Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/9b80910a-c961-3f48-a86d-c22bed50832e.roa
File:                     9b80910a-c961-3f48-a86d-c22bed50832e.roa (raw, json)
Hash identifier:          XEQQglcIFuW7+I3rtp9D3JiQvNdoqHu9XmX69UfB1hg=
Subject key identifier:   36:C0:9F:A2:FC:3A:57:28:1D:23:0A:EF:81:22:97:79:DC:29:AF:8E
Certificate issuer:       /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Certificate serial:       010D0C9F4328584981D454E2D953DB72DFC05C80
Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/9b80910a-c961-3f48-a86d-c22bed50832e.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     393610
IP address blocks:        2602:fb6c::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:54:e2:d9:53:db:72:df:c0:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=76bd2b04-2d7f-44c8-9542-7c13256c4441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:6a:86:42:15:06:cb:48:6f:b6:1f:ad:c5:
                    ef:45:6b:cb:01:55:35:4d:e0:96:67:4d:77:0c:37:
                    06:8b:35:f8:4c:1d:62:33:79:fc:74:53:9c:d2:12:
                    96:be:1f:93:f7:d4:82:31:6c:77:cf:a8:cb:d5:af:
                    c3:67:cd:dd:62:86:66:45:03:5c:2b:d7:93:48:4a:
                    91:71:09:19:84:8b:39:7f:0d:e5:0b:df:4a:05:2d:
                    11:93:4c:0b:7d:63:09:66:53:88:c9:f7:cc:eb:ab:
                    22:27:cb:07:c3:d2:e8:9e:e6:35:64:3d:cc:90:07:
                    5c:d6:7a:27:8e:85:eb:65:bb:fc:02:9e:6a:76:a0:
                    e2:ea:54:5f:5e:47:18:84:ad:c9:9f:f3:b0:94:0c:
                    1e:58:44:4b:16:b8:dc:42:86:ca:a8:2d:b7:9d:40:
                    55:6b:ff:14:42:bb:f6:83:06:ef:16:1b:70:55:b1:
                    ac:50:81:50:ef:a9:cc:1b:66:bf:60:9f:52:68:be:
                    63:e3:b7:22:20:44:50:8a:35:e8:f8:6e:52:84:80:
                    73:1f:01:3b:27:be:41:e0:83:30:47:65:de:bb:70:
                    74:2c:7f:c5:11:7c:9c:c7:84:37:f8:29:d2:cf:99:
                    0f:74:0f:ac:24:f6:a8:f5:3e:d4:c5:b8:a8:39:ca:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:9F:A2:FC:3A:57:28:1D:23:0A:EF:81:22:97:79:DC:29:AF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/9b80910a-c961-3f48-a86d-c22bed50832e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl

            X509v3 Authority Key Identifier:
                keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb6c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:74:f6:2a:71:e8:ba:bc:d2:19:cd:84:32:a9:8f:1c:91:82:
         6e:18:43:34:9d:0e:94:fd:25:4a:b9:55:30:5c:45:b3:bf:a9:
         be:b3:80:e1:ca:e0:b1:81:fb:1b:00:8f:3b:22:52:28:c1:b2:
         0e:09:a6:71:87:71:3b:bb:31:09:c5:22:52:08:9c:af:49:ab:
         b9:5e:65:86:73:21:31:f3:b0:8d:9f:dc:41:09:34:ec:29:43:
         68:fc:45:88:f2:c2:ca:04:c7:9b:65:bb:f2:2a:af:e2:41:23:
         6f:c2:26:c2:b1:f8:b0:c6:7b:36:73:1f:70:ef:5c:1c:f9:96:
         0e:0e:95:8b:dd:ed:c5:c0:78:64:1f:99:d7:82:76:ee:6f:46:
         a8:f3:20:09:3a:74:ad:08:d7:cc:67:42:e8:ef:3a:63:83:b3:
         c1:4d:8f:e4:7d:ff:43:f9:fe:e8:5c:cb:7a:f1:35:9e:22:55:
         ca:3a:a4:c5:0c:2d:6d:cb:f6:56:d0:2d:7c:19:6b:16:32:02:
         2a:cc:31:2d:58:8f:df:86:32:8b:98:52:41:27:4b:8d:6c:c1:
         b2:4c:72:30:92:02:96:21:dd:c1:8e:e1:dd:f7:fc:ad:00:b4:
         32:9e:83:d5:01:70:df:a7:e4:f2:96:0e:ef:b8:f7:a3:3f:eb:
         7b:cd:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:02 2025 by rpki-client on console.sobornost.net