Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa
File:                     43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa (raw, json)
Hash identifier:          FQ1XjVnbrORFlLNuiMAXvXCG/Vn+FX9qd9ZuNdmlcTM=
Subject key identifier:   03:5E:95:A4:95:8C:9C:C3:0C:AB:99:F7:2B:5C:BE:17:1B:A9:E4:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F77AA03B2897BEE5A3CE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        2603:3015:4200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:7a:a0:3b:28:97:be:e5:a3:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=ea94e80f-27fb-4da7-8945-1ea10dc5d03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:b1:0d:d2:1f:c0:c2:1d:0c:d4:71:95:b5:
                    66:01:80:c6:c4:10:95:0e:76:19:35:9a:3f:c6:7e:
                    24:4b:02:3c:02:29:be:92:da:83:9b:4e:e2:08:23:
                    64:19:47:8a:e3:c9:61:e9:0f:d6:2c:96:19:32:f1:
                    47:f5:de:b7:b0:ff:3d:31:82:82:22:77:4d:54:2d:
                    cf:c3:ab:5b:50:b8:54:99:a7:d3:b1:0e:d1:2a:85:
                    bf:01:2d:a4:e0:13:fd:18:cd:67:81:f2:3e:b4:63:
                    27:ac:e3:59:65:35:8e:ab:08:72:e3:43:19:fa:30:
                    30:32:01:20:66:ba:c9:8e:3f:64:ff:bd:25:bb:92:
                    94:41:2a:61:1e:98:99:8a:1d:e7:d6:db:2f:58:70:
                    00:e2:3a:6e:89:b8:a7:f2:08:31:9b:bb:ba:53:ad:
                    b1:c3:eb:43:a5:f8:ca:ca:d5:ec:22:e6:89:f5:e6:
                    4e:9d:b2:4c:34:14:7e:0c:a7:a4:fc:f7:f4:e7:f2:
                    5b:71:d7:0b:76:db:c0:80:cb:33:28:db:e4:52:11:
                    9b:49:1e:14:d3:d4:08:86:d7:f9:77:92:a1:e2:7b:
                    e5:8d:d2:fc:ca:15:f9:cc:eb:db:4e:09:bd:ac:93:
                    90:c8:95:8d:3d:0e:5a:ca:0b:c0:d3:0a:b1:0e:20:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:95:A4:95:8C:9C:C3:0C:AB:99:F7:2B:5C:BE:17:1B:A9:E4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:19:2c:9c:4f:e2:2a:51:05:ab:63:4e:66:29:d3:4d:98:c2:
         67:6c:8b:08:a1:59:29:79:6c:e1:68:45:1f:cc:8d:e8:66:80:
         45:ac:4d:6c:92:bb:dd:9c:4e:5f:22:38:19:e6:a2:40:0b:27:
         80:4f:96:50:0f:b3:8e:73:d8:6f:21:e9:8b:95:23:ed:4d:bb:
         80:32:61:b7:5f:aa:fe:38:38:a2:54:07:a2:71:30:07:f1:93:
         7b:04:27:5a:eb:8a:e8:eb:7d:26:1c:b9:e3:ca:d5:37:5b:f5:
         a9:97:46:d1:72:a7:3f:d1:43:0e:a9:54:d2:20:e9:61:89:ea:
         cf:c6:a2:de:69:3e:c8:1f:ca:63:df:4c:69:ac:d9:ee:16:1f:
         17:84:03:0a:2a:d8:f6:2d:8e:32:18:e4:c7:c6:95:06:2b:84:
         f7:59:46:4f:68:16:8e:7e:88:8a:52:69:3d:21:d0:0b:07:1f:
         b2:d5:43:bb:6e:1d:e9:df:bf:70:18:ef:f1:58:2d:c2:89:5f:
         ae:74:06:59:57:dd:c1:89:d2:d9:cb:dc:16:6e:9f:0d:a8:32:
         d4:25:54:aa:3a:a0:3b:53:ce:26:ac:74:fc:2c:3f:0a:7b:d8:
         86:1f:2f:e7:67:c2:1b:e1:fd:ce:81:2d:6e:df:7a:1e:ee:2c:
         41:20:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:14:39 2025 by rpki-client