Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/39518e3f-8987-3cfa-b96d-cf387ffe2793.roa
File:                     39518e3f-8987-3cfa-b96d-cf387ffe2793.roa (raw, json)
Hash identifier:          W9hXHlGicqzD4+IZ2JjN2swNp9Bkfzqkq4FZD7S0NO0=
Subject key identifier:   10:90:88:E0:BB:AC:39:2C:10:C1:08:44:3E:CD:D1:02:20:EB:E7:78
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285849806F1D46949ADAF2EF3F00C0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/39518e3f-8987-3cfa-b96d-cf387ffe2793.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     55195
IP address blocks:        2620:10a:80a8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:1d:46:94:9a:da:f2:ef:3f:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=361afece-cf01-4273-8833-5182ada59003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:57:4b:e3:54:84:4e:55:59:b3:54:c1:1d:
                    42:0a:6e:9a:99:d6:d3:d5:d7:aa:aa:ab:74:d2:23:
                    ec:3d:00:8c:d8:3f:74:bd:c4:aa:77:de:d3:b7:47:
                    bb:ca:66:77:49:0c:8a:9e:4b:b9:ec:84:2b:b0:03:
                    22:0f:de:aa:43:9b:aa:54:6c:91:a8:aa:cf:40:fd:
                    e1:3b:93:7f:31:b1:5e:b7:36:a6:76:36:b4:2e:e8:
                    9c:37:3d:b2:2d:4e:07:60:45:bf:3c:71:06:41:fd:
                    eb:df:e2:b1:63:20:13:3a:d2:67:6c:7b:f0:eb:56:
                    2f:1d:fc:c7:8e:1d:a4:4d:01:5f:a4:4a:12:5b:16:
                    80:fe:4a:87:6a:0f:59:72:4d:bd:f6:09:54:54:ea:
                    53:0f:ec:f0:8a:3b:a1:83:b0:bf:d6:86:45:7e:f4:
                    44:8e:59:0d:fc:93:97:97:d4:a9:25:c3:4c:b1:19:
                    ae:e8:04:f7:5e:0a:3e:ec:fe:f7:09:f9:56:c1:11:
                    09:f1:89:15:3a:e9:14:56:f9:ac:86:9a:22:d5:aa:
                    ec:73:f9:fe:67:e0:e1:56:1f:9a:79:a3:a1:8b:c4:
                    38:81:2e:e7:b0:53:79:64:f2:8d:14:3f:fc:88:e4:
                    79:d5:26:79:8c:07:6b:07:b1:93:2d:02:21:3b:3b:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:90:88:E0:BB:AC:39:2C:10:C1:08:44:3E:CD:D1:02:20:EB:E7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/39518e3f-8987-3cfa-b96d-cf387ffe2793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80a8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:24:df:cf:78:df:f2:cc:95:a2:7e:98:99:e4:08:6b:fa:c1:
         d8:8a:a8:62:bf:f3:f3:77:ab:57:74:22:4c:b0:4c:7c:3d:37:
         35:fb:e8:df:f6:8d:31:80:eb:6e:a0:f6:7a:62:36:a6:26:1c:
         27:0a:7f:b2:f3:89:03:57:af:ae:b7:7e:ff:38:c5:57:f1:f6:
         d4:33:b9:a2:d3:b9:e8:e2:ef:70:34:16:eb:1f:71:c3:cb:66:
         4e:60:ac:03:a0:0b:80:c2:9f:42:ad:4a:e9:5c:07:0b:06:f4:
         cd:3b:78:16:9a:56:72:73:22:30:a0:15:e3:c4:ec:46:83:68:
         07:9e:f1:32:22:c6:2d:22:d3:53:c3:1f:f8:b0:26:7f:c5:27:
         e6:e4:89:5d:96:e1:e6:e2:7e:42:c0:b8:3e:64:07:e6:0b:3d:
         a3:66:5e:74:8d:a4:51:b9:68:24:c2:1e:3a:90:ae:6e:40:64:
         22:6d:68:73:46:41:99:73:4a:8a:df:6c:97:9d:aa:11:53:8c:
         9c:cf:92:d5:1a:1f:19:25:84:c6:bc:fb:30:cf:9a:69:55:00:
         dd:56:85:2e:67:9f:b4:f7:a3:3c:b4:0c:92:7b:e9:80:a3:12:
         08:c5:09:63:31:e0:ee:81:b3:25:fb:74:1a:15:85:46:c6:63:
         b8:c9:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net