Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/023bb334-2127-31ee-903d-8c82bc8e04cd.roa
File:                     023bb334-2127-31ee-903d-8c82bc8e04cd.roa (raw, json)
Hash identifier:          B6uoavCuu4c5CYee+dsLGDAAhl2TMLyj/+SaHREV19k=
Subject key identifier:   34:8A:12:A6:D8:24:0B:F7:7E:1E:41:B9:71:5D:C1:17:3E:42:E4:E4
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584965819B7E05EF9272DE508F80
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/023bb334-2127-31ee-903d-8c82bc8e04cd.roa
Signing time:             Wed 02 Apr 2025 21:31:37 +0000
ROA not before:           Wed 02 Apr 2025 21:31:37 +0000
ROA not after:            Tue 01 Jul 2025 21:31:37 +0000
asID:                     3819
IP address blocks:        2602:f69a:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:81:9b:7e:05:ef:92:72:de:50:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:31:37 2025 GMT
            Not After : Jul  1 21:31:37 2025 GMT
        Subject: CN=c5664775-6629-49d5-9aea-2ff4be308c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ac:24:9f:09:f2:92:cc:7f:2d:08:48:79:9b:
                    e9:61:9c:56:d0:ef:e0:69:c0:fa:78:77:d1:5b:78:
                    37:11:9d:f4:24:4d:e4:b6:02:ea:fe:c4:0f:b0:69:
                    53:9b:3e:bf:29:71:67:06:af:cd:e7:16:16:b4:e3:
                    ea:be:98:fd:d0:4b:08:0c:d2:ba:e9:fc:61:f0:f9:
                    02:6f:44:fa:e7:68:43:c9:c9:13:6b:bb:b2:12:a1:
                    35:80:35:27:b3:31:bf:57:1d:06:e0:95:84:93:ea:
                    16:60:f2:90:7f:06:ae:9b:56:b6:79:c9:4f:5e:82:
                    ba:49:0e:09:b4:e9:72:5d:75:95:2d:6f:ea:9b:52:
                    03:7d:ea:95:55:55:ee:b1:1d:b5:b8:ea:30:14:00:
                    18:74:ac:b7:0b:48:c8:ab:99:56:75:cb:cd:f1:bd:
                    f2:c8:ae:bb:1d:c6:55:6c:28:ca:c0:05:25:17:49:
                    68:b9:7d:f5:ec:48:e9:39:cf:c8:32:55:cf:de:9c:
                    76:22:8f:18:3f:c2:d0:39:01:89:ff:f1:fe:a5:59:
                    2c:a3:42:71:0c:b7:c1:6f:78:21:f5:b5:d4:c8:15:
                    a0:f3:7c:b3:4d:1a:7f:64:fb:c7:1d:eb:18:6c:2d:
                    5c:ad:70:1e:fe:73:a6:5a:8f:38:13:d8:1f:03:fb:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:12:A6:D8:24:0B:F7:7E:1E:41:B9:71:5D:C1:17:3E:42:E4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/023bb334-2127-31ee-903d-8c82bc8e04cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:67:76:93:79:a5:e3:44:20:82:da:b7:a6:fd:00:ba:3c:8a:
         29:e9:f9:9f:d5:1a:9a:a2:30:5c:8d:2d:d5:c6:4d:2f:a0:b9:
         2f:ca:9f:e4:8e:a8:e6:ab:8e:4f:b0:85:c2:31:d1:ae:24:58:
         c1:06:ae:48:ce:08:22:ef:f4:11:72:a2:88:97:12:8e:db:ac:
         40:bb:92:c8:ef:21:32:e9:57:9a:4f:c0:3b:a7:95:90:46:9d:
         0b:4b:78:ae:4d:5b:ed:40:e8:f7:87:68:88:ab:24:87:7e:b7:
         ee:70:e1:e1:cd:6a:60:cc:2e:1a:cc:2a:04:ab:8f:3c:34:7c:
         97:de:d1:9a:39:69:93:09:12:32:0e:b0:72:36:e1:93:0d:2f:
         4a:42:d9:bd:56:11:9d:96:b5:42:86:06:ba:15:e9:6d:62:6d:
         ec:8b:64:fa:85:f8:0d:ac:ae:99:1b:02:01:05:ad:f6:44:5b:
         78:63:31:72:a0:07:b4:e8:ee:a5:af:c6:d1:86:31:04:80:87:
         0e:37:46:73:3d:05:8c:d4:59:b0:c9:fe:d5:e8:0b:0e:a9:f0:
         ec:97:a3:95:34:13:cf:8f:28:47:fd:27:3e:63:fa:ea:c9:1b:
         97:d8:89:7d:53:b2:48:a2:a6:a2:54:5f:e9:e2:46:5c:aa:f7:
         19:a2:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net