Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539fb071-26aa-38ed-b5f2-95f804a15834.roa
File:                     539fb071-26aa-38ed-b5f2-95f804a15834.roa (raw, json)
Hash identifier:          iGoYYLXhM1hjsbE8YzSI9rOXiKvEAQAs/M1gU0OXMoM=
Subject key identifier:   21:54:3C:21:D9:11:E1:E3:0D:E1:65:AD:B0:40:8B:A6:E1:A8:77:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AD729805BC729AB41B800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539fb071-26aa-38ed-b5f2-95f804a15834.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2603:2195:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:d7:29:80:5b:c7:29:ab:41:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=fbf115e2-a776-4401-8798-f7e78d94609c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:b1:3f:a3:85:ee:62:4e:e6:83:d3:e5:5b:
                    83:e7:64:fd:0a:14:9b:5c:a0:0a:40:08:13:18:64:
                    37:5d:c3:76:9a:1a:68:cf:23:aa:53:78:e2:aa:eb:
                    37:74:22:f3:9e:74:67:bd:b8:3f:b9:dc:74:47:b2:
                    33:ff:51:57:6c:ea:77:51:d0:d4:ad:15:0a:47:ce:
                    84:44:23:94:a5:7a:41:9b:79:13:17:63:56:ee:c3:
                    ab:4d:61:16:55:21:33:13:53:1a:37:45:0d:29:a6:
                    19:f5:0b:b4:24:d6:08:2b:57:dd:fc:94:4e:d7:37:
                    b0:f3:27:c8:79:91:77:35:07:71:46:c2:ca:d8:d4:
                    87:36:9e:65:c8:1e:e0:bd:5f:3a:45:f0:ee:7e:f0:
                    80:ce:c0:a8:16:4b:38:a8:a7:b6:44:57:6f:78:c6:
                    1e:fa:af:0c:fb:b8:79:05:8e:19:9a:ac:0f:2d:65:
                    90:b2:dd:bc:23:fd:6d:6c:ef:67:a6:86:8f:f4:ed:
                    ca:25:90:79:e8:96:6d:96:fa:66:b4:12:c5:03:fe:
                    d8:09:11:98:ca:88:a9:a9:d9:a4:48:b2:17:dd:ee:
                    e9:1d:7c:41:51:e5:ed:7f:35:2c:7c:5c:49:36:3a:
                    20:2d:b8:2e:73:d4:34:a3:95:83:24:72:e9:59:5a:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:3C:21:D9:11:E1:E3:0D:E1:65:AD:B0:40:8B:A6:E1:A8:77:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/539fb071-26aa-38ed-b5f2-95f804a15834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2195:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:1e:c8:bf:7c:2c:1a:5a:a2:6f:b2:c1:e3:02:39:37:97:
         0a:51:d0:ae:be:c3:c4:7b:e2:5c:5d:52:5b:14:76:17:68:c5:
         c1:16:83:41:10:9c:0a:ff:c6:80:ee:29:bc:43:4f:83:44:c3:
         5c:b6:93:6c:bf:9b:1d:c4:37:74:26:a7:87:cb:75:56:bb:09:
         d9:ec:98:55:2f:7f:a7:19:59:37:cc:3b:98:6b:e0:58:6f:8e:
         1f:bc:fe:42:f2:72:8a:5b:a2:f7:b6:18:17:03:77:a5:e4:5c:
         b5:59:d3:d8:f5:f6:68:e1:6e:95:f7:ca:f4:16:d5:83:07:39:
         10:29:23:7a:c0:52:1e:01:90:3e:05:b2:cf:99:65:1e:49:0c:
         de:e3:9f:05:71:14:ac:67:8d:f4:55:ea:3e:9e:92:14:c4:7a:
         3f:2e:e7:d2:23:09:7e:02:ab:a4:23:fa:c6:f8:26:b9:b7:e8:
         22:84:fa:ba:04:24:3a:22:c9:e0:9e:f6:df:82:80:93:89:2e:
         cc:f3:aa:ad:17:00:e0:6d:d6:9f:2c:27:74:2b:78:8e:fb:f2:
         34:81:11:66:63:2b:3f:61:4e:6c:a0:60:ef:eb:c9:18:ae:ac:
         da:e3:86:35:de:eb:d7:60:1c:fc:05:60:bd:4e:e9:73:91:05:
         1b:cf:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:24 2025 by rpki-client