Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa
File:                     41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa (raw, json)
Hash identifier:          Nc/jpM8Quxy34TYUBiHjj8tOw71skccUrlauF3J0v/8=
Subject key identifier:   D7:B8:D8:B8:4A:BB:26:68:13:09:CB:AE:6A:DD:56:00:FF:C3:20:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2448C5DF21D63B829B7920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        2600:4040:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:48:c5:df:21:d6:3b:82:9b:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8fc88fba-b4f5-46b1-9cb9-303a0d4eab94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:11:95:d1:9a:85:75:b9:a0:aa:eb:cf:a6:1d:
                    43:33:cb:b6:d0:6c:e4:4f:35:32:8b:da:e9:33:7d:
                    72:4b:08:2f:d4:16:cc:01:8a:2e:a4:a1:9a:c4:36:
                    82:f2:d9:7e:95:86:1b:8c:19:15:3e:a8:f5:5f:65:
                    02:45:77:8c:94:2b:80:28:13:e1:df:2d:c1:34:0b:
                    a1:41:a5:c8:80:21:fe:d0:73:16:ff:32:04:68:44:
                    45:75:3d:25:1e:2c:25:44:c0:70:a4:2b:92:8e:43:
                    c5:4f:af:80:ed:4a:05:3b:83:70:a0:47:1f:1c:8d:
                    5a:a4:10:3f:d7:3e:fd:ec:90:7d:38:84:e6:72:fb:
                    7c:64:fc:75:8d:fa:f0:40:e9:06:24:04:c1:11:76:
                    63:69:c7:b5:a5:67:be:63:77:f5:69:de:b9:a5:84:
                    54:f7:dd:1c:68:cc:6e:98:e7:4b:4a:0c:94:37:1a:
                    62:60:f6:ed:44:3d:3a:7a:aa:ec:a7:f4:d7:e5:7c:
                    00:ca:04:50:10:e4:f0:4a:6b:f3:dd:e8:e8:6c:d5:
                    8a:e8:cc:77:55:ca:77:66:6e:c9:fb:65:f0:e6:3b:
                    dc:b1:22:21:58:57:fe:2b:32:f9:6c:6e:6e:cf:e6:
                    ea:d6:2e:e7:36:8b:82:76:68:31:7e:51:78:8d:87:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B8:D8:B8:4A:BB:26:68:13:09:CB:AE:6A:DD:56:00:FF:C3:20:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41bf9bdc-2c8e-313f-bfe0-23bdf9865186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:b2:7d:aa:75:2c:19:39:b8:db:a0:19:72:05:4f:c1:95:
         59:7d:16:06:30:88:d5:4e:ec:6d:cd:45:e6:0e:c9:e7:8e:62:
         c3:56:22:2c:77:28:50:63:3b:9d:5a:9c:3a:6e:a6:8d:b1:8c:
         31:1f:47:1f:8a:de:50:56:47:3c:7a:0d:18:34:58:da:41:53:
         c5:19:73:c8:6a:71:7e:a3:ea:c3:c4:96:b8:51:2f:61:bd:25:
         17:30:88:9b:d6:57:af:46:65:01:ff:85:46:8c:21:97:d1:c7:
         42:40:81:89:15:4f:1c:4f:ed:45:ad:26:80:9e:ad:b2:8c:78:
         0a:8f:d0:8a:9b:0c:3f:c6:ea:d9:a8:8d:2e:69:98:7d:a8:9e:
         ce:10:6c:fe:3d:e9:59:9f:fd:d5:e3:a6:bb:49:6f:be:98:1e:
         d7:76:9c:14:e4:9a:5b:c5:ae:35:00:3d:33:f4:62:fe:08:b5:
         bc:fd:01:47:f0:96:6e:a3:4c:34:3c:f6:c6:ee:a0:8f:0f:00:
         d2:fb:79:da:91:7a:57:33:03:30:2b:fb:4c:86:95:3b:32:9f:
         c2:a3:07:77:62:8a:68:aa:30:a4:b6:60:db:e3:29:1a:74:26:
         40:16:04:eb:08:14:06:dd:f7:ad:d4:8c:07:86:b9:1a:93:c7:
         ff:01:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:39 2025 by rpki-client on console.sobornost.net