Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418e260b-d898-3ca9-b609-cee3e9ba44ea.roa
File:                     418e260b-d898-3ca9-b609-cee3e9ba44ea.roa (raw, json)
Hash identifier:          /Fh17q06l7DHJIF05jvlQzmb1OBEw+pee125BtWfEUU=
Subject key identifier:   82:3B:D0:6D:E1:70:9D:84:AA:81:90:D4:6D:44:28:E5:D4:6F:2B:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848AF2BB225D27E146F14BCDA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418e260b-d898-3ca9-b609-cee3e9ba44ea.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     33661
IP address blocks:        2603:2700::/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:b2:25:d2:7e:14:6f:14:bc:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=3afb500f-107a-403c-bb44-f37fcd9b4457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5a:ec:8f:64:56:17:ed:e0:34:f2:da:6f:e7:
                    47:74:85:f3:66:2a:2d:02:cf:3a:1f:5d:3a:ec:97:
                    01:37:26:03:f0:be:f2:fe:fb:c4:aa:cf:32:5a:04:
                    36:42:a2:15:52:4c:87:fc:a5:76:95:78:2b:b3:91:
                    a0:d1:fe:09:33:0f:6d:fc:fc:f0:06:7a:66:ba:4d:
                    8e:54:d3:68:8a:d3:3a:47:a6:c7:97:38:11:2f:89:
                    7a:f3:76:61:6f:45:f0:15:92:66:3c:b2:df:ae:cc:
                    57:19:f9:5f:74:18:62:1f:ba:18:94:e5:81:44:4d:
                    e3:d3:72:04:b3:ae:80:7c:4c:f6:6c:82:65:e7:8c:
                    41:d3:5c:16:b7:d9:fb:1f:a2:c7:93:51:0d:05:4e:
                    2e:24:45:f7:55:dc:68:57:9f:f0:59:bb:73:ba:73:
                    b0:13:1c:bd:02:50:d8:b9:44:be:fc:32:f0:69:73:
                    1f:16:e8:e1:27:36:41:89:03:ca:9f:93:00:15:fb:
                    ea:79:ad:5d:d7:7a:3a:77:c5:dd:cf:31:e8:bb:71:
                    4d:52:2d:95:56:3f:2b:a1:48:48:1a:0a:6a:8c:72:
                    03:21:62:e1:5c:0e:7f:16:09:2a:51:97:e5:7b:7b:
                    48:6c:c9:da:6d:36:10:d0:13:1d:fc:bd:81:5c:04:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3B:D0:6D:E1:70:9D:84:AA:81:90:D4:6D:44:28:E5:D4:6F:2B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418e260b-d898-3ca9-b609-cee3e9ba44ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2700::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:f0:ba:72:a0:75:c7:46:70:c0:24:d3:9c:b2:f1:fe:52:
         cc:a9:f4:f8:93:c6:60:3d:bf:a2:87:5f:22:41:7d:21:2b:fd:
         6a:90:cb:26:c9:e9:7d:57:25:fa:b3:43:e3:9f:f6:63:11:83:
         99:b7:0f:e1:d7:6f:5b:98:84:8c:44:4b:e0:54:ae:eb:1e:53:
         45:14:d9:76:06:3c:41:30:3b:31:18:67:53:33:52:7c:d3:b2:
         c0:62:0b:f5:2d:d5:9b:03:1d:c7:61:85:f0:5e:d4:e7:99:80:
         5a:cc:1e:58:0d:17:3b:8b:19:2b:7c:9b:55:4f:e6:dd:6c:94:
         3e:10:06:3b:d9:08:ac:fc:08:e4:3a:4b:8e:ed:18:60:36:53:
         16:cf:19:e8:94:17:6d:68:33:5c:55:6b:f0:70:ee:b5:6c:ff:
         c9:2b:a9:6a:78:ae:3f:3f:89:f4:f7:25:1d:46:8f:e1:fe:8d:
         eb:40:d5:e0:46:2f:a8:dd:c2:8f:de:5f:f2:b7:33:24:1d:f1:
         58:10:f1:48:78:9e:bc:d3:08:47:66:b6:f0:f4:20:83:78:fd:
         2f:f9:3c:85:c2:5b:dd:0d:4c:4c:29:cc:b7:48:40:92:34:df:
         ad:4d:69:48:92:a4:00:f2:32:4a:a2:0e:18:46:9e:a3:6d:25:
         55:5c:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:05 2025 by rpki-client