Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/212a0cb0-993d-3ece-907b-b929da7f0998.roa
File:                     212a0cb0-993d-3ece-907b-b929da7f0998.roa (raw, json)
Hash identifier:          y98aN0HPGAbT++MDscmWHSFqDOcSKBme/ZGCdnhI4HY=
Subject key identifier:   23:35:5A:30:4E:7D:E3:B7:D1:2A:F1:43:A7:8D:3B:64:AA:B3:91:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F2EB52841A586A4DADF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/212a0cb0-993d-3ece-907b-b929da7f0998.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1406:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2e:b5:28:41:a5:86:a4:da:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=8d689b21-cfc8-4ff6-8677-1243ddd91a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:0d:97:02:4b:49:a5:68:0e:31:13:5a:f4:
                    3d:cb:dc:34:fa:14:37:26:75:93:4a:ff:95:4d:57:
                    b0:b5:b8:88:c1:e9:a6:92:0c:13:e7:00:5c:7e:43:
                    0b:d2:73:d3:75:05:79:b9:3f:d3:05:fd:aa:81:d1:
                    96:2b:f4:b3:dc:29:f7:ac:f3:32:a2:ed:db:ef:85:
                    c7:53:f7:fc:03:36:da:de:05:b2:03:b5:53:58:8b:
                    9e:47:80:68:19:dd:08:8f:af:ca:48:c4:a5:25:d3:
                    74:a3:bb:2e:d9:03:03:98:61:ca:b0:25:1d:dd:a8:
                    02:79:8e:06:57:9a:5f:50:fd:28:34:a9:84:4c:a9:
                    60:11:9a:f1:02:af:00:27:34:26:9d:89:c3:8d:29:
                    ad:d2:6b:c1:41:6e:15:9c:f5:5d:09:6b:b2:ce:9c:
                    d9:69:cf:5b:7c:9c:39:be:ea:85:b3:13:85:5b:a4:
                    8e:e6:ba:99:8d:ea:c8:9a:d0:8e:00:36:f3:62:22:
                    fd:14:ec:9e:04:ad:59:52:1e:31:b0:e1:e2:ec:a7:
                    f6:0e:fe:d9:70:10:2b:53:8f:c8:cc:e9:86:e8:2f:
                    3d:71:1b:d0:ee:7b:5b:f7:0f:a5:c2:80:31:18:77:
                    3c:a1:48:cb:ef:93:3d:d0:3f:5c:b4:aa:39:a3:19:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:35:5A:30:4E:7D:E3:B7:D1:2A:F1:43:A7:8D:3B:64:AA:B3:91:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/212a0cb0-993d-3ece-907b-b929da7f0998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:4a:a9:79:3f:da:4c:f9:2c:b0:7d:c6:0e:a2:84:3f:d4:
         22:82:41:a9:a6:b2:88:e4:94:f3:37:b9:ba:e2:ef:2a:44:3a:
         18:03:d2:18:1e:19:3e:04:97:fe:74:e8:19:92:37:72:3a:0f:
         1e:52:65:50:e8:cc:99:ce:cb:61:96:fc:0b:79:89:b8:c7:2f:
         d6:1c:08:26:d2:31:a1:9d:13:3b:7f:53:56:61:33:ba:74:2e:
         8d:b2:98:23:8d:b5:31:b1:66:fe:a4:57:a4:d3:76:56:c5:32:
         60:26:13:83:ed:f2:69:e7:37:a3:57:a1:03:de:8b:12:69:5c:
         88:2d:10:56:ac:c1:38:1d:6e:ee:64:31:44:a6:99:d1:54:c3:
         72:28:63:d1:e3:ee:37:eb:37:90:87:6d:4f:b5:98:31:4c:69:
         7b:84:2d:9b:59:08:28:df:68:b3:ff:73:9b:78:90:50:88:e5:
         10:77:43:56:46:51:3c:90:36:c4:80:e3:9d:8e:97:bf:a1:80:
         70:ec:f6:cb:7d:90:ae:e8:a7:f4:1b:f3:7b:a7:8d:dc:fa:e5:
         60:6a:bb:71:77:42:5e:42:4a:ec:56:7e:03:51:78:ca:4b:29:
         87:90:10:a3:7a:9f:32:92:2e:a7:e4:00:00:fc:4e:00:bb:0b:
         03:02:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:38 2025 by rpki-client on console.sobornost.net