Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ee541b4-0c4f-3680-ac99-9f3fc30044f5.roa
File:                     3ee541b4-0c4f-3680-ac99-9f3fc30044f5.roa (raw, json)
Hash identifier:          VXJfWfSkoPkzW/Z63tmggSHXyixR+tyBypmOqEDUEfo=
Subject key identifier:   F8:D8:1D:AD:46:59:E8:09:DA:17:D0:7C:CB:C3:66:14:2C:A9:98:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7DA5D233A66F1FEDE9D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ee541b4-0c4f-3680-ac99-9f3fc30044f5.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        2603:300c:1e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:da:5d:23:3a:66:f1:fe:de:9d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=220fdf00-50d8-477a-b2d4-0aed6faae7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:76:2b:c9:67:59:60:45:2d:63:9c:1f:b9:93:
                    0a:f4:a6:ca:d2:2f:00:f0:25:e4:d5:a6:b2:d8:56:
                    b6:75:56:5a:1f:4e:9f:4b:3e:81:c3:ef:3d:45:96:
                    c3:8b:46:ff:4a:5a:e1:f8:a8:ee:ec:6b:1e:32:7e:
                    5f:da:c3:11:de:1d:90:cb:f9:44:0a:f8:27:3c:33:
                    bb:fa:48:dd:29:16:9e:89:27:be:e5:08:aa:11:c1:
                    30:51:7e:63:12:dc:32:45:b6:e1:db:04:f0:56:7a:
                    83:e7:f7:c5:31:16:70:a2:ec:ff:4e:ca:9d:68:ff:
                    30:ce:e4:2a:96:e7:a2:1b:bf:3d:93:1f:2c:77:63:
                    72:2f:e9:c7:2f:c0:b4:0f:c9:74:82:27:7e:84:96:
                    d5:8f:1d:82:45:13:c0:a7:ac:81:ea:19:2e:5d:9a:
                    d2:b3:8b:12:69:fe:6c:a5:30:ad:fb:60:16:69:b2:
                    98:f0:ec:3e:d5:6c:ed:1b:d7:dc:49:23:76:1d:70:
                    cb:f1:ef:26:0c:3e:1c:36:e8:c1:0a:ba:b0:fe:c6:
                    0d:2d:82:21:14:9d:08:b3:bf:6b:82:e4:9e:a0:61:
                    c9:9d:5f:d9:e0:72:6b:32:3b:50:a5:e7:14:ab:7f:
                    c6:d9:49:d6:3a:aa:ec:fb:75:1e:6e:8a:3e:90:c4:
                    f0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:1D:AD:46:59:E8:09:DA:17:D0:7C:CB:C3:66:14:2C:A9:98:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ee541b4-0c4f-3680-ac99-9f3fc30044f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:50:c7:5d:69:9e:dc:c4:66:04:b2:bb:75:ba:7e:fc:50:1d:
         16:d4:fb:76:f1:e8:1f:ae:ce:ab:ce:3d:50:32:65:3d:22:85:
         b4:df:98:19:71:ad:ed:11:37:00:19:12:6f:7e:b1:44:51:3b:
         13:7c:ec:48:30:cd:17:9c:d6:f6:c3:d3:7b:77:20:b6:07:c4:
         e3:5b:a2:6f:b6:a4:c2:84:ee:a3:97:fa:af:c8:02:c5:98:ad:
         8a:03:18:db:1f:78:29:2c:16:a3:17:bf:a9:d6:8b:28:4f:1e:
         8d:1d:5b:65:64:df:58:cd:f4:ac:4c:67:2b:2d:13:b0:b2:31:
         9c:ea:4d:2d:a2:ca:93:7f:a4:1e:29:d2:b2:4a:7f:35:b4:20:
         ca:3e:e0:ee:f4:07:1f:71:e2:ad:f5:29:20:74:a1:21:20:1d:
         22:76:7d:88:9b:3a:7c:a3:f9:b8:f3:42:f2:7e:a0:55:3f:b0:
         7d:c5:ae:33:5b:ce:80:0d:cb:9a:5d:5a:09:2b:7e:f7:6e:18:
         55:ba:ef:e6:f1:12:d9:f4:a5:b3:47:fe:97:f0:5e:b3:73:3f:
         36:45:14:82:29:87:b3:06:18:c4:a0:14:fa:ff:d8:62:cd:8e:
         71:98:c9:9d:8d:73:36:4c:f0:9c:c5:57:4f:42:d7:9b:90:9a:
         69:4a:06:14
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj099pdIzpm8f7enWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MjIwZmRmMDAtNTBkOC00NzdhLWIyZDQtMGFlZDZmYWFlN2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHYryWdZYEUtY5wfuZMK9KbK0i8A8CXk1aay
2Fa2dVZaH06fSz6Bw+89RZbDi0b/Slrh+Kju7GseMn5f2sMR3h2Qy/lECvgnPDO7
+kjdKRaeiSe+5QiqEcEwUX5jEtwyRbbh2wTwVnqD5/fFMRZwouz/TsqdaP8wzuQq
lueiG789kx8sd2NyL+nHL8C0D8l0gid+hJbVjx2CRRPAp6yB6hkuXZrSs4sSaf5s
pTCt+2AWabKY8Ow+1WztG9fcSSN2HXDL8e8mDD4cNujBCrqw/sYNLYIhFJ0Is79r
guSeoGHJnV/Z4HJrMjtQpecUq3/G2UnWOqrs+3Ueboo+kMTwHwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPjYHa1GWegJ2hfQfMvDZhQsqZiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2VlNTQxYjQtMGM0Zi0z
NjgwLWFjOTktOWYzZmMzMDA0NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDB4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGVDHXWme3MRmBLK7dbp+/FAdFtT7dvHoH67Oq849UDJlPSKFtN+Y
GXGt7RE3ABkSb36xRFE7E3zsSDDNF5zW9sPTe3cgtgfE41uib7akwoTuo5f6r8gC
xZitigMY2x94KSwWoxe/qdaLKE8ejR1bZWTfWM30rExnKy0TsLIxnOpNLaLKk3+k
HinSskp/NbQgyj7g7vQHH3HirfUpIHShISAdInZ9iJs6fKP5uPNC8n6gVT+wfcWu
M1vOgA3Lml1aCSt+924YVbrv5vES2fSls0f+l/Bes3M/NkUUgimHswYYxKAU+v/Y
Ys2OcZjJnY1zNkzwnMVXT0LXm5CaaUoGFA==
-----END CERTIFICATE-----