Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
File:                     e645c012-c626-34db-bc9b-1cc63aba011f.roa (raw, json)
Hash identifier:          CbObSYsg4wNBS5Bq4ga46e5usEVl3GdpFoyBFPL4ttg=
Subject key identifier:   2E:27:A8:52:06:56:63:2A:F0:71:DE:D8:3F:4D:6F:34:BD:FC:F7:32
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F432858496E4988D70E4D20A50A63EA80
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     16532
IP address blocks:        2605:2a00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:88:d7:0e:4d:20:a5:0a:63:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=d5176642-f2f6-4021-97c4-32d0e9461ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:1e:99:31:c7:d6:73:6c:1a:9c:e0:ed:7c:
                    cb:29:07:d3:a4:8c:e5:6a:2a:37:2a:40:8c:e4:c2:
                    b6:bb:8b:ac:cc:e0:13:60:9d:c9:17:e8:c5:12:ef:
                    6d:86:30:5d:7e:a6:30:ad:d9:e0:33:8c:00:e0:3d:
                    54:ea:e7:eb:ee:1a:f7:da:4f:34:92:a4:28:fb:85:
                    8c:90:93:e4:20:34:ba:61:52:8a:5e:37:af:46:31:
                    fb:62:60:22:cd:90:b0:17:e8:d1:81:ee:e4:97:1c:
                    c3:30:d5:b5:e9:e3:3c:d4:ee:74:2a:bf:e1:57:9f:
                    44:05:da:ed:46:02:92:a5:cf:ee:ea:91:48:d3:60:
                    9f:94:f5:31:ba:17:c4:40:07:17:bb:8b:b5:04:f9:
                    02:e1:f3:ad:ae:ec:5b:6f:8c:8b:c9:05:bb:58:8e:
                    15:05:99:fd:fe:c1:43:22:44:91:5c:d5:dc:c4:86:
                    2d:d6:ef:50:29:a3:ac:1e:39:a7:d2:24:b2:b2:74:
                    a6:bb:a4:d0:20:fa:68:7f:06:57:1f:a8:58:87:32:
                    0c:1e:73:ef:06:2a:b6:7f:ca:66:6a:bc:05:3c:c4:
                    68:07:2a:51:2a:71:f6:06:dd:48:da:c4:c4:7b:3e:
                    75:b1:d3:c0:54:13:57:78:24:db:b0:8f:55:1f:08:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:27:A8:52:06:56:63:2A:F0:71:DE:D8:3F:4D:6F:34:BD:FC:F7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:b5:29:37:0e:0f:04:66:2a:f1:93:4c:ab:6c:f8:20:43:
         d2:6f:d5:fe:c2:79:3e:e2:57:85:29:a4:18:2e:ca:67:c7:67:
         f5:ff:c1:f3:e0:cf:b5:f8:e9:7f:c5:5c:2c:9a:c6:15:45:71:
         e1:d0:16:27:7d:a6:22:23:2b:ec:3b:01:98:00:15:d2:9a:0b:
         1d:e7:4d:96:be:81:6f:63:71:63:83:06:7d:ba:95:0e:87:51:
         20:c7:14:fb:34:41:92:b7:76:8e:30:37:e7:4d:46:06:61:55:
         aa:03:f6:6b:b8:c5:ca:b2:a7:7c:b2:8b:10:bd:96:cd:2f:94:
         11:35:29:43:e4:85:d3:f8:a0:c6:6e:6e:d7:b8:5b:77:6d:2a:
         db:41:5a:5d:69:ca:20:06:43:cf:cf:1a:ad:6f:4a:2e:2b:d6:
         45:27:5b:9e:94:8b:80:a3:73:40:b0:e2:ff:60:cd:b2:0a:6b:
         f0:64:cf:24:fa:5f:e1:1f:16:95:0d:d3:88:55:a3:a5:7e:b7:
         bb:9d:db:3c:7c:0f:03:c9:0d:6c:78:1e:01:d9:6e:c5:34:10:
         79:64:f3:57:79:3a:f7:d2:82:a3:27:e4:4c:0a:9b:78:79:fe:
         d2:7c:09:47:b1:5e:71:aa:12:45:72:ee:5d:00:d7:54:e6:9c:
         dd:40:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net