Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59a18149-9ebb-3919-ad8d-579775c030ff.roa
File:                     59a18149-9ebb-3919-ad8d-579775c030ff.roa (raw, json)
Hash identifier:          paAGOjyzx1Q63apiJ7Jj1w5QhlmXLA4l7CkhEK7HmOs=
Subject key identifier:   2C:3F:F9:BD:38:DF:29:F3:CA:CE:88:93:81:C7:B8:91:9F:C0:CF:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C92085E94A11D5D686CA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59a18149-9ebb-3919-ad8d-579775c030ff.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        2603:3001:2500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:92:08:5e:94:a1:1d:5d:68:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=06287272-a113-47dd-b973-5f07098f3913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c7:e9:29:6c:96:56:40:23:b0:cb:07:df:0d:
                    f8:0d:34:05:76:4e:2f:c3:99:73:86:58:8e:b0:56:
                    be:e4:c5:98:42:1f:67:53:56:05:be:bf:71:05:f0:
                    5d:2c:bf:90:17:72:bb:af:6e:8b:a3:41:72:9a:eb:
                    7c:d1:23:b2:07:ba:0b:34:ce:c8:0c:5f:4e:06:a4:
                    61:08:6d:28:a1:41:58:02:48:8f:8e:6a:9e:4d:58:
                    c2:7e:75:44:78:af:f9:ed:1d:06:21:d2:09:12:8f:
                    70:4e:f2:d6:b2:6d:44:f3:30:49:de:64:e9:3f:56:
                    2d:4c:75:e3:11:60:6d:d6:7a:43:f5:75:e0:4f:18:
                    b5:87:2c:10:eb:7d:38:8e:ba:f3:ac:9d:b9:01:58:
                    be:75:c1:26:c0:af:7d:cc:62:b6:a2:12:21:b1:d9:
                    f8:91:31:c1:b2:02:50:8b:bf:7f:6f:38:ce:b1:55:
                    8f:88:ee:ad:79:a4:d6:47:79:83:1d:57:c0:00:74:
                    bd:26:7c:1f:e5:c8:aa:9d:06:1b:78:91:3f:08:33:
                    16:3c:b4:7a:c8:01:77:e7:5d:e8:0e:1a:96:dc:cc:
                    c3:4f:79:7a:1e:41:a1:50:2d:6c:d0:e2:01:c9:ce:
                    65:d2:d9:1d:71:80:f1:d5:15:b8:14:3d:ce:07:06:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3F:F9:BD:38:DF:29:F3:CA:CE:88:93:81:C7:B8:91:9F:C0:CF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59a18149-9ebb-3919-ad8d-579775c030ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3001:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:fc:0b:a2:e7:6d:0f:01:53:a6:47:12:6d:c9:90:be:9f:
         45:67:ae:00:a4:7c:17:48:ea:69:1d:5d:bd:a5:51:9e:fd:e0:
         ad:b5:15:8b:5f:ce:64:4a:12:3f:7c:82:0d:24:c0:c1:98:7f:
         7f:c7:ac:58:dc:8f:ed:df:4f:46:79:3e:78:d5:9a:04:4d:c1:
         62:7e:4f:1e:2b:50:ad:2e:bd:49:3e:02:d3:63:2e:ff:2d:16:
         45:f3:5a:af:46:83:ef:db:2d:00:a6:be:71:f1:a4:95:f8:da:
         07:7a:85:ca:8e:53:19:37:98:c8:ce:f7:f3:a9:53:fe:e9:7b:
         e9:e4:05:eb:5c:5f:aa:05:8e:1c:8c:41:3c:16:cd:cb:27:da:
         d9:0e:43:37:ae:7f:be:3a:83:3d:39:65:19:c3:5f:13:4e:b0:
         26:fe:ed:4c:3f:bd:e2:70:3b:17:59:6b:c2:a8:d8:99:92:c8:
         5e:09:d5:55:47:05:b4:90:1a:9f:a9:b8:6b:f0:10:12:90:a5:
         df:86:4f:f9:8e:eb:65:7a:50:f4:7f:20:57:ef:24:3c:79:d2:
         89:d7:b3:96:82:de:a9:ac:f1:d1:a9:33:2f:54:25:cb:d3:14:
         96:2c:18:ac:94:2b:73:7f:a1:e0:32:fc:18:ff:99:d2:95:a7:
         e1:15:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:02 2025 by rpki-client