Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0909bc7-68f5-3eb0-865c-f1b9488bd681.roa
File:                     f0909bc7-68f5-3eb0-865c-f1b9488bd681.roa (raw, json)
Hash identifier:          oli/gfFOaxBPWhYIgUKq7yFyuZwftgNq+CFA1Ga3kRo=
Subject key identifier:   37:95:59:CB:2C:1F:F3:4F:3C:C8:F0:74:95:84:E4:11:15:3B:C3:24
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F86015BA3EB7F7B0C11630
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0909bc7-68f5-3eb0-865c-f1b9488bd681.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        2603:2189:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:60:15:ba:3e:b7:f7:b0:c1:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=d70c8fa4-99e3-4980-a334-7fa1bab58776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:ac:c7:84:01:6d:99:b1:d1:1d:2a:33:6c:
                    5a:5a:b0:a5:ba:9b:0f:93:6e:0a:9c:dd:c4:2f:fc:
                    8b:dc:89:04:20:2f:70:d9:d7:f6:12:fe:fe:8e:2f:
                    55:18:b0:92:32:cc:39:9e:e3:6f:72:f9:96:be:4d:
                    16:45:43:54:dc:fe:fe:45:36:90:66:0d:a6:4c:5d:
                    b8:95:0f:06:bb:88:87:eb:0c:42:af:d0:7a:3d:04:
                    de:ad:4e:ef:b9:a6:6c:fb:4a:f8:fd:0a:1e:64:f9:
                    a0:c9:fd:3e:03:d9:f3:63:25:5a:13:1c:cb:10:11:
                    c7:e3:4e:28:6b:74:71:ae:2a:0f:3c:dc:38:5d:bb:
                    85:e6:78:1e:1d:9b:84:9a:a7:d3:89:57:01:04:17:
                    22:85:4f:20:1c:41:44:f7:17:a9:a7:9d:7b:89:0a:
                    7a:55:ca:e3:a3:06:0a:93:d6:50:18:58:8b:ab:07:
                    7b:96:83:e9:72:5c:02:54:58:ef:81:29:7c:5e:2d:
                    9e:87:65:c5:b4:c0:63:f7:0c:07:f5:bc:8a:b8:af:
                    5e:95:56:81:f2:c8:94:a7:6b:a9:cf:e6:f1:7a:4e:
                    e9:cd:b0:2f:5d:ca:44:d4:2c:1a:f4:61:5d:1c:52:
                    3e:ef:ef:4a:e7:0b:1a:f8:66:89:27:b4:9c:22:fb:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:95:59:CB:2C:1F:F3:4F:3C:C8:F0:74:95:84:E4:11:15:3B:C3:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0909bc7-68f5-3eb0-865c-f1b9488bd681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2189:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:54:c8:2b:5f:83:0d:45:ca:73:d2:0b:c9:60:ee:36:09:b3:
         9c:8f:d9:32:4a:81:cc:c0:87:91:80:cb:d5:85:73:4e:7f:b3:
         fd:7b:b8:94:93:1d:4b:12:46:eb:87:49:a5:d9:7e:d9:be:01:
         7e:84:de:1a:dd:c6:44:dd:d5:f7:2d:2c:fb:3c:26:ff:c1:c8:
         ff:90:f7:19:6a:cb:7d:2c:54:68:d8:eb:99:e3:10:a9:c3:dd:
         fa:23:11:bd:91:7d:df:e6:f4:36:19:b2:5f:39:b8:f5:5f:e7:
         b5:fc:52:08:5f:ef:7d:0c:a7:ae:0b:44:65:13:75:3e:d7:e4:
         bf:50:8e:b6:0b:83:51:e0:13:96:c4:00:ed:4c:5a:f4:d2:7f:
         9f:8e:55:81:e2:78:51:37:6b:9f:e3:40:2c:b7:43:7c:0e:22:
         d8:c2:62:f9:72:77:b6:0d:b2:9f:8e:d6:2c:1b:92:5f:4e:4c:
         43:f5:62:2a:a4:eb:59:37:32:9c:04:01:d7:ef:3f:03:93:3b:
         89:2d:61:ca:19:40:41:16:d4:68:3b:15:88:c9:66:b3:ac:d2:
         7e:ff:70:ca:55:9e:d4:4c:e3:d9:28:a6:05:d7:16:00:5b:f0:
         cd:d4:bb:c0:78:38:98:e9:6f:88:01:5e:95:c5:88:eb:e9:a0:
         17:9b:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:06 2025 by rpki-client