Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a8ffcbb-8d18-3b49-a3ac-31ec5c479636.roa
File:                     6a8ffcbb-8d18-3b49-a3ac-31ec5c479636.roa (raw, json)
Hash identifier:          byl4rO1Hn5KqmLZHKsSev64cMVnq9p9c9B/2JOyRF64=
Subject key identifier:   15:49:69:0F:9E:C6:07:CF:BF:A3:1D:89:2F:EF:28:8D:D8:78:E4:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AD964580CC33082138480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a8ffcbb-8d18-3b49-a3ac-31ec5c479636.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2603:3005:3a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:d9:64:58:0c:c3:30:82:13:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=24592460-451e-4f77-9133-1475831e4833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:eb:cf:28:42:76:a3:aa:2f:a8:e6:02:fd:
                    bc:cc:de:23:c4:fd:fe:4a:ef:85:2f:67:2f:5f:36:
                    4c:bc:24:3f:5a:89:45:c3:a7:8e:63:78:7b:fe:5b:
                    09:b5:80:c3:8b:18:b1:e3:1e:d0:07:79:45:d9:d1:
                    78:9a:1f:42:d1:5e:82:a8:f8:a6:ab:64:28:d2:3b:
                    3f:2d:37:a7:f8:3b:af:f7:9b:e2:7a:fd:02:da:0f:
                    2b:8d:b7:32:a8:4a:56:a4:e1:22:78:02:a7:fd:29:
                    d8:6a:3b:cf:3b:60:3f:8d:f8:e8:e5:da:fc:db:61:
                    db:8c:28:0f:b8:a3:e5:56:f8:5f:6b:64:26:3b:84:
                    42:f1:56:d3:b5:9f:02:b8:a4:f2:5e:d1:d1:1d:35:
                    01:2a:34:4a:4f:63:2d:55:7c:38:45:9d:f8:3e:ed:
                    d3:da:d3:75:f5:1e:bb:41:ce:7a:2f:d2:5d:e4:6f:
                    9e:0d:d2:ba:b2:3f:59:b4:23:d5:df:3d:d2:12:d2:
                    c0:8d:16:3b:85:6d:b8:5e:e6:77:90:2d:1c:d9:65:
                    f9:c4:51:7c:4a:f2:c4:f8:82:a3:1c:ed:1c:73:de:
                    66:39:a1:df:77:8b:97:1d:e0:2b:56:5b:6b:cd:f3:
                    dc:11:ce:37:d6:10:6a:dc:0c:09:be:c7:8e:3b:f1:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:69:0F:9E:C6:07:CF:BF:A3:1D:89:2F:EF:28:8D:D8:78:E4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a8ffcbb-8d18-3b49-a3ac-31ec5c479636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:3a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:88:a4:50:47:90:2b:41:df:50:3a:26:6a:09:81:ae:da:
         af:f7:10:a3:db:24:b9:cf:41:af:3c:78:ba:66:3d:bd:7a:ee:
         e6:6c:c5:8e:fb:bc:48:73:9a:5f:91:3e:5b:6e:8b:53:56:82:
         80:e9:9c:3c:a7:ac:b5:8a:b1:fb:23:be:d0:6f:e8:80:77:1e:
         b0:b8:46:e1:5c:05:10:5d:b0:5f:b4:85:a7:5f:fe:4d:85:da:
         5f:d7:71:fe:04:e7:98:40:56:7f:95:21:2e:7f:59:fb:b6:af:
         6b:e5:96:d7:8a:28:2a:81:6f:88:da:5e:7f:fe:32:ef:de:8a:
         e6:63:d6:61:64:5c:87:3e:ce:1c:ca:e3:ae:1e:ba:41:2d:16:
         51:2f:0d:40:a7:ef:92:e2:05:37:9c:50:3d:90:e4:e3:b2:73:
         b2:fa:60:8e:80:06:ad:b4:a1:b6:bb:8d:4c:ab:c2:25:18:4c:
         a4:0d:c0:37:9e:28:9d:dd:d3:10:ae:4d:bf:56:cf:1f:33:73:
         a4:2b:06:b1:c1:f8:40:80:9c:d1:27:b4:7a:86:e9:fa:4f:e2:
         11:e6:11:be:eb:47:23:30:82:20:6c:c8:1b:e4:69:1e:58:94:
         49:6d:d1:82:19:4e:2e:b2:00:66:c8:d9:d1:2c:cf:d1:17:2b:
         37:89:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:04:33 2025 by rpki-client