Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa
File:                     31ca2f3b-bbca-3482-91af-458a6570d0a8.roa (raw, json)
Hash identifier:          Zl+eEK8ZtOIgsstMZplEiw9KUX/MpGbjYD4jnAlNuFc=
Subject key identifier:   D6:42:F9:C5:4C:CE:05:16:80:B3:D8:0D:E6:D2:94:95:D7:C9:E3:4D
Certificate issuer:       /CN=741b6a9d-4a31-4062-8784-4f1a436ab121
Certificate serial:       010D0C9F432858497279AEA28853EDDF30A96140
Authority key identifier: B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     400478
IP address blocks:        2620:b1:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ae:a2:88:53:ed:df:30:a9:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741b6a9d-4a31-4062-8784-4f1a436ab121
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=66cb6d28-635f-47b6-9679-24e95958eef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:e7:dc:12:b1:63:e2:8b:b9:0c:01:3e:48:
                    1f:83:93:f2:30:f5:be:70:86:59:8b:fb:9f:63:72:
                    0b:1a:dd:ef:be:c3:1f:ac:d5:62:d8:b6:ff:cc:77:
                    42:5a:a3:3b:2c:f2:e7:ad:5a:13:ad:37:bc:4b:86:
                    08:7a:c9:77:b7:dd:b8:0c:7d:92:3c:33:6e:c6:23:
                    e1:39:51:85:33:0c:49:2a:a5:77:52:d4:45:1c:a1:
                    43:1e:be:7f:b1:1a:a0:4f:46:15:86:07:58:08:1e:
                    91:1f:9f:0d:86:5f:fc:26:02:9e:01:fa:a2:68:5a:
                    63:7f:ea:9a:c9:bd:76:f9:3d:49:16:2b:4b:bb:25:
                    2b:fe:a6:bb:ba:a0:12:6a:ff:29:37:78:88:68:76:
                    c8:5a:01:19:28:e2:be:37:00:61:0b:c2:0f:fe:1f:
                    1e:1e:58:dd:34:06:13:81:8e:69:8a:b6:aa:65:42:
                    89:ad:d2:73:8d:70:46:e1:d5:46:80:0a:a1:61:6e:
                    b8:43:c6:e8:66:5f:e2:3e:54:fc:2d:2b:7f:b9:da:
                    f1:37:19:da:b8:61:21:8d:50:9b:f7:30:c9:51:4f:
                    4f:95:9e:8e:b3:f2:9c:eb:13:b3:fd:ca:b6:6f:e6:
                    0b:a5:94:d6:6b:77:35:b8:8a:d7:d6:89:81:10:f2:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:42:F9:C5:4C:CE:05:16:80:B3:D8:0D:E6:D2:94:95:D7:C9:E3:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl

            X509v3 Authority Key Identifier:
                keyid:B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:62:dc:22:9d:a7:c9:8c:c0:8f:50:8e:c3:68:67:1c:ab:
         cd:9b:98:16:f1:bb:a2:52:cc:f4:d9:97:74:9d:28:a3:86:fc:
         9d:f3:7c:80:65:0b:58:ee:64:96:be:aa:e4:be:79:5f:b9:50:
         32:00:ec:4f:5f:fd:06:15:00:f8:37:49:37:80:20:87:1d:e6:
         95:af:06:01:de:cf:0f:af:36:4c:21:20:b0:e0:00:3e:38:ea:
         7b:0c:bc:0a:4c:ff:3e:48:7a:50:e0:3f:ef:38:69:df:92:3c:
         af:8d:ce:c8:50:3f:26:a8:59:80:a4:0c:f6:70:37:d0:3f:37:
         41:17:5e:5e:95:f1:6f:bd:9e:51:78:fa:bd:8f:f1:43:40:2e:
         49:15:ae:11:4d:2c:26:65:39:d1:9e:96:65:f7:ea:3d:b9:1c:
         13:6f:ee:2c:2e:a9:03:91:e9:7d:c2:aa:36:84:9f:03:ae:ac:
         e3:60:59:e5:c4:de:76:5d:7f:bf:87:2e:3e:d3:aa:38:d6:4e:
         18:ba:fe:96:53:3e:99:5c:e2:ec:fb:c3:7c:e4:d3:f6:b9:61:
         d2:31:7c:64:f9:7a:1a:9f:af:01:f3:b1:d8:67:dc:0d:6e:19:
         eb:6d:e9:6a:44:66:03:39:4c:2c:02:49:b5:aa:06:97:84:41:
         a4:d7:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net