Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
File:                     bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa (raw, json)
Hash identifier:          2vFJTWhf1ba1R2fn5x7y7Rb/OlVLaVtIf8g8Bya0kMk=
Subject key identifier:   75:3F:BE:C2:A9:7C:93:F0:A3:15:A0:8A:81:36:6C:AA:21:C6:86:33
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F432858495ABEB8A296ACBDFFF0CB4C80
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     50842
IP address blocks:        2602:fb68:80::/42 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b8:a2:96:ac:bd:ff:f0:cb:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=bf99a905-578c-443f-8a01-9d614fbde1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:87:7b:d9:fd:4e:58:15:cc:5f:1f:4a:b8:
                    a5:d6:22:5b:e3:4b:b0:d6:d5:dd:60:c9:86:35:71:
                    e1:0f:27:fa:98:53:cf:e8:30:21:6f:68:7b:c3:70:
                    a7:20:3e:52:59:6f:09:24:c3:e9:20:68:1e:dc:40:
                    e4:9c:35:83:75:04:62:ab:a5:b5:20:6f:b1:2a:2c:
                    e0:4f:74:1c:4b:dd:61:13:d7:d2:68:9e:5c:bb:4b:
                    41:66:66:1b:ed:01:64:b3:e8:60:1f:b2:16:b5:c7:
                    1a:54:0c:2d:d3:2a:54:77:af:86:47:37:9f:6b:97:
                    b1:b3:20:86:f9:59:84:a9:a7:5d:aa:fd:04:69:95:
                    89:9e:f6:55:1c:78:0e:c7:da:25:e7:24:88:94:e9:
                    8b:4a:9a:f4:5c:d8:fd:69:35:48:31:89:f1:34:40:
                    dd:2e:6a:2f:54:05:29:24:ba:08:e0:55:55:85:9c:
                    19:ec:b9:0d:de:2d:02:25:4f:9a:80:59:12:8f:ab:
                    5f:9a:69:19:c5:d9:27:a5:4e:51:0d:d1:47:a1:c5:
                    d6:3f:f3:c1:c2:3e:51:b3:55:ef:db:e3:08:39:66:
                    31:cd:87:76:81:da:25:ee:66:e3:bc:83:35:50:28:
                    be:c2:16:86:24:66:20:12:d1:f2:14:eb:9e:b8:37:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:BE:C2:A9:7C:93:F0:A3:15:A0:8A:81:36:6C:AA:21:C6:86:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:40:35:aa:a6:9a:54:60:0c:43:a4:14:34:4d:af:de:20:a5:
         d3:ea:ab:e6:01:8b:18:34:8a:71:5d:83:b0:77:93:4f:01:70:
         23:92:23:13:7f:be:0c:ae:a0:58:b1:ec:72:0d:2b:80:22:00:
         26:bd:4e:df:8c:18:81:a9:24:f6:b6:77:db:d0:43:80:d7:86:
         7b:d4:86:e7:f9:0a:6d:ef:e1:ee:a1:58:e7:5d:3a:2c:b0:d7:
         53:9a:82:98:a0:05:ee:f7:86:a5:47:1d:a4:6a:8e:88:29:65:
         ce:6a:b4:3b:36:11:b7:49:aa:fb:6d:f2:e6:e8:44:ac:61:fa:
         48:27:ad:27:a4:59:cb:da:e6:2f:8b:01:7e:93:6f:66:23:78:
         ad:9f:99:c7:e9:89:f8:63:6a:d1:da:59:86:c9:dc:7f:71:a7:
         50:69:ad:ca:08:34:3e:39:9b:90:9c:39:d5:97:3f:b2:69:5f:
         d8:8d:c3:eb:99:8b:c1:c4:c8:ad:5e:3d:3b:c3:15:29:9e:29:
         ac:91:03:2f:e1:7c:56:66:51:6f:70:62:11:b7:e6:3f:dc:e3:
         a8:85:fd:40:71:95:28:90:ef:1d:ce:6c:89:05:cd:48:eb:a0:
         a8:04:4a:b7:52:d0:9f:c6:b9:d6:12:0b:69:c8:6d:37:e3:c1:
         71:a2:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net