                    38:1e:66:39:73:1d:bf:03:23:b3:43:ea:98:f5:e6:
                    60:28:db:fd:f6:cc:df:20:11:b1:8a:18:72:93:18:
                    3a:2c:d2:c3:29:86:59:6a:5a:cd:eb:9c:69:7b:ec:
                    86:b9:5f:15:71:b8:3a:21:be:80:8b:68:25:ba:3f:
                    22:c6:13:90:5a:1b:de:e6:a5:32:b7:09:be:b6:85:
                    0e:05:54:2a:9e:d0:51:4e:99:73:3c:45:41:6b:78:
                    f9:a2:40:c7:5e:ab:d9:d8:47:0a:b0:c2:8d:ac:02:
                    27:91:34:6f:97:e5:bb:f2:63:f4:08:a6:5d:5f:1f:
                    83:5e:7d:ce:db:04:43:0a:ca:37:5c:a4:bd:7e:b6:
                    41:eb:cb:f8:1e:0b:95:58:15:c0:54:74:87:b6:9e:
                    52:b8:b5:91:ce:ab:06:93:d3:f0:e2:57:76:32:97:
                    f7:16:7b:56:15:91:5b:c7:93:10:ea:ae:ac:f0:b2:
                    06:a2:bb:2c:ce:33:3e:ea:1c:c1:fb:93:de:fe:b4:
                    bb:71:26:23:28:5e:2b:cf:f5:a2:cf:01:13:49:94:
                    43:e3:67:1c:95:b4:e1:2e:93:34:9d:b6:98:a6:6d:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0A:0E:AB:51:51:2E:D0:56:49:F9:98:48:EC:F3:2E:D9:C8:AB:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/973626d9-0e99-3f45-9b74-9ab73137723b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ec:25:b0:e4:ea:8f:4a:3d:60:8e:d7:6c:7f:5d:94:71:7f:
         26:ef:c0:3a:1e:c0:3e:fe:d3:fa:63:7d:b6:fd:45:5f:8c:d2:
         77:98:f3:0b:42:87:17:7d:2e:04:0a:6d:71:a2:42:d0:cd:17:
         9a:34:91:56:5b:02:03:1b:2c:2f:ae:d8:08:a6:d6:d4:dd:fe:
         c3:65:60:fe:f8:c2:3f:b1:30:d7:40:32:6b:89:74:05:69:6a:
         10:fa:84:f2:77:81:56:fd:60:a8:cf:53:d6:40:d6:b4:b5:23:
         d2:e7:37:5b:5e:4a:19:55:5c:23:a6:5e:3b:96:41:cb:0e:ae:
         ac:4b:03:6d:51:93:29:f6:f7:2a:e5:7f:3e:54:be:d8:4e:53:
         80:42:c9:5d:32:09:a7:1f:1c:6f:ce:c1:e5:54:3c:1e:2b:35:
         0e:89:9c:17:00:7d:8c:84:65:a9:d3:e8:58:f9:78:2c:66:3d:
         ba:57:e7:85:84:f4:dc:e6:d6:41:ac:88:56:dc:24:23:8d:37:
         13:32:68:e1:17:5b:9f:5f:67:9e:ce:46:b2:23:09:8f:ed:f9:
         70:62:76:fc:0c:1b:e5:06:ca:31:9e:f2:99:07:eb:e5:20:41:
         b6:d6:e2:ec:6e:34:93:d5:49:be:8c:c4:85:15:b8:ab:3e:03:
         e0:98:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:11 2025 by rpki-client on console.sobornost.net