Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ee8b362-e8ad-3340-9f4b-512663211feb.roa
File:                     1ee8b362-e8ad-3340-9f4b-512663211feb.roa (raw, json)
Hash identifier:          bMGe5LbLoFzaIiQFo9SrxGDsrkASIpsilCT1gEBWmEE=
Subject key identifier:   E1:36:0D:EF:26:E1:86:21:B6:3D:C2:D6:32:5A:67:55:28:82:A9:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F0F90BC7A68FAE83D9400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ee8b362-e8ad-3340-9f4b-512663211feb.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        2603:3015:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:0f:90:bc:7a:68:fa:e8:3d:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=efed1213-6a9e-4308-a3ea-25a83d581325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:ba:aa:2d:d2:6e:6b:25:72:35:ee:16:46:
                    22:c6:86:84:5a:ae:f6:e1:c6:96:02:aa:8f:be:27:
                    32:f1:5b:cc:0a:c4:f2:ac:4a:ff:78:26:6c:eb:d8:
                    6d:41:4b:a6:db:c2:a7:1e:3a:37:6b:ee:18:67:ce:
                    35:6e:42:b7:e2:2e:48:02:e6:b6:35:81:1c:bd:bc:
                    d9:93:1c:24:19:cb:61:58:bc:0a:8e:71:32:d4:10:
                    ce:d7:db:f5:91:6c:58:17:87:74:12:16:41:b8:37:
                    fe:f0:f6:7c:14:fe:76:ac:26:e2:8b:40:68:50:98:
                    d7:be:73:90:ac:f1:13:a0:a9:0f:c4:d0:8e:c3:df:
                    06:97:65:08:18:ba:14:ee:90:0b:e3:82:a8:ce:d3:
                    2f:04:ad:46:c4:4c:d1:86:c0:d1:2d:0a:c2:15:62:
                    4b:6b:8f:c0:e7:21:8a:c3:04:15:01:fe:03:ec:16:
                    d9:8c:ec:ad:d0:25:93:46:29:9e:ca:b2:e7:99:7f:
                    9a:b2:70:5f:d1:dd:53:0a:3b:dc:b5:13:9c:c3:5a:
                    a8:55:dd:05:e9:cf:0c:03:c9:1f:48:10:0a:1e:fa:
                    ec:db:c0:40:db:c2:02:2e:ea:d0:12:5d:07:5c:8f:
                    fe:36:22:7e:53:89:97:ef:be:b7:da:2f:99:cd:90:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:36:0D:EF:26:E1:86:21:B6:3D:C2:D6:32:5A:67:55:28:82:A9:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ee8b362-e8ad-3340-9f4b-512663211feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:5f:fa:e1:e3:14:cb:73:cc:e4:2f:7a:06:d1:0d:f6:a0:
         3d:23:61:b1:3f:67:a8:36:e3:00:77:80:15:46:50:ca:d8:ef:
         a2:d9:60:1f:36:77:35:32:42:7c:eb:0c:b0:71:15:05:e9:49:
         8f:36:b8:fb:48:be:26:4e:d5:1c:dc:c9:7c:a7:94:ee:49:17:
         7a:c7:e4:4d:f9:0a:ed:9c:35:52:5e:ee:6f:40:b7:4c:bd:3c:
         71:1c:17:af:3b:73:ef:54:c3:01:ef:a4:31:95:47:a2:4a:3c:
         01:66:e7:67:95:f3:1b:16:71:61:af:fc:d5:b2:e6:37:be:26:
         dd:bd:b5:86:d0:91:af:aa:47:b6:32:42:ea:58:09:6f:43:9c:
         a2:78:c7:02:1d:63:83:7a:52:d3:2a:e2:75:19:d5:9f:9b:4d:
         ae:d8:f1:54:1d:50:05:a2:c5:6f:62:c2:05:42:52:24:d4:0f:
         0c:49:a7:6b:2e:bd:0b:64:29:d5:19:c0:5d:fa:2c:3b:18:04:
         f4:f0:85:d4:00:7b:cc:0e:69:95:91:ea:66:7c:08:f9:7e:64:
         85:a5:00:44:f1:0b:a6:a4:28:1f:58:65:36:32:13:e2:64:49:
         a0:19:11:ce:c6:96:61:7c:3f:e9:13:e3:da:64:ae:1d:fe:4c:
         90:22:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:46 2025 by rpki-client