Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa
File:                     2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa (raw, json)
Hash identifier:          gMO8X86NuO31lCNqty/bZGnbtpRh9cQEuqwUtjQhD3w=
Subject key identifier:   F2:A1:67:89:53:01:79:CA:0E:FA:ED:21:76:16:ED:E9:FD:8A:EC:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849833A1BB564FC4583A418FF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        2600:100d:b0ca::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:1b:b5:64:fc:45:83:a4:18:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=47734aca-9322-4aa4-80c2-b66c6325ae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:09:9d:4e:ac:73:a5:cf:76:95:75:07:4f:
                    e6:e7:6e:59:3a:ad:48:7c:77:87:06:11:6c:c6:82:
                    24:0a:d0:d3:40:6e:dc:a4:1e:62:83:eb:e0:a5:9d:
                    3c:c5:23:3d:59:01:03:de:9a:1f:11:22:6e:b2:bd:
                    15:2f:cf:33:03:18:e9:30:a1:48:d4:9a:d6:f7:7e:
                    6a:e4:6c:bf:4f:99:0b:56:ce:e0:23:e9:58:9e:73:
                    e6:1e:f4:20:d0:c9:dd:af:a8:6d:ab:10:43:cf:f6:
                    20:0f:59:5f:a4:bb:c1:25:15:bb:8b:6c:dc:c4:a4:
                    8a:39:a1:4e:1d:5f:4a:b8:49:6e:ff:53:2a:29:67:
                    9f:dc:97:dc:25:6f:89:c0:9e:f2:26:5d:c0:4f:e4:
                    17:3d:d5:16:ff:0f:a8:12:df:22:78:4a:d5:ee:ad:
                    8b:20:23:f3:73:12:0c:e8:e9:0d:14:14:65:ec:59:
                    f6:e6:14:ad:54:f2:1f:a4:34:a7:bf:1e:ed:00:9a:
                    ed:31:89:51:99:fd:00:46:3b:f6:a4:05:7f:b1:40:
                    f3:89:99:97:82:99:b6:a9:8c:cf:ad:30:8f:da:3e:
                    90:ac:bd:85:1d:37:3e:6e:8d:97:ec:56:ee:89:c1:
                    3c:b2:ff:4f:70:07:f7:e8:a4:b9:21:31:2f:15:f2:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:67:89:53:01:79:CA:0E:FA:ED:21:76:16:ED:E9:FD:8A:EC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2db68ce9-7785-3e49-9ed5-d00ea04223fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0ca::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:d9:35:b6:b2:c4:17:80:2c:b9:59:22:dc:23:0f:89:2e:
         5f:86:10:c3:fc:2e:76:27:bb:0c:0e:e7:34:5e:ff:88:15:4a:
         52:ca:c1:28:f6:0f:b5:6d:01:d0:49:97:ce:10:7f:d5:45:f0:
         ea:bb:07:c2:8c:2b:cc:46:d2:81:dc:a9:9b:f1:19:ea:c4:14:
         68:8e:f6:52:90:58:da:c1:0c:3c:88:be:dd:4b:da:77:4e:e5:
         0b:09:2a:82:09:f9:e6:b7:57:17:69:ba:42:84:95:6f:d7:22:
         85:63:10:a8:8b:e1:be:d1:69:4a:f8:50:e9:3c:7a:1c:32:5f:
         e4:1d:44:b4:c3:e8:1c:d4:0e:4f:e2:25:30:40:c3:02:16:c9:
         90:df:51:ac:b6:a5:b4:55:20:c9:45:ac:5e:1b:84:3a:ab:44:
         68:47:36:3d:89:da:86:6d:22:99:79:f8:72:94:08:79:da:a5:
         6f:49:07:34:da:43:5b:67:42:47:d0:37:cd:d2:58:7f:cf:88:
         7f:77:e5:6d:53:ef:e8:c0:37:1f:7a:b4:da:39:db:6d:ae:23:
         0d:1f:33:b0:32:d3:16:ca:7d:f9:fe:e8:78:1c:4d:ac:a5:9d:
         aa:de:16:01:2d:9b:14:3f:bb:7b:a3:45:76:9b:35:0b:46:fd:
         a1:4e:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:25 2025 by rpki-client on console.sobornost.net