Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
File:                     b8d397c7-de40-30e1-bcae-8b78956f87ff.roa (raw, json)
Hash identifier:          CS2iZ5SJqLrSBoW9g/2arTUeWtMTXQ3yJvELP9G3nMw=
Subject key identifier:   35:51:20:0B:0B:11:44:E0:EA:2D:2D:20:18:EA:9A:C4:AB:20:6D:9C
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F432858497279BBB57A27F3BE6E9D0180
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     40401
IP address blocks:        2605:72c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:bb:b5:7a:27:f3:be:6e:9d:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=3eb51614-ba8e-45a4-97de-9c9f3cfebdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:e6:f5:7d:5a:65:41:23:48:45:c0:04:b9:
                    f4:f8:a1:fc:27:e7:43:d8:31:20:d6:7e:97:a7:8a:
                    bc:62:0b:83:21:d9:d2:3b:c8:a0:6e:a5:1f:9a:62:
                    9a:27:aa:9e:d4:89:82:16:93:64:67:6b:81:56:bd:
                    c5:75:43:6b:3f:14:b7:75:ce:41:4b:11:ed:e6:4d:
                    07:b4:98:a2:b8:cd:21:0a:12:3e:30:42:0e:59:d4:
                    76:49:ec:fc:e4:db:94:1f:59:19:02:33:d8:88:5b:
                    64:04:51:7e:9b:c6:e8:a5:13:c3:77:d5:c8:25:c6:
                    11:67:0f:da:10:1b:96:c7:51:47:1f:79:b0:53:95:
                    2e:35:cb:85:64:0e:5e:00:e6:33:cc:f1:34:8c:f0:
                    c9:23:fd:93:03:3e:f7:18:8d:57:19:a1:e5:58:9e:
                    56:39:73:5e:7f:30:c3:79:3e:bd:39:77:2d:36:9d:
                    1b:1f:b2:a2:3e:b5:1a:0a:d6:51:5b:c9:4f:e5:e8:
                    ed:48:3a:5d:b1:c7:c6:eb:e2:0c:dc:f2:3b:30:e9:
                    6e:22:3c:79:ed:6c:2f:9e:e2:67:0f:fa:db:ba:a8:
                    90:c2:44:09:4c:06:49:af:e5:0e:42:94:30:d9:a8:
                    63:77:9f:ae:26:7e:e1:3c:cf:d2:80:a4:57:35:86:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:20:0B:0B:11:44:E0:EA:2D:2D:20:18:EA:9A:C4:AB:20:6D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:72c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:4e:b0:ad:9b:24:c1:88:1c:0a:25:eb:de:0a:b8:2c:b1:
         14:25:44:96:2f:4b:f7:af:d0:96:54:2d:97:00:c4:7b:ac:09:
         ee:f9:d9:0f:0d:18:22:23:c6:df:10:64:9c:07:1e:f5:09:4d:
         48:c2:bc:95:86:b6:24:10:59:07:eb:47:44:a9:68:2c:13:53:
         47:78:d0:c7:25:e0:b2:08:a9:ba:9e:8c:f7:b2:ae:b6:37:23:
         18:2b:f7:aa:e8:e0:2f:fa:4f:83:44:e1:75:d4:2a:4b:2c:12:
         54:90:46:52:c7:2e:e6:b4:df:a8:57:06:e4:9e:d0:d3:78:57:
         78:76:77:50:c4:09:a1:34:94:bd:fd:f2:8e:91:e5:17:62:44:
         71:25:67:bc:15:fd:38:cc:ac:01:d7:d5:17:f9:23:8d:cf:db:
         45:a9:8a:3f:9b:86:22:91:15:b0:13:c5:36:5c:a6:ba:dc:2a:
         e3:4a:a0:5f:1f:21:c0:a1:a8:65:03:3c:ea:33:a6:77:ad:0a:
         8b:61:8e:1e:c3:2e:0a:b7:ac:b3:38:06:18:34:f4:ba:c1:08:
         8b:a5:de:77:01:c2:8a:d5:de:07:3f:a0:4e:02:c9:8d:e4:2e:
         0a:a8:a4:b7:e9:04:af:43:b0:6a:c3:47:e0:6a:41:cb:35:5c:
         be:9b:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net