Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa
File:                     f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa (raw, json)
Hash identifier:          wJRL+eN2/VOE2NNlJqLVn2E9HG03/f+FjundrDG8GqY=
Subject key identifier:   23:2A:45:F7:E5:73:DC:03:C1:E2:4F:6C:67:72:23:30:DA:C7:5E:0B
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F432858496584FDDC635EF6CE49FAA200
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa
Signing time:             Wed 02 Apr 2025 21:38:26 +0000
ROA not before:           Wed 02 Apr 2025 21:38:26 +0000
ROA not after:            Tue 01 Jul 2025 21:38:26 +0000
asID:                     3819
IP address blocks:        2602:f69a:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:84:fd:dc:63:5e:f6:ce:49:fa:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:38:26 2025 GMT
            Not After : Jul  1 21:38:26 2025 GMT
        Subject: CN=c12568ff-21e0-411e-a18e-7c2a0abdfaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:7e:f3:bd:a8:64:25:d9:f1:d5:e6:83:86:
                    e3:32:08:5c:ca:48:06:d9:ef:75:6c:dd:af:4a:41:
                    df:b6:c1:1b:88:17:5d:8e:18:1c:07:de:7b:b8:55:
                    f0:7f:27:eb:bd:76:bf:ce:37:02:c4:bb:97:0d:48:
                    f2:a8:d8:10:d5:db:e6:9e:dc:92:1d:1d:1d:40:f8:
                    06:67:41:1d:af:32:f9:b2:ab:d3:95:2f:c8:47:2c:
                    86:0f:39:7f:23:fa:15:12:f4:d9:9e:6f:26:b1:30:
                    ea:8b:a4:a6:56:83:77:6e:d8:f6:09:9e:9e:9c:bf:
                    ca:ec:43:da:8f:2d:49:1a:6b:05:09:3c:80:4c:fc:
                    28:ec:12:29:69:77:1e:a8:a0:55:93:b1:eb:8b:3e:
                    76:1c:41:4b:55:8e:0c:15:7c:c8:6f:5d:90:d2:05:
                    02:c7:65:e1:f7:96:8f:ef:0f:8e:71:93:55:88:ca:
                    3d:eb:97:34:fd:04:dd:e5:d8:3d:37:8a:1e:49:35:
                    65:7f:0e:99:82:c4:1f:66:11:8d:7a:d5:92:d9:48:
                    f7:1d:29:b3:73:db:7c:3a:bb:b6:1a:77:6d:74:3d:
                    f8:c7:05:f5:a3:9c:f1:93:e1:c9:93:a5:43:08:f0:
                    13:ed:fa:0d:7c:31:72:ed:54:f4:d5:41:13:7b:43:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2A:45:F7:E5:73:DC:03:C1:E2:4F:6C:67:72:23:30:DA:C7:5E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:17:4a:96:55:04:9f:b6:68:57:d9:48:b6:a7:32:d3:77:45:
         23:81:84:17:29:5f:45:e3:7a:1d:86:d5:ca:43:30:b0:7d:0e:
         24:63:db:cd:68:d6:8f:70:8e:bb:0d:44:d2:23:76:1c:10:95:
         dd:d9:6c:db:24:c9:45:ad:f7:03:75:71:45:87:20:14:fe:b6:
         2e:14:ec:a7:69:b0:98:5d:78:4a:90:c7:42:83:83:94:3b:13:
         d5:0a:74:ed:90:00:31:29:52:21:8e:ff:12:c7:1f:28:5e:fa:
         32:3b:29:58:f9:d1:04:93:72:77:18:f9:ba:2e:a8:26:ea:4e:
         4f:b4:08:58:1e:2a:e1:57:de:c8:dd:6a:1f:92:a1:bb:36:10:
         60:d8:63:2e:9b:1e:18:92:a1:dd:32:c6:40:9b:de:0d:d1:61:
         e8:54:3a:90:6f:ed:e2:09:cc:a8:0a:ef:64:bc:94:71:70:eb:
         2c:28:3c:65:15:8c:de:2a:4e:30:e8:1c:68:07:00:d0:37:77:
         29:c6:88:e8:88:30:46:d4:e8:03:8f:e0:82:d2:ca:1a:21:9f:
         34:82:c3:41:18:a4:90:6f:03:d9:7d:4f:13:d2:29:2c:d2:d3:
         b1:c7:03:47:3e:db:9a:4c:a6:7f:1a:79:80:25:69:2a:ca:01:
         57:e9:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net