Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa
File:                     bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa (raw, json)
Hash identifier:          g7XMqZpICehQEuy6SmB3ch6RLHCZVRHkgOiRqgBy6ng=
Subject key identifier:   8F:89:E9:DD:F6:9D:5A:93:A6:A2:FC:E0:87:47:12:3D:7B:62:CF:F0
Certificate issuer:       /CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
Certificate serial:       010D0C9F4328584981D457D67ECA66E8D54E285C
Authority key identifier: 7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     0
IP address blocks:        2001:504:39::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:57:d6:7e:ca:66:e8:d5:4e:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=588080a5-4ca6-40fc-ac21-d9363389f426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:d3:af:23:a5:93:9f:37:16:28:af:12:40:
                    6a:88:37:aa:00:b7:37:e5:60:cc:9d:ec:48:72:97:
                    28:f9:09:80:75:64:66:de:1d:7e:ca:63:54:95:49:
                    c0:4d:51:59:cb:d6:2b:0a:1c:b0:0f:2d:b7:64:dc:
                    1a:2e:55:bd:9d:89:e7:ce:d7:23:8a:f0:ea:33:27:
                    19:15:7b:f2:94:cf:8a:e0:eb:c2:34:43:25:1b:84:
                    42:b5:04:c1:3f:e3:cf:73:5a:44:fe:b2:3f:ee:48:
                    a6:e4:5a:6a:f0:6d:29:87:02:8a:88:0c:d4:d6:c5:
                    04:0b:e0:de:8f:02:cb:2e:3b:8a:39:fe:38:98:7a:
                    fa:73:25:96:33:07:bd:27:17:3a:d0:3e:82:b8:73:
                    f3:63:8c:8b:bb:5b:a7:2f:5e:1d:09:07:37:74:0a:
                    4c:94:55:71:cb:a1:1d:3c:d8:43:b0:a6:8e:e4:c4:
                    1d:63:49:36:10:ab:0d:e8:ff:07:f3:1e:d2:e0:03:
                    7a:fb:01:5c:ff:21:21:14:70:0f:fb:b3:b6:1e:0f:
                    25:ea:3f:42:c3:bf:2d:cf:5a:3b:32:35:a6:5c:94:
                    86:c5:6c:62:6b:97:a4:03:84:00:69:c0:bb:91:cb:
                    59:c9:a4:0b:34:52:c9:61:e8:61:c8:26:0c:08:23:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:89:E9:DD:F6:9D:5A:93:A6:A2:FC:E0:87:47:12:3D:7B:62:CF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/bab7c9fe-bb9c-3bed-bfb9-1bc6520f030c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl

            X509v3 Authority Key Identifier:
                keyid:7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:69:ad:0c:ba:ea:59:88:97:ac:8a:fa:16:3c:3c:c0:08:
         69:ef:2f:6e:4d:ea:fe:0e:8c:fd:d7:0a:bb:40:c6:9f:6b:37:
         b1:d2:30:0d:30:2c:40:a1:1f:50:6d:ec:68:c0:42:9c:43:d2:
         f0:d0:35:e0:6e:36:01:25:d7:4a:3a:a9:fb:b8:2a:d3:91:7a:
         e2:ee:c1:69:e4:11:80:bb:d1:9a:08:77:f1:58:df:e2:36:39:
         60:61:3f:70:e5:48:b6:c4:df:d6:38:c9:4f:3d:45:60:63:8a:
         6f:87:d1:f5:0b:35:1c:60:98:ef:4e:e4:79:d9:ce:8a:f9:69:
         8a:0c:26:18:0f:48:ae:79:1b:23:8f:b6:a0:c2:21:6d:f3:34:
         07:ca:2b:b3:d6:76:bd:ad:d2:cb:22:5b:cc:4f:41:a2:57:18:
         35:60:89:5e:3d:be:ad:dc:03:86:e0:86:f6:c5:21:e9:61:16:
         ba:00:ac:bf:b2:aa:17:e3:bb:b3:e7:24:35:7e:c1:b5:60:1d:
         54:97:4b:40:9c:06:1d:0d:48:13:a1:40:ef:48:a0:d9:65:e5:
         38:d3:70:98:c8:20:a2:0b:51:aa:ba:25:43:da:05:35:45:1e:
         ef:a3:d8:0e:74:44:f0:47:9a:c8:50:4d:9b:e0:27:36:79:f4:
         ca:4c:42:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmB1FfWfspm6NVOKFwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VjNjU4ZWUtZjFlNC00NWNhLWIxNjctZDdmMWRkZWMy
NGU2MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
NTg4MDgwYTUtNGNhNi00MGZjLWFjMjEtZDkzNjMzODlmNDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbLTryOlk583FiivEkBqiDeqALc35WDMnexI
cpco+QmAdWRm3h1+ymNUlUnATVFZy9YrChywDy23ZNwaLlW9nYnnztcjivDqMycZ
FXvylM+K4OvCNEMlG4RCtQTBP+PPc1pE/rI/7kim5Fpq8G0phwKKiAzU1sUEC+De
jwLLLjuKOf44mHr6cyWWMwe9Jxc60D6CuHPzY4yLu1unL14dCQc3dApMlFVxy6Ed
PNhDsKaO5MQdY0k2EKsN6P8H8x7S4AN6+wFc/yEhFHAP+7O2Hg8l6j9Cw78tz1o7
MjWmXJSGxWxia5ekA4QAacC7kctZyaQLNFLJYehhyCYMCCOZsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI+J6d32nVqTpqL84IdHEj17Ys/wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZWM2
NThlZS1mMWU0LTQ1Y2EtYjE2Ny1kN2YxZGRlYzI0ZTYvYmFiN2M5ZmUtYmI5Yy0z
YmVkLWJmYjktMWJjNjUyMGYwMzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2VjNjU4ZWUtZjFlNC00NWNhLWIx
NjctZDdmMWRkZWMyNGU2LzdlYzY1OGVlLWYxZTQtNDVjYS1iMTY3LWQ3ZjFkZGVj
MjRlNi5jcmwwHwYDVR0jBBgwFoAUfoSb4/s+a6zJ4PH8Tv+BfD5Uv1EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZWM2NThlZS1mMWU0LTQ1Y2EtYjE2Ny1kN2Yx
ZGRlYzI0ZTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG85aa0MuupZiJesivoWPDzACGnvL25N6v4OjP3XCrtAxp9rN7HS
MA0wLEChH1Bt7GjAQpxD0vDQNeBuNgEl10o6qfu4KtOReuLuwWnkEYC70ZoId/FY
3+I2OWBhP3DlSLbE39Y4yU89RWBjim+H0fULNRxgmO9O5HnZzor5aYoMJhgPSK55
GyOPtqDCIW3zNAfKK7PWdr2t0ssiW8xPQaJXGDVgiV49vq3cA4bghvbFIelhFroA
rL+yqhfju7PnJDV+wbVgHVSXS0CcBh0NSBOhQO9IoNll5TjTcJjIIKILUaq6JUPa
BTVFHu+j2A50RPBHmshQTZvgJzZ59MpMQjs=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net