Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa
File:                     45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa (raw, json)
Hash identifier:          Xn/ZzKzy0IH/ysHPkRqSCODuwG9SqdKZs5Tok0mtsdo=
Subject key identifier:   D6:54:F5:97:77:1F:85:BE:02:67:42:45:E7:6E:B1:E9:CF:7A:C8:AD
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F432858497AD9BE03F1D786B2920F8660
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     396908
IP address blocks:        2602:f956::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:be:03:f1:d7:86:b2:92:0f:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=ca000d2c-a74a-44e0-8301-0732e8079884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:2e:ba:f2:31:86:48:5f:d8:79:45:4d:82:
                    d3:62:10:31:de:a8:0b:62:d8:2a:d9:ca:ff:30:dd:
                    7c:f3:25:fe:31:c6:8c:a8:c5:66:de:2c:7b:f7:c7:
                    ca:1d:81:71:3c:2a:90:91:29:16:78:3b:2a:11:a6:
                    ca:d2:d1:28:a9:31:0a:8d:3f:12:6d:95:4d:61:e3:
                    5d:34:8a:10:38:2b:cf:aa:f7:2d:1b:c1:1d:aa:54:
                    5e:fb:66:56:fc:45:cb:a8:70:38:3b:43:26:d7:e6:
                    26:72:fe:8f:36:c3:30:84:9a:f7:95:4a:71:63:43:
                    e5:2d:4c:e1:a8:d3:c6:60:f3:c5:79:1b:ef:a3:b7:
                    ff:ca:59:ad:26:2e:5c:06:ab:d8:9d:7e:0f:0f:dd:
                    ce:48:84:bd:0c:98:3a:45:98:a4:87:c7:44:3b:46:
                    22:3e:49:b2:83:c4:6f:55:51:12:a4:b8:0f:8c:5b:
                    a6:4a:88:d9:bc:80:c2:fa:94:ff:7a:f1:17:22:7d:
                    c9:f9:ce:94:10:b1:9f:63:19:ba:27:0a:72:36:05:
                    31:97:db:b9:e0:c1:c8:a8:d7:07:fa:26:4c:c7:82:
                    c7:70:da:72:0b:94:4e:79:f0:d2:7e:ed:d6:ac:23:
                    83:3e:4b:79:21:29:1d:05:48:9d:9e:61:7a:e3:06:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:54:F5:97:77:1F:85:BE:02:67:42:45:E7:6E:B1:E9:CF:7A:C8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/45a8c2e1-cfab-35fa-875c-15616e13c3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7c:22:58:d9:b7:bd:b2:2a:d6:1f:ff:d0:12:e1:b3:e0:83:
         56:78:04:f7:c3:28:27:ce:d6:96:6b:8d:fc:cc:cc:c9:8d:cd:
         93:68:13:53:67:8b:1c:55:5f:ca:7b:91:d1:6c:0d:f6:a5:fc:
         91:db:9e:65:8d:cc:74:70:b6:63:82:74:56:85:80:1b:30:51:
         e0:4f:35:7e:1e:d8:fc:c9:6c:de:bd:df:40:e2:85:23:71:ff:
         12:58:3a:e5:c6:ae:99:e8:5a:d2:18:c7:2d:57:e6:7c:ab:cd:
         df:27:a5:0f:96:3b:ac:49:07:3c:ea:cf:ba:08:37:f1:11:e6:
         a4:ce:60:cf:5b:00:37:35:71:53:1f:4f:54:d0:75:d2:05:29:
         d6:41:33:5f:27:0a:cf:9d:20:fd:4e:95:11:8a:1b:80:5d:9a:
         c0:a1:af:41:2b:e2:9f:46:ff:44:d7:d0:41:5d:5e:23:c3:3b:
         64:31:9d:5f:6a:a3:02:fd:7c:91:b8:30:ac:74:c0:a3:da:dd:
         e4:cb:d6:d6:2d:c2:25:07:74:61:4b:da:79:0d:c5:db:ae:ca:
         0d:7e:92:99:ac:8c:8c:5e:40:57:1e:ca:d9:c8:db:2e:a2:2a:
         53:d7:82:cb:33:c1:00:fb:c4:1d:9b:27:f8:8b:c8:9a:2a:1f:
         bc:ab:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net