Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa
File:                     494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa (raw, json)
Hash identifier:          FzN5MGbJoCOncfcI2F8oZlYAxrFmOeaCFcRjCwsDWr0=
Subject key identifier:   1C:98:CE:91:DA:AE:DE:CF:74:57:1D:41:27:75:7C:96:1B:42:1B:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849780F1B50FBF6DAF1E7276A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:141c:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:1b:50:fb:f6:da:f1:e7:27:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=c4475549-b9c6-43cc-a264-f102de41ce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5b:a4:db:0e:2c:1d:51:2b:05:c2:50:d1:e5:
                    27:01:8b:3c:ac:51:9e:18:1c:f6:24:87:74:85:1c:
                    c5:e6:5a:9b:b4:c9:be:08:01:ba:26:fb:23:2d:45:
                    7d:35:a3:4b:70:72:bb:09:5c:85:c0:94:98:c8:83:
                    e8:8a:1e:14:e3:4f:5d:c6:1f:9f:dd:52:fe:fe:e1:
                    19:5e:40:7b:5b:d9:02:9e:7b:02:97:32:5e:6f:d6:
                    c2:e1:a4:12:35:e8:d5:b1:b1:e8:dd:fe:a2:59:ed:
                    61:9c:03:17:15:35:b7:24:c8:e3:b3:fe:0a:e4:cd:
                    e3:55:fd:de:4c:73:5e:2c:8f:b8:ed:2e:41:ac:15:
                    2d:ef:e3:63:3d:11:14:26:51:ae:ef:0f:6a:c4:9e:
                    d5:13:18:95:0b:ed:4b:92:f6:04:e6:05:fd:36:de:
                    9b:df:d6:58:ce:94:0c:c9:3c:51:92:a0:e9:d1:f4:
                    43:25:a3:dd:fe:7e:db:f0:e1:f0:23:d1:20:23:c2:
                    de:70:ba:13:1f:f4:bb:05:c8:76:5f:10:93:c8:00:
                    61:0b:e0:08:3f:81:e4:c2:7c:81:5a:af:a5:b4:27:
                    07:4a:53:25:29:2f:79:fb:f5:96:0c:fc:51:06:72:
                    1c:d7:43:09:78:ac:96:b8:9e:45:61:42:9e:80:8d:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:98:CE:91:DA:AE:DE:CF:74:57:1D:41:27:75:7C:96:1B:42:1B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494c5f95-2d1d-3fb3-ab43-5d1d56f2ac35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:c4:8b:e5:88:19:32:1b:d7:e5:b9:da:8d:b3:fa:60:09:
         d1:09:9b:7b:09:54:44:43:de:33:f8:fb:8b:e2:9f:00:15:c8:
         8c:1e:cc:5a:e3:15:56:90:09:e8:c1:35:6e:f1:dc:52:74:2c:
         bc:a5:af:4d:4e:9b:95:46:d1:a5:4b:4c:2c:e2:c8:0a:69:d0:
         ac:7c:58:df:f5:12:aa:07:bd:de:be:7b:43:bf:c4:b0:e3:33:
         00:07:ca:35:96:ba:1d:e7:36:b6:f2:b1:08:4d:bf:8c:f6:2d:
         ee:89:d9:cc:bb:4d:83:8a:2c:92:a7:e9:3b:8c:92:25:1c:38:
         7e:9b:2e:d0:e8:b8:4b:5f:ea:b0:37:d0:58:92:29:03:19:d6:
         54:e4:5e:ef:22:44:e6:21:e4:cf:a2:b0:39:eb:1f:5f:21:99:
         43:e3:e4:15:eb:77:9b:9d:89:4b:10:48:cd:94:76:79:53:45:
         08:7d:ae:86:b2:ce:70:61:1a:ba:74:4f:f7:47:27:48:d3:4b:
         c6:ab:b9:96:50:02:92:f1:e8:20:d7:3e:f6:69:33:48:98:73:
         c5:b4:44:d9:c4:11:ff:e9:79:d0:a1:50:89:b4:a3:97:64:4f:
         04:e6:3d:f4:77:d9:b2:4b:a0:45:85:6b:4e:44:36:e1:3e:1a:
         18:75:fc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:58 2025 by rpki-client on console.sobornost.net