Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d0d2987-483e-3bdd-813a-1bca6333dc8e.roa
File:                     6d0d2987-483e-3bdd-813a-1bca6333dc8e.roa (raw, json)
Hash identifier:          jdNGIdWpHrEPAYKIyTqElTIL/3VhG8F4BEiwJIEGSLE=
Subject key identifier:   64:83:F6:9D:90:89:8B:B3:E1:0D:63:22:3B:E1:CA:A3:0B:7A:CC:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DB5C767560421A1349340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d0d2987-483e-3bdd-813a-1bca6333dc8e.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2603:3005:3f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:b5:c7:67:56:04:21:a1:34:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=91f64b87-9037-4af2-b7e4-c660d411dc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:bb:19:9e:d1:aa:69:e4:92:19:cd:6a:57:
                    54:7b:5e:2d:d7:12:48:0f:9d:94:e5:9f:c5:55:9a:
                    53:65:36:e7:ed:9d:61:7e:c4:16:3a:c9:00:3e:50:
                    47:24:44:6a:fd:ba:e6:a3:22:26:95:46:8f:af:ca:
                    07:d6:d2:7b:ce:32:ee:25:91:be:70:94:7a:d2:f7:
                    a2:da:41:49:7e:09:1a:c4:3f:5b:65:36:18:ca:ef:
                    19:b1:a5:1f:98:62:d1:04:90:85:88:21:ad:5d:d4:
                    38:33:26:02:44:02:05:a1:79:64:ac:39:2c:80:10:
                    86:3c:14:4b:87:10:88:1a:ff:1c:8f:00:ba:5f:29:
                    fb:e5:e5:ef:3e:6b:a2:3a:e3:d1:21:af:45:ed:9c:
                    53:69:dc:16:79:b2:23:4a:39:e0:be:3e:d3:39:bf:
                    4f:70:29:5f:ca:2e:4e:f6:90:7f:96:7b:4a:7c:9f:
                    e0:c8:e1:8d:0b:fd:38:2d:43:a8:46:16:97:bc:13:
                    eb:12:88:b8:14:7a:7b:7c:f7:60:7c:d0:96:b7:3d:
                    6e:a7:c8:cc:83:91:0c:55:db:e5:33:0d:4a:dd:96:
                    f9:b7:3b:be:66:e9:f9:9f:09:22:ea:a7:d2:50:ba:
                    81:6e:73:39:30:4e:6d:83:26:27:e2:69:91:67:0e:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:F6:9D:90:89:8B:B3:E1:0D:63:22:3B:E1:CA:A3:0B:7A:CC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d0d2987-483e-3bdd-813a-1bca6333dc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:3f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:03:b6:22:5d:64:ec:e8:c4:0d:06:36:2d:e6:a1:44:50:50:
         c2:3f:5e:c8:75:07:13:c7:94:b4:ed:3e:07:ec:09:9b:3d:68:
         25:bf:b7:b3:0f:9e:e6:cb:3d:3f:9b:2a:4d:11:5c:e7:df:ea:
         c5:50:8e:8e:d2:ca:bd:1c:40:c1:58:1a:bf:ff:f2:15:02:32:
         50:56:69:d2:53:44:d8:39:45:ee:0a:b1:01:52:f7:70:8d:c5:
         1c:c0:45:30:fb:5b:c3:31:af:24:f2:1c:30:f3:0c:55:0d:c4:
         fb:d0:d1:78:0b:a0:bd:d3:da:1b:9c:89:fd:4b:f3:b0:18:7a:
         d7:5a:0c:05:88:1e:3d:17:c3:c8:c9:53:69:a5:63:0b:78:ea:
         5c:2b:e9:7b:26:a3:18:01:eb:f2:9d:ee:50:50:92:09:d3:47:
         e2:b1:99:1c:20:9b:a0:a7:3c:ca:d9:7d:cb:eb:22:2f:83:4e:
         d2:d0:e5:9c:c9:c7:18:78:e6:5a:24:57:29:e9:9f:3f:13:ad:
         0b:ce:c9:be:a4:25:47:95:07:6c:94:08:84:3c:3d:da:a6:95:
         dc:c4:f0:ea:67:86:be:8f:d2:0a:51:48:fc:b0:e6:95:e7:da:
         5c:21:f8:10:f2:bc:91:ed:ba:0d:48:f6:f2:37:c2:dc:22:7f:
         0e:a3:04:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgUPbXHZ1YEIaE0k0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OTFmNjRiODctOTAzNy00YWYyLWI3ZTQtYzY2MGQ0MTFkYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaa7GZ7RqmnkkhnNaldUe14t1xJID52U5Z/F
VZpTZTbn7Z1hfsQWOskAPlBHJERq/brmoyImlUaPr8oH1tJ7zjLuJZG+cJR60vei
2kFJfgkaxD9bZTYYyu8ZsaUfmGLRBJCFiCGtXdQ4MyYCRAIFoXlkrDksgBCGPBRL
hxCIGv8cjwC6Xyn75eXvPmuiOuPRIa9F7ZxTadwWebIjSjngvj7TOb9PcClfyi5O
9pB/lntKfJ/gyOGNC/04LUOoRhaXvBPrEoi4FHp7fPdgfNCWtz1up8jMg5EMVdvl
Mw1K3Zb5tzu+Zun5nwki6qfSULqBbnM5ME5tgyYn4mmRZw7FLQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGSD9p2QiYuz4Q1jIjvhyqMLesw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmQwZDI5ODctNDgzZS0z
YmRkLTgxM2EtMWJjYTYzMzNkYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBT8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAzgO2Il1k7OjEDQY2LeahRFBQwj9eyHUHE8eUtO0+B+wJmz1oJb+3
sw+e5ss9P5sqTRFc59/qxVCOjtLKvRxAwVgav//yFQIyUFZp0lNE2DlF7gqxAVL3
cI3FHMBFMPtbwzGvJPIcMPMMVQ3E+9DReAugvdPaG5yJ/UvzsBh611oMBYgePRfD
yMlTaaVjC3jqXCvpeyajGAHr8p3uUFCSCdNH4rGZHCCboKc8ytl9y+siL4NO0tDl
nMnHGHjmWiRXKemfPxOtC87JvqQlR5UHbJQIhDw92qaV3MTw6meGvo/SClFI/LDm
lefaXCH4EPK8ke26DUj28jfC3CJ/DqME8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:48 2025 by rpki-client