Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce28eceb-270e-39a3-9816-574c51641a2e.roa
File:                     ce28eceb-270e-39a3-9816-574c51641a2e.roa (raw, json)
Hash identifier:          D0K6zaZgUg+mA5Y79/N6Wy9vlRfYPFGsHBjdL9OlrI0=
Subject key identifier:   5C:39:6F:2D:45:89:52:A2:FE:A1:7E:50:60:AC:D5:76:5A:A5:1E:28
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22C30B97AB864F3FA8C6580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce28eceb-270e-39a3-9816-574c51641a2e.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7016
IP address blocks:        2603:298b:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:30:b9:7a:b8:64:f3:fa:8c:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=bd3c009c-6301-4a0e-97e3-3de27b775fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:57:f0:a7:9c:6c:f6:a2:ab:ae:a5:a9:fa:e8:
                    78:74:a4:d8:d1:6a:9c:f0:37:8a:a0:4a:71:d2:ee:
                    c8:0c:ff:c1:db:83:cb:0d:3d:3d:85:e8:7f:b2:0e:
                    df:ea:75:fe:f0:5b:0d:61:16:8c:5f:d7:c0:ba:5b:
                    fe:85:ff:23:85:94:2e:8a:0c:06:83:66:57:d0:66:
                    b7:cd:05:e9:e0:7c:de:34:c6:84:df:72:0d:c8:28:
                    74:35:b0:ac:e9:6c:6b:24:c7:72:a7:75:72:95:14:
                    f1:77:08:9e:02:cc:ba:b7:56:b1:31:3a:3a:a4:cb:
                    78:47:78:f7:0a:97:0e:9a:2f:8c:10:95:e7:66:9a:
                    46:dc:0d:1f:48:0b:67:b9:88:5a:12:1d:0b:29:81:
                    71:05:ab:45:bf:1b:0e:8e:45:93:ba:73:15:ca:35:
                    ee:59:45:1b:3a:bd:29:93:5f:1e:36:df:93:e2:ae:
                    b3:9c:96:68:a4:78:01:f8:2b:f1:f8:4e:ec:30:5b:
                    f6:e7:58:f9:62:e0:29:76:76:af:28:62:64:72:f5:
                    60:4e:ae:54:3b:63:09:56:97:76:1a:a0:4d:26:d5:
                    8d:37:21:6b:f6:0c:41:38:4e:77:84:ea:21:d3:17:
                    9f:c8:d7:be:f0:91:ca:d2:3b:b2:ee:dd:ad:ca:6c:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:6F:2D:45:89:52:A2:FE:A1:7E:50:60:AC:D5:76:5A:A5:1E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce28eceb-270e-39a3-9816-574c51641a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:298b:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:26:42:ff:a4:53:1f:3e:47:7e:58:d7:a1:1a:93:e3:df:e6:
         99:d4:7b:04:8c:66:82:b2:3f:a0:ad:0a:b6:7c:18:a9:0f:f8:
         15:dc:ab:15:b8:d0:10:b1:23:5e:2a:b3:2e:9c:10:d5:ed:6e:
         7e:67:58:ad:05:3c:e9:02:a7:82:97:f5:bc:34:c0:01:b9:aa:
         8f:75:ec:01:ee:5a:ad:56:9e:77:71:d3:62:6f:48:d2:34:4d:
         36:b4:c0:60:3e:e9:c4:c0:95:2f:80:56:8b:e4:ac:18:4a:12:
         1d:c9:44:cc:0c:4a:3a:e1:31:a1:7c:6a:f1:ba:c5:a1:a0:12:
         ae:6a:a0:08:78:99:f0:50:4d:b9:ec:e8:73:71:0b:04:49:39:
         05:a8:12:f3:75:d7:f4:f2:a5:57:e9:b4:c9:0b:77:ab:ed:29:
         4e:f1:a5:2f:e8:f8:a6:c1:93:9b:9f:52:3b:3a:91:23:e1:52:
         8d:c1:62:a6:2a:88:7f:7e:fa:6a:04:88:bc:d7:e4:37:06:8d:
         aa:18:6a:68:b5:67:fa:d3:ec:cb:d1:bd:5e:c7:dc:7e:b6:02:
         26:10:6a:13:23:a9:0a:56:b3:b2:14:90:39:c6:16:31:3d:32:
         5c:d3:6f:e0:3e:17:eb:af:2b:8d:8e:9e:d6:71:8b:f9:f0:94:
         80:73:3b:8b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjyLDC5erhk8/qMZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YmQzYzAwOWMtNjMwMS00YTBlLTk3ZTMtM2RlMjdiNzc1ZmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ffwp5xs9qKrrqWp+uh4dKTY0Wqc8DeKoEpx
0u7IDP/B24PLDT09heh/sg7f6nX+8FsNYRaMX9fAulv+hf8jhZQuigwGg2ZX0Ga3
zQXp4HzeNMaE33INyCh0NbCs6WxrJMdyp3VylRTxdwieAsy6t1axMTo6pMt4R3j3
CpcOmi+MEJXnZppG3A0fSAtnuYhaEh0LKYFxBatFvxsOjkWTunMVyjXuWUUbOr0p
k18eNt+T4q6znJZopHgB+Cvx+E7sMFv251j5YuApdnavKGJkcvVgTq5UO2MJVpd2
GqBNJtWNNyFr9gxBOE53hOoh0xefyNe+8JHK0juy7t2tymzLowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFw5by1FiVKi/qF+UGCs1XZapR4oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2UyOGVjZWItMjcwZS0z
OWEzLTk4MTYtNTc0YzUxNjQxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMpi4Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOSZC/6RTHz5HfljXoRqT49/mmdR7BIxmgrI/oK0KtnwYqQ/4Fdyr
FbjQELEjXiqzLpwQ1e1ufmdYrQU86QKngpf1vDTAAbmqj3XsAe5arVaed3HTYm9I
0jRNNrTAYD7pxMCVL4BWi+SsGEoSHclEzAxKOuExoXxq8brFoaASrmqgCHiZ8FBN
uezoc3ELBEk5BagS83XX9PKlV+m0yQt3q+0pTvGlL+j4psGTm59SOzqRI+FSjcFi
piqIf376agSIvNfkNwaNqhhqaLVn+tPsy9G9XsfcfrYCJhBqEyOpClazshSQOcYW
MT0yXNNv4D4X668rjY6e1nGL+fCUgHM7iw==
-----END CERTIFICATE-----