Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/203b04e6-5788-334c-ace4-26fdb8e170e9.roa
File:                     203b04e6-5788-334c-ace4-26fdb8e170e9.roa (raw, json)
Hash identifier:          REf+AaDoMoltJmqVaG0ELCkAn7QPaNkaqYu4SgATXHw=
Subject key identifier:   C0:88:23:9B:E2:ED:9E:82:EC:04:5D:43:3C:CE:8A:0A:F6:F0:FF:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DBA3D952FE211ABEB4722
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/203b04e6-5788-334c-ace4-26fdb8e170e9.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2603:3005:7500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:ba:3d:95:2f:e2:11:ab:eb:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=f803a871-07fa-413d-b3d4-30c66e23797b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:a8:0b:b5:2b:2b:e6:c1:b8:7d:a7:34:d2:
                    19:bb:2b:df:6c:e6:77:9d:75:ee:b5:c0:cd:25:ac:
                    7a:53:9c:46:8d:98:d6:b4:e2:69:36:a8:2e:59:11:
                    5b:6a:88:03:a0:cf:bc:96:2c:2d:ad:21:35:91:26:
                    c2:0d:9c:bb:f8:3c:ae:3d:f4:e3:11:88:24:78:36:
                    76:44:51:78:09:ff:83:d2:8f:45:1d:6e:c2:54:81:
                    22:83:23:30:e9:fe:9b:c4:a8:e0:f3:40:11:62:55:
                    62:6e:6b:b5:de:d8:92:e1:af:c5:40:cf:bc:29:9b:
                    0d:09:fd:88:30:04:a1:3b:d8:74:7d:99:da:e4:c8:
                    16:c7:5b:71:db:da:12:91:2b:1a:ed:30:96:e7:2c:
                    97:40:88:79:dc:8a:b5:b8:90:a2:54:0a:55:f2:54:
                    91:1c:be:56:2f:6a:ca:7d:70:a3:d7:44:d4:00:ed:
                    c1:5a:be:0e:2e:ab:2e:26:f9:cc:d4:97:dd:87:42:
                    58:d7:f4:5a:03:b5:4f:3f:f5:a6:2c:88:27:d2:b3:
                    a8:2c:ba:a5:c4:4c:76:1f:0c:b2:fa:49:a2:dd:6a:
                    4b:b0:a4:a2:44:8d:ed:7b:73:71:c6:7c:37:57:f1:
                    1d:e7:a9:5e:a0:74:45:15:f9:ff:52:de:10:cc:af:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:88:23:9B:E2:ED:9E:82:EC:04:5D:43:3C:CE:8A:0A:F6:F0:FF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/203b04e6-5788-334c-ace4-26fdb8e170e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:7500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:80:f4:16:9a:35:c6:32:1b:cd:87:37:9e:60:9b:ea:7d:
         a8:cc:3e:0e:b1:50:b7:80:51:19:a6:8a:64:a9:f1:02:bb:7e:
         02:52:5f:c9:70:b3:a2:50:8d:e0:d6:b6:55:c6:d5:e2:15:bf:
         4f:78:ac:f6:4d:59:69:0f:b1:b7:72:8f:00:2a:dd:b3:36:04:
         28:19:05:59:89:a4:32:8e:ad:3f:43:9c:a9:64:59:9a:e5:c6:
         a9:1c:d6:cb:16:2b:f5:8b:ec:e0:46:79:55:e6:23:f3:ad:66:
         7e:6e:91:93:2f:d9:ac:46:5f:50:be:72:05:f5:97:05:b4:db:
         d9:0f:72:71:59:f7:5d:3b:b7:b3:e7:7c:74:06:0b:1f:a3:6c:
         39:7e:05:ac:5e:76:e2:09:dc:92:5a:3b:e5:58:5d:7d:f5:fb:
         fd:e7:c5:1b:7a:ce:9f:5f:41:20:e3:38:0e:d1:3b:37:da:e5:
         72:ac:22:8f:ea:7a:1c:f1:65:74:72:dc:70:5f:1b:0a:f1:9b:
         c1:1e:2e:e8:f3:cf:b8:ed:93:a9:99:3e:93:2c:ec:9c:8a:31:
         8b:4a:80:f4:20:80:ac:49:b2:01:73:1a:59:ff:db:0d:5c:06:
         e4:c6:b1:e0:76:5b:dd:bb:b7:58:9a:e4:99:bc:c9:4d:2c:29:
         5f:8f:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:01 2025 by rpki-client