Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa
File:                     43384fc3-deb1-37e9-988c-78d975951fe7.roa (raw, json)
Hash identifier:          QRYe5akbrw56xRH3cowRG6z5aV6tUG5AxnhcWSXml6Y=
Subject key identifier:   CF:0E:80:94:7C:97:15:4C:DF:24:B6:57:84:DE:AB:00:C5:82:B7:5F
Certificate issuer:       /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
Certificate serial:       010D0C9F4328584953C44AC68CCF692878D53840
Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     19382
IP address blocks:        2620:13c:e000::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4a:c6:8c:cf:69:28:78:d5:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=a8afdb59-f39b-467d-b933-ed8cb14e753e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:2c:3a:46:f3:c2:ca:fb:cc:ff:b0:29:72:
                    07:6f:c4:1d:e3:b0:de:f3:61:c7:6b:40:df:9a:b8:
                    49:e7:b2:fa:8a:16:97:03:4d:00:3f:f6:91:1e:27:
                    60:05:e8:16:c3:a0:c4:91:88:85:0b:3b:30:9a:31:
                    45:f0:b5:58:a5:06:fc:44:1b:db:05:ec:32:f4:10:
                    c5:5c:25:fd:2a:c6:d4:ac:07:69:ce:a4:b5:4b:77:
                    29:18:ff:33:4f:11:7d:9e:38:d1:e7:77:a7:9b:00:
                    ca:47:7d:cc:e7:b0:17:f9:92:15:47:00:26:1b:f8:
                    db:a9:59:38:ed:6c:1a:ed:e1:e7:68:4a:d8:5b:dc:
                    fb:1a:fd:32:68:07:86:28:7f:26:14:3e:07:b5:fe:
                    ca:44:e1:a1:8d:05:40:55:f4:2d:81:92:89:5c:69:
                    4d:fb:98:c8:4a:29:b0:dc:d3:c9:14:d1:59:d1:75:
                    d8:97:b1:97:07:24:4f:e0:12:66:05:fc:4e:cf:eb:
                    ee:ab:52:13:46:a1:e0:90:99:03:7f:34:71:0c:e6:
                    ff:8b:72:6f:41:68:6c:df:eb:45:f9:80:16:fb:77:
                    a0:4b:0b:fe:82:ce:dc:a5:85:da:f4:e7:8a:f7:02:
                    cc:0e:1e:a0:ac:88:a5:a0:fc:38:67:4b:34:62:cd:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:80:94:7C:97:15:4C:DF:24:B6:57:84:DE:AB:00:C5:82:B7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl

            X509v3 Authority Key Identifier:
                keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13c:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:b0:70:30:16:af:ef:d3:a2:b1:7b:6a:ba:9e:b9:e1:0f:
         76:0e:65:60:85:62:8e:9a:82:62:e4:e2:80:c5:67:d0:ed:a2:
         6a:2c:b1:96:df:48:6e:e8:d7:05:2b:f3:97:28:86:a2:d4:16:
         9f:da:b7:87:b8:66:5a:3c:fa:ac:13:6e:63:b4:f5:3f:92:8d:
         0d:dc:de:63:29:9f:be:25:25:74:0f:60:d6:e1:19:81:68:26:
         de:17:cf:8e:83:3c:62:b7:bc:33:36:e6:9a:fc:5e:69:66:96:
         33:9f:6c:76:90:b3:4a:03:38:1d:85:b7:34:31:bd:38:1b:62:
         5b:8a:3f:0d:c1:51:47:a0:df:f4:a2:af:34:5c:90:9f:73:b5:
         f6:cb:95:d7:27:49:b1:8e:67:85:70:d4:e3:bc:57:68:55:18:
         57:cf:ed:7e:b2:45:d3:58:73:45:48:a4:44:74:72:91:5f:80:
         02:d2:89:02:06:e4:86:e5:d0:64:fd:5f:76:1e:10:b2:35:c3:
         61:bd:9e:69:7c:79:a9:6c:a0:f1:ab:cf:46:c7:83:e1:13:70:
         8f:29:36:71:18:7a:fc:e6:67:c9:c3:a4:c1:c2:c9:84:2b:f0:
         65:55:e2:63:04:93:f2:de:fa:19:38:23:cc:29:3c:59:28:1e:
         fb:3c:fa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net