Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04249388-f1ce-3c29-a170-b824cd12866f.roa
File:                     04249388-f1ce-3c29-a170-b824cd12866f.roa (raw, json)
Hash identifier:          QcHp6D18CZZ6RW7Zm5HlmGUFSSBgSyXG85JD0DvtPNU=
Subject key identifier:   0B:B8:C0:DA:C9:E2:EE:B4:D8:6B:68:77:28:99:87:9D:8D:18:49:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A12E0D66E895248C40900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04249388-f1ce-3c29-a170-b824cd12866f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:1009:b020::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:12:e0:d6:6e:89:52:48:c4:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=e16791f2-f82b-4343-b726-97b822f1c71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:fe:7f:41:d0:8a:be:50:9b:12:5e:36:37:
                    ff:d3:82:8f:85:48:02:39:95:e7:32:15:54:aa:67:
                    54:1b:07:c8:db:5f:ea:70:ea:70:92:1a:f9:e0:21:
                    4c:d8:0b:a0:79:60:6f:70:96:f0:22:12:38:7d:bb:
                    53:25:be:0a:90:4d:b6:ef:e9:04:33:33:83:87:2d:
                    90:1f:11:99:a7:7f:e0:87:8d:21:70:48:82:2f:07:
                    71:5b:4b:a5:fc:44:63:68:68:ea:9f:0b:cc:93:6a:
                    06:ff:58:25:0a:5a:a4:c5:f5:98:fc:09:f4:78:15:
                    95:c1:ca:92:ed:10:4a:5a:da:66:35:46:ce:3a:9b:
                    cb:32:5b:13:79:c3:32:dd:10:ff:9e:a0:87:a6:fb:
                    3b:a7:3d:bd:d9:9f:94:09:9a:e9:30:35:a3:2c:76:
                    71:af:1d:61:01:ce:b9:4a:71:d5:94:b8:0b:92:06:
                    ca:d9:09:3f:cf:73:80:e4:49:83:a1:64:1b:b1:bb:
                    c2:eb:50:f6:14:47:a0:d6:fb:d8:47:c4:89:6b:03:
                    a5:0e:c0:dd:03:db:87:ed:aa:4d:5b:64:30:ca:17:
                    f7:ba:8f:28:92:55:8a:5f:16:43:84:6a:29:a9:08:
                    bb:9d:33:6a:f7:07:e2:19:38:8e:00:d3:5c:f1:db:
                    f1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B8:C0:DA:C9:E2:EE:B4:D8:6B:68:77:28:99:87:9D:8D:18:49:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04249388-f1ce-3c29-a170-b824cd12866f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:35:e9:92:f2:4f:14:66:a5:3f:39:38:25:58:35:82:bb:77:
         ff:ad:2e:a0:c6:42:23:b5:e6:77:79:a5:36:33:59:d6:90:99:
         ad:aa:b8:28:c0:35:6e:89:e2:74:09:0e:ff:00:21:83:02:eb:
         66:60:86:ac:9e:30:b8:ed:5c:f8:1a:85:0d:8b:73:5b:4f:00:
         19:12:bb:9c:86:7f:66:59:8b:a5:5c:01:c3:cc:b8:df:c7:c1:
         b4:05:b3:68:07:2f:ef:1c:94:b5:6f:e4:23:c9:43:5f:03:d0:
         fd:c3:c7:2e:60:3c:05:ff:5e:22:eb:a2:e8:7b:4e:d6:a8:52:
         f9:a1:d7:90:2f:28:9b:4b:a5:b4:ec:40:fc:f7:eb:28:9b:e7:
         a6:17:52:43:d4:0d:23:b6:6d:27:bf:bf:a6:15:c4:84:f1:f3:
         97:b5:2e:9a:50:fb:5f:01:71:55:11:31:e3:9e:f6:11:35:7a:
         63:da:db:c5:2d:6b:44:a9:48:8c:26:f0:74:0c:b6:bc:f8:bd:
         d0:b3:f6:9c:aa:90:d1:68:c1:b7:bf:bd:1b:dc:cc:c3:29:82:
         b6:75:d1:ca:84:44:93:7c:b8:16:2e:f2:34:91:37:49:07:d0:
         e9:e6:65:6e:ad:20:d0:c6:cd:a4:9a:8e:10:ec:48:b8:1b:5c:
         26:de:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:21 2025 by rpki-client on console.sobornost.net