Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d91fef9-6c69-3e69-bc3d-562560f995f8.roa
File:                     2d91fef9-6c69-3e69-bc3d-562560f995f8.roa (raw, json)
Hash identifier:          C/wDkXtcLG6b6qt3L+meUE9qDPyTHZAyEFGB7JWdaQs=
Subject key identifier:   F7:80:33:56:3F:F3:94:18:47:B6:F1:A4:DA:D5:11:6E:3D:2D:5B:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496A19B4E925FE4C8F95418020
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d91fef9-6c69-3e69-bc3d-562560f995f8.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:1401:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:b4:e9:25:fe:4c:8f:95:41:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=52c5695f-d6ca-42c4-98f0-136422b531f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:93:c0:04:a7:29:f1:51:10:d7:44:e9:ba:
                    2b:82:a5:25:03:68:12:d0:54:30:a2:fa:f9:5f:95:
                    ef:81:eb:9f:cb:d5:3e:47:57:ac:61:ce:94:c3:82:
                    a8:53:f6:ef:ec:08:00:48:42:8e:4a:fc:0f:09:ec:
                    f1:0f:70:16:c1:86:2f:0c:da:61:46:b1:08:cb:0a:
                    fd:e5:93:38:a8:2d:40:fd:9d:a9:d6:cf:c0:64:95:
                    fb:17:b4:99:9e:57:b1:23:0c:de:b2:4b:91:6c:fc:
                    8d:4b:b3:c6:16:38:eb:c3:1f:bc:8d:28:b5:cd:1d:
                    52:c9:a1:31:15:d6:95:f7:fb:55:d9:ee:04:91:1b:
                    b0:9c:56:8d:ec:f0:71:1b:cc:82:4e:b1:f0:13:8b:
                    ba:9d:63:d2:23:ae:6e:aa:25:31:a3:ff:d8:4e:5d:
                    1b:e2:d5:a4:7c:d1:c9:fe:50:34:af:80:37:47:5c:
                    5b:69:ee:b3:57:71:f2:c1:a8:06:af:3b:85:7a:52:
                    0e:48:e9:b1:05:84:26:16:42:97:20:a0:a0:5b:74:
                    09:b2:0f:be:82:d8:55:99:1a:95:69:b2:c4:d7:4c:
                    1e:34:a4:c0:77:46:6f:07:d1:63:88:e0:f8:3e:32:
                    c1:78:40:e1:9e:5f:2b:23:80:17:a1:ae:0c:16:16:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:33:56:3F:F3:94:18:47:B6:F1:A4:DA:D5:11:6E:3D:2D:5B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d91fef9-6c69-3e69-bc3d-562560f995f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1401:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:51:ac:2e:f3:e3:61:ae:86:96:3a:66:a4:a1:d9:9a:b6:
         04:a8:9a:fb:37:de:bd:db:d6:5c:03:e5:b4:e5:ea:22:99:45:
         9c:bf:57:c9:01:83:17:4e:26:54:4c:89:03:87:a0:02:fd:05:
         c3:bb:e1:0e:cd:7a:2f:db:15:4d:53:27:8f:0b:81:8e:01:9f:
         9d:76:65:33:e2:9d:80:5a:83:39:74:a4:1e:a4:8c:61:78:c2:
         c2:2c:12:24:df:d6:5c:30:08:58:a8:d6:df:08:33:a1:2f:b7:
         36:56:e4:a1:2c:24:06:a1:ec:5d:7c:5b:c1:90:d5:cb:d3:8c:
         3a:e5:3f:b2:bb:41:8e:89:3e:2c:83:62:c8:5b:d4:14:fc:10:
         50:ad:4e:48:dd:99:14:43:aa:36:3f:63:ad:da:f8:f0:31:b0:
         11:c4:34:63:fa:f2:3e:4c:2b:0f:19:c6:30:91:e6:06:77:ea:
         dc:da:28:06:c6:ba:f5:6a:11:1e:dc:e5:58:48:c7:05:03:9c:
         48:69:d6:47:47:e7:02:ec:3a:e4:3f:cc:c4:f5:0b:51:fb:dd:
         8a:c5:20:5f:d1:96:d3:40:f7:98:59:3f:0f:af:aa:88:f4:22:
         a6:1a:14:58:a0:2f:15:9e:62:05:76:99:f0:40:79:8b:0c:35:
         2f:45:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:40 2025 by rpki-client on console.sobornost.net