Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cea948a-bb0e-3bf3-9c5d-7e3d4491b4a1.roa
File:                     4cea948a-bb0e-3bf3-9c5d-7e3d4491b4a1.roa (raw, json)
Hash identifier:          bAvzQ2W/oTyX+zlcNMjUe+/by8kl+7bUeHHbnhLkue8=
Subject key identifier:   05:67:12:AA:F0:FA:7A:28:D7:BD:A3:38:D8:35:B3:60:2E:F6:6F:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FCE9C8B26CFD2A6EE9500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cea948a-bb0e-3bf3-9c5d-7e3d4491b4a1.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     7016
IP address blocks:        2603:301f:1900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:ce:9c:8b:26:cf:d2:a6:ee:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=b2898244-b8fc-4833-89ac-16d3efba33ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:62:08:68:a5:c7:8d:50:01:3c:06:7f:a2:
                    a6:92:b6:a0:5c:b2:20:70:a2:ff:76:56:a7:bd:f7:
                    14:ef:bd:81:37:34:5b:f0:e3:e3:f8:ee:cd:92:7a:
                    79:76:5a:8a:55:03:bc:04:4f:eb:eb:d9:7f:89:e5:
                    b4:3a:42:40:c0:df:aa:74:ad:2c:c3:c3:fc:12:62:
                    43:e9:3d:46:35:df:f9:d2:81:fd:81:e5:d9:8e:a4:
                    8e:39:21:4a:8b:52:4d:7f:40:f5:64:26:5d:60:90:
                    f2:60:40:38:11:4a:e4:bb:7c:13:01:ce:6c:91:f1:
                    b8:da:aa:cf:b1:9b:b7:ea:02:4c:09:a5:c9:a0:72:
                    68:27:da:22:14:18:8d:fa:e8:8d:6f:23:b3:08:1f:
                    bd:89:4f:20:56:bc:cc:b7:6e:fc:c1:e9:24:22:87:
                    58:6f:7a:b3:8f:e8:c1:19:9f:98:4d:32:9c:73:8d:
                    b2:17:de:05:db:4c:75:a4:c3:39:0d:9b:e8:5c:bd:
                    ac:0f:65:90:5f:00:df:7e:4f:61:10:95:09:65:71:
                    17:e3:7d:3c:eb:08:59:70:3f:ce:a8:7c:bb:68:e7:
                    5e:d3:c2:17:f4:04:72:c3:2d:4d:56:85:63:57:78:
                    87:4f:77:8e:90:20:3d:b2:b1:33:f6:8c:12:52:5b:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:12:AA:F0:FA:7A:28:D7:BD:A3:38:D8:35:B3:60:2E:F6:6F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cea948a-bb0e-3bf3-9c5d-7e3d4491b4a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:1900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:16:4b:ff:0a:6f:f6:e8:69:58:a2:88:09:9f:b6:ae:43:ee:
         79:68:50:4f:f8:e8:2d:39:c3:6c:b9:0b:cd:e9:59:87:da:e2:
         9a:ff:20:ad:d0:f3:48:a3:0b:4e:42:df:c5:be:aa:8f:63:f9:
         fa:43:d6:cd:18:69:8b:3e:1b:1b:95:8c:d4:f8:fc:15:95:cd:
         e4:4b:6e:65:1d:55:e5:08:b4:54:a5:68:4f:a7:60:0c:73:75:
         16:6d:d4:df:3e:fa:f8:cc:53:b3:54:d9:87:62:ed:07:32:30:
         f4:90:1c:31:ea:f1:4d:93:31:44:4c:f9:b4:e8:91:1a:43:9f:
         14:17:fc:9f:ac:19:5b:75:7c:3a:73:52:93:8b:f4:7b:eb:ee:
         1a:e1:3a:b5:35:4d:ff:07:5e:ef:e5:c4:e2:57:74:da:79:e7:
         c0:e7:4b:1d:cf:f0:7d:32:f0:de:ef:db:21:84:49:86:b0:72:
         2c:29:7c:48:5e:5d:33:f8:f5:f3:8e:b7:fe:6f:0c:de:b0:e1:
         37:26:0c:36:cb:49:2d:70:29:6d:a9:1b:7a:9e:81:7f:06:8a:
         1e:67:6f:a2:f0:c8:34:58:f6:96:eb:fa:39:76:70:47:c9:81:
         ab:df:78:96:23:b0:75:bf:68:30:a5:bd:1c:9f:44:36:00:08:
         ff:9d:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:15 2025 by rpki-client