Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/09b3e79f-6750-3a78-a597-c377cd1377eb.roa
File:                     09b3e79f-6750-3a78-a597-c377cd1377eb.roa (raw, json)
Hash identifier:          63mTA+6PpzyFga2E5htN5Eez3Sl21ErUx0tqGCMTdH4=
Subject key identifier:   42:07:AE:D6:98:C7:73:1E:11:C4:78:CE:52:E8:22:87:EF:77:C8:99
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F43285848DBD66F3A7DA038A381FB9540
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/09b3e79f-6750-3a78-a597-c377cd1377eb.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     400861
IP address blocks:        2602:2da:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6f:3a:7d:a0:38:a3:81:fb:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=01c25d5f-181c-4e97-a044-95ea4d76f74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:21:34:b8:39:3d:69:ad:83:44:db:60:79:
                    21:d4:56:4a:18:e6:88:06:8c:5f:e8:0e:69:1b:d3:
                    c4:a9:87:cc:93:2e:75:e9:01:a7:a5:63:54:34:2c:
                    e1:9c:aa:0b:6e:5a:43:df:03:d2:c2:fd:53:ca:97:
                    f9:2f:08:04:da:23:42:47:ef:f7:db:e5:c6:c2:87:
                    ee:32:b0:f2:db:bc:80:b8:ad:e9:0e:e9:1b:7f:e0:
                    39:21:3b:ae:62:2c:4d:77:06:2c:52:f3:45:f0:5f:
                    9f:d5:b2:92:0a:b1:79:ca:27:07:3f:95:79:48:8b:
                    60:37:6d:62:23:09:c7:49:e9:97:b3:ab:39:e7:30:
                    fb:f2:0b:b0:0b:f8:30:d8:be:60:8e:08:9a:13:f5:
                    81:d3:dd:cd:c0:fa:d9:38:41:58:ad:ad:24:cb:61:
                    ee:28:1e:fd:2c:f6:25:ea:aa:13:13:2d:b1:e0:8a:
                    d9:8d:e2:90:b4:8f:20:9c:0e:81:aa:5b:b1:0d:7f:
                    d1:7a:04:f2:ec:f0:fc:d0:c3:de:8d:c2:24:bc:0c:
                    03:f7:3c:04:aa:3a:07:8c:f4:bb:78:52:b4:aa:b2:
                    7a:69:0e:d4:ef:e4:79:f7:51:90:ec:72:ca:b0:c4:
                    18:4d:cf:f8:29:f2:43:ec:f5:c2:78:23:cc:ac:f8:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:AE:D6:98:C7:73:1E:11:C4:78:CE:52:E8:22:87:EF:77:C8:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/09b3e79f-6750-3a78-a597-c377cd1377eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:c4:bd:d6:66:a1:12:7c:a6:e7:5a:4e:ae:78:a7:e3:11:5e:
         eb:39:30:42:45:c4:2a:d2:9e:73:c5:2c:40:b3:8b:4a:51:77:
         f5:7f:a5:a2:0e:aa:14:05:55:97:d9:b7:df:29:47:1d:c8:7e:
         e7:eb:64:48:37:6e:4c:b6:bd:80:59:8b:e1:93:25:cd:04:f6:
         f5:b1:01:3c:64:94:25:c2:d2:a0:ef:d0:fa:af:7c:95:b5:ae:
         a1:e2:39:81:c9:09:18:1b:ad:7c:10:e2:52:c8:4d:4c:41:7d:
         0f:9e:56:39:13:34:e1:67:a7:cc:27:03:bc:90:8a:b5:1a:84:
         d9:99:8a:5f:bb:de:91:a6:6e:94:a2:d8:9e:7b:ad:f3:8a:f9:
         c0:5f:70:64:cd:5a:3c:b8:55:8c:d7:f0:86:50:6b:60:77:c8:
         08:92:53:72:35:cf:c0:15:be:f8:2e:90:7b:a8:d4:15:bd:4b:
         f2:99:80:bb:e7:96:26:fa:5d:49:46:72:2d:ba:32:c5:ea:8f:
         8f:c0:e5:50:01:15:09:e3:e2:d0:13:1e:09:96:e2:27:25:01:
         77:01:28:50:e2:f3:f9:cf:60:38:02:0d:74:09:21:00:82:2e:
         ce:d6:65:9d:59:a7:d2:b4:a9:33:ea:6c:55:c8:37:1f:35:84:
         a6:f2:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:02 2025 by rpki-client on console.sobornost.net