Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa
File:                     897074be-6233-32df-a4ab-14bb263538b9.roa (raw, json)
Hash identifier:          D98HAoWvbMp8o0aYR5xKg9NOGggdHJVWerbrshJJLgM=
Subject key identifier:   4A:C1:3B:E5:61:D7:77:3D:B0:0C:CC:39:8C:AC:1B:B3:75:C4:05:7A
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F43285849780F0A93A95B3DF7D76BA8A0
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     1011
IP address blocks:        2602:fac8::/36 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0a:93:a9:5b:3d:f7:d7:6b:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=5ae9109c-ffa0-40e6-a3ba-55474f9e41a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:ac:94:9e:66:07:4b:a1:00:09:e1:e9:50:
                    ee:0e:f3:bc:fc:e5:3f:b9:f4:e4:44:33:2a:be:42:
                    0c:08:6a:20:53:da:85:2a:21:20:70:03:aa:7d:c7:
                    e9:63:a2:fc:d7:b7:4a:a5:46:76:53:a1:c3:dc:23:
                    7b:2a:db:84:b4:ad:21:41:0e:a1:6f:18:1d:b4:86:
                    ef:8b:bb:27:6f:20:6c:43:be:cd:d7:73:ed:e7:dd:
                    10:6a:18:bb:6f:fd:b0:60:9c:34:28:f3:f1:bf:27:
                    9f:85:46:39:cf:2f:57:4e:03:89:d0:a3:d1:f7:10:
                    40:82:c8:79:4c:3c:c5:8c:90:b9:ba:5e:15:9b:01:
                    e6:8b:36:92:5a:29:9f:26:1b:08:76:ec:38:17:0f:
                    39:a8:6a:1a:76:8d:25:58:44:1b:04:61:59:9e:1b:
                    91:33:e8:81:b6:0d:94:b8:1d:78:55:9c:5a:1e:2e:
                    ff:a6:13:6f:6f:b8:55:c3:0f:79:42:21:af:66:eb:
                    69:55:04:a4:d1:67:0c:e5:e9:0f:0c:14:0a:49:d2:
                    5b:12:89:ca:26:7a:e6:a6:1a:93:b6:5a:73:f6:ed:
                    a4:db:d6:0f:f9:d8:6e:cd:6f:da:b1:ea:70:71:84:
                    5b:e2:25:7a:37:ec:18:2a:08:ad:4b:28:9f:ac:8f:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:3B:E5:61:D7:77:3D:B0:0C:CC:39:8C:AC:1B:B3:75:C4:05:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/897074be-6233-32df-a4ab-14bb263538b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:87:2a:f5:06:c4:fa:19:b7:fd:17:c2:3c:bc:fd:2d:26:07:
         a7:28:d3:08:fb:68:1f:53:20:78:85:5b:e9:4d:9c:4c:46:bf:
         ae:d4:19:26:64:09:c7:91:fd:a7:78:6f:b0:06:76:eb:76:cd:
         a5:5a:ba:47:bf:1a:df:ff:01:b5:22:39:90:a3:f3:02:53:de:
         a3:30:57:3c:ef:a4:16:a8:0e:fa:cc:3c:f7:a6:76:7d:61:fa:
         c1:49:57:fe:5c:30:f9:21:03:8e:5c:4d:58:06:61:12:01:6d:
         f9:5e:d6:67:29:56:b1:e4:ea:c5:3e:34:6c:77:e6:b7:32:ee:
         02:e6:8f:c8:b9:f5:27:f1:ca:f0:b0:58:c2:e4:e4:b7:2d:96:
         cb:0e:0c:82:cb:4f:c0:ac:f3:bc:27:22:ea:52:26:15:31:c7:
         86:cf:eb:72:4c:cb:3c:76:f2:3d:d0:b4:6f:06:30:3e:b5:b4:
         d8:e1:07:4a:58:d3:4b:b6:7d:b5:85:82:c4:b3:14:99:05:5f:
         bb:c6:83:76:c7:80:f6:20:2e:31:28:40:c4:5f:9a:85:e9:72:
         1e:56:34:f8:fd:13:84:73:8f:e0:93:c1:20:32:5b:05:6e:48:
         f7:b1:f3:f9:8f:58:17:4f:d3:ae:ca:b2:52:5a:7b:41:b2:9b:
         9a:5c:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:20 2025 by rpki-client on console.sobornost.net