Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/4f094344-4f15-30f3-9ae0-25e977e65807.roa
File:                     4f094344-4f15-30f3-9ae0-25e977e65807.roa (raw, json)
Hash identifier:          r/ou0P7TBRJU+Te955kdplU6cFxdz4hIL2wwAT3xyXA=
Subject key identifier:   7C:DF:BC:EE:57:6A:48:E3:47:85:7A:D7:18:50:10:CC:F1:A2:A3:08
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F43285849674EEFF305FF4229DB612F80
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/4f094344-4f15-30f3-9ae0-25e977e65807.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     59598
IP address blocks:        2602:2a4::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:ef:f3:05:ff:42:29:db:61:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=b7a2433f-08ca-4752-96fa-0126bd20b9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:af:cb:41:3d:12:44:7f:9c:f0:1e:aa:96:
                    59:65:bb:7e:e2:d1:e7:fa:a8:4e:14:de:8b:a8:c9:
                    43:a8:1e:08:d8:60:c6:b4:41:f8:17:ed:50:4e:ab:
                    8b:3c:cb:21:ac:94:66:e1:e6:77:4e:51:24:ea:58:
                    cf:5c:07:ad:9e:90:ef:68:dd:dc:11:de:ff:f4:54:
                    b4:47:5f:33:93:76:16:7e:00:5c:21:47:18:33:1c:
                    02:f0:09:eb:0a:35:d5:b9:88:fc:10:29:9a:b6:98:
                    11:6a:a9:db:d1:c3:1a:cf:58:00:4e:a2:0c:f9:a1:
                    d3:87:06:f1:a1:48:77:9d:34:18:37:bf:1c:11:71:
                    c8:fc:ae:d5:16:b7:e1:21:0a:99:a2:97:e5:d7:97:
                    fd:1f:25:79:71:ae:d5:fa:92:ff:21:bb:94:a8:50:
                    75:a9:b7:e0:ab:5a:ab:b4:03:46:a3:22:b0:75:0d:
                    d0:2f:a0:d7:b2:0b:e2:b0:d2:53:e2:94:2d:5e:0e:
                    cc:ee:e6:79:1d:6e:cd:79:f7:d0:38:72:3c:26:20:
                    f0:f7:3d:50:4f:12:b9:cc:62:97:f8:6c:0e:83:25:
                    59:d6:94:1d:fe:df:67:70:0d:55:9b:aa:47:bc:8f:
                    a7:f4:ca:bc:fd:3b:12:54:72:db:52:c4:eb:c1:d3:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:BC:EE:57:6A:48:E3:47:85:7A:D7:18:50:10:CC:F1:A2:A3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/4f094344-4f15-30f3-9ae0-25e977e65807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:17:0e:67:0d:41:45:76:58:31:94:18:40:73:92:4b:eb:f2:
         85:96:66:43:5b:a5:c9:b1:96:18:06:a5:6a:97:91:b5:a1:66:
         a4:13:e9:ba:4f:95:60:55:ba:43:e0:4d:f7:7f:8d:d6:7f:be:
         30:64:01:15:b9:11:e9:c2:9b:35:8f:0d:58:d6:4e:fe:47:ca:
         e5:98:98:9f:9f:50:2a:4b:10:81:3a:a2:3d:77:fc:d4:da:b6:
         65:05:75:ce:0e:50:a9:92:5f:b0:c4:c0:2a:9f:bd:ae:27:9b:
         6f:2a:86:39:6b:fe:94:29:ee:6d:3b:16:a9:9c:17:e5:a8:c1:
         7c:b6:9b:59:7f:3c:d5:68:73:c0:6f:ef:13:0d:fb:2f:6c:10:
         03:2c:5e:32:1c:07:10:14:f6:54:d9:47:a4:bf:52:45:9f:07:
         68:9a:46:73:6e:40:c1:26:b3:6a:51:c5:d2:57:ac:40:0c:a7:
         8f:50:06:29:3d:79:99:1b:0c:53:9c:51:5d:3a:1d:69:53:61:
         d2:63:36:65:37:c3:32:94:fe:b7:06:50:52:8b:11:69:7c:08:
         de:34:9b:3d:73:d4:a5:33:a0:c7:59:da:78:50:96:4e:3c:37:
         c2:d5:b6:11:e1:ba:63:1f:98:fb:08:49:dd:dd:9e:c4:3d:08:
         11:c9:5b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net