Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa
File:                     bfefd033-46a6-3be3-95e8-359a21c308d2.roa (raw, json)
Hash identifier:          J/O7POtw11TGwmCo4d7AhhvCFCsSwmIDwL5BGiewu1A=
Subject key identifier:   76:C4:6B:88:F6:6B:3F:08:9E:35:DF:C3:D1:4B:D5:20:A9:71:38:F1
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584965822EC8ED2A9E79592B0700
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa
Signing time:             Wed 02 Apr 2025 21:32:46 +0000
ROA not before:           Wed 02 Apr 2025 21:32:46 +0000
ROA not after:            Tue 01 Jul 2025 21:32:46 +0000
asID:                     3819
IP address blocks:        2602:f69a:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:82:2e:c8:ed:2a:9e:79:59:2b:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:32:46 2025 GMT
            Not After : Jul  1 21:32:46 2025 GMT
        Subject: CN=01aa3a54-573d-4d1f-b273-02480eb8f881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:ff:c8:fd:19:6f:d1:d4:74:15:81:62:e7:
                    eb:db:32:69:b1:ef:da:04:43:21:ac:35:ac:b0:38:
                    96:ae:51:21:02:4c:97:07:a9:b3:a6:46:20:83:7c:
                    db:16:25:5f:d0:8a:28:4c:58:80:e8:4e:c1:38:5e:
                    ae:4f:4c:9c:5c:d4:2d:19:21:5a:ae:45:b9:00:1e:
                    90:89:46:9e:0e:32:34:ba:b3:d4:43:fb:6f:8f:27:
                    00:6e:60:01:1a:1d:f5:22:c8:b3:7b:8e:ec:8e:38:
                    bc:ce:bd:12:a7:e9:a7:c8:2e:38:17:05:32:a0:fa:
                    43:da:5a:59:04:05:cd:d1:4b:d1:70:d2:bd:ad:46:
                    72:72:e3:98:9d:79:be:82:42:06:d1:04:1c:19:95:
                    b5:64:fe:2e:3f:39:29:7f:d3:96:84:38:7a:6e:40:
                    17:b3:0a:3a:85:87:5d:06:b1:7b:84:de:df:71:82:
                    90:ad:1d:59:71:aa:3a:93:65:2d:0b:dd:9e:e6:de:
                    54:a0:6b:f3:c9:47:f4:a5:0f:b3:51:6d:d9:a0:dd:
                    19:5b:2e:5e:60:f6:d0:76:b4:c4:45:32:ad:28:6a:
                    4a:cc:ef:6a:d5:95:0e:15:82:b9:03:4c:e7:3e:e6:
                    61:c1:4d:35:3a:1d:72:19:a5:a4:08:c4:d2:e4:12:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:6B:88:F6:6B:3F:08:9E:35:DF:C3:D1:4B:D5:20:A9:71:38:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/bfefd033-46a6-3be3-95e8-359a21c308d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:04:3c:e2:8a:5c:2c:9f:55:08:24:b4:46:3b:cf:ae:67:
         94:9e:63:20:39:dd:9e:6d:72:b7:85:f2:17:57:60:08:5a:ae:
         91:9a:9a:5b:f6:89:42:7b:92:0e:7b:66:9a:f7:55:ef:f8:e6:
         51:49:fd:30:a5:8f:9e:e8:f9:40:bd:aa:8f:15:68:e6:98:6b:
         02:a0:d7:fa:fd:9d:62:5a:f2:82:5b:d9:6c:1f:e6:cf:02:cd:
         27:cd:4a:0f:53:47:24:b0:77:74:bf:2f:bc:6c:e7:f5:70:07:
         40:9f:fa:c7:37:26:39:86:62:09:11:3d:57:1b:ae:47:f6:79:
         a1:bd:a0:d0:4a:e7:ec:a4:10:14:b7:a4:63:d7:ae:02:75:fb:
         27:a1:f4:9d:28:60:87:d4:6b:2a:cd:cd:1c:f1:f1:fb:c3:58:
         af:1b:db:5e:c1:7a:74:46:b3:a7:dd:57:85:3f:a3:a1:20:d3:
         75:e5:08:8a:bb:a5:df:b0:61:d3:b5:29:4f:d9:2e:2f:58:c8:
         6f:6a:cc:6c:6d:bc:a3:10:7d:1e:f9:dd:e9:a5:7f:c8:81:50:
         a8:b9:be:61:91:74:77:90:5e:8c:5c:e0:5a:fe:32:0a:d3:08:
         f2:c3:b7:b3:a9:b9:67:d3:b0:a4:d9:37:8e:59:32:1d:c9:c5:
         9e:88:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net