Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa
File:                     5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa (raw, json)
Hash identifier:          4PRLHGBG5cLADmluZfiYU318NIl4DEc3wyi8+kgPD1g=
Subject key identifier:   B6:F1:A5:41:50:55:A0:10:67:4D:16:11:38:DE:4F:CA:AC:EC:63:1D
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F432858496586ACE259A4CFE333224200
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa
Signing time:             Wed 02 Apr 2025 21:41:49 +0000
ROA not before:           Wed 02 Apr 2025 21:41:49 +0000
ROA not after:            Tue 01 Jul 2025 21:41:49 +0000
asID:                     3819
IP address blocks:        2602:f69a:16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:86:ac:e2:59:a4:cf:e3:33:22:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:41:49 2025 GMT
            Not After : Jul  1 21:41:49 2025 GMT
        Subject: CN=005536e7-9e9f-4aca-9e92-d46c17ef9b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:e8:80:de:f1:e4:c0:c0:0b:e8:cb:b2:20:
                    c6:4f:0d:aa:0f:97:4d:3a:e7:12:7e:a0:c8:ea:a0:
                    63:25:2e:2c:5e:11:1a:07:92:86:95:b7:07:45:f8:
                    2d:d8:50:19:a7:01:1d:47:2e:27:5c:ea:c8:81:15:
                    72:f9:58:57:06:c8:b4:e4:ba:08:61:6a:63:b7:e2:
                    ba:25:47:aa:95:5e:10:5c:57:73:94:23:7d:ce:06:
                    6a:6d:28:30:c4:55:37:8c:4b:98:5c:c0:92:d7:ff:
                    95:19:28:f2:55:3b:72:de:41:47:b6:13:63:91:c6:
                    85:4e:56:7d:ca:21:6f:d0:99:dc:a6:b5:98:2e:92:
                    a7:9a:a7:cf:50:8f:ad:39:ad:37:cf:7d:08:fa:ec:
                    4c:aa:b2:27:77:99:b9:81:77:3f:4f:86:b0:76:15:
                    74:2d:62:61:3f:73:8b:19:07:e0:82:ca:f4:6c:5d:
                    3f:c1:1a:b8:47:3f:52:e7:77:9d:04:f2:ce:a0:cd:
                    da:9f:68:40:9b:76:00:e8:28:03:a2:17:01:ed:2a:
                    85:e5:a4:31:fb:e8:75:d0:a1:4f:da:8f:98:a1:ce:
                    f4:24:ef:ee:87:d0:a6:a5:7d:4d:d4:46:be:33:6b:
                    8c:00:05:88:e7:87:20:99:94:02:b6:89:34:d1:74:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F1:A5:41:50:55:A0:10:67:4D:16:11:38:DE:4F:CA:AC:EC:63:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:97:a0:74:ff:7a:e3:9f:a6:e3:6d:51:8d:e2:d4:fe:75:d5:
         db:ef:e0:b1:64:57:08:c7:29:27:f9:a3:90:71:81:72:db:f7:
         90:6d:60:0d:e9:a7:d9:44:cb:bd:51:14:db:7e:82:c4:29:b9:
         0c:b8:8e:81:43:56:ff:c7:a7:2d:19:73:99:58:dd:4e:df:a9:
         15:24:db:6f:64:43:60:29:12:e3:35:89:8b:4e:aa:6b:05:cb:
         3f:7a:76:b0:54:db:d1:66:19:66:96:3e:52:4f:1a:10:ea:fb:
         10:d2:e1:e4:51:0a:fe:2b:2b:91:2b:5d:08:b4:e8:9e:20:1d:
         c3:19:fc:19:e5:d3:2d:e6:35:b5:aa:7e:b1:17:37:b8:a8:2c:
         fc:06:51:bd:23:f4:ac:bd:1b:28:24:64:fb:fb:c4:1f:e4:40:
         a0:70:c4:d4:ac:49:0e:e5:e3:69:e3:40:6f:15:54:90:e4:8a:
         83:4e:88:b5:f6:ef:c2:f3:a4:8a:f8:05:73:41:d8:3b:72:97:
         f0:1e:58:00:2a:b5:d8:a1:82:35:71:8c:2b:14:2d:a0:ff:22:
         05:86:76:79:c1:86:d9:78:16:a5:fb:24:e0:34:57:8a:d1:7c:
         a3:c3:6d:05:3c:9c:43:09:e5:1b:3c:57:b7:d9:34:e8:33:aa:
         fe:ac:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net