Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caae7ea7-86b6-355f-840c-5ef5c6a8e548.roa
File:                     caae7ea7-86b6-355f-840c-5ef5c6a8e548.roa (raw, json)
Hash identifier:          EDs/hv/9HUurm617Dy3yoYSZKO8hRaGD2kM9yE+nJWg=
Subject key identifier:   AF:22:C6:A7:46:D3:65:12:3A:13:66:B8:B2:1C:31:43:1B:B1:73:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AD9A336E99D21D1DC0400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caae7ea7-86b6-355f-840c-5ef5c6a8e548.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2603:3005:4500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:d9:a3:36:e9:9d:21:d1:dc:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=dbb72f93-3cfc-4c5e-b1c0-a3f5eb160a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:87:eb:20:b9:5a:20:b0:6a:0c:2d:e1:d2:
                    d4:4d:96:dc:dd:e8:fe:93:df:6e:78:3f:46:c1:83:
                    9a:0f:a0:6c:a0:81:15:a2:12:5d:44:11:7d:e6:a8:
                    62:a7:05:97:a2:d2:3d:90:31:ac:b9:2b:61:3f:7f:
                    c0:a2:7a:b1:14:39:4b:a4:57:56:7a:ad:db:c1:b9:
                    66:92:05:16:c9:49:3e:1a:5c:b4:0c:87:01:56:f2:
                    b6:2b:41:dd:1c:f1:aa:37:76:8d:c6:19:a4:cc:9a:
                    79:4b:0d:37:a4:3c:52:a2:cc:16:2b:75:36:bf:47:
                    04:fb:84:d3:60:07:de:6a:75:61:a5:ce:49:b0:ab:
                    cf:1c:1f:8d:20:7e:e8:58:fc:37:e3:4c:d5:aa:4d:
                    66:40:80:f7:71:8f:b0:8a:5b:00:bb:89:fe:f6:10:
                    eb:60:d7:4c:bc:38:a0:97:59:c6:93:3d:7d:29:ef:
                    1c:cf:98:49:1e:f7:eb:af:fc:de:27:1f:16:9b:42:
                    d5:a2:c9:f6:45:ff:72:8f:2c:55:a0:d6:e0:f7:ad:
                    99:a3:f7:2b:95:94:81:8f:27:d4:f0:d2:ad:f9:19:
                    09:85:8f:fc:34:81:6c:17:a2:82:29:13:23:74:57:
                    28:b8:83:3b:b1:25:8d:24:51:29:32:48:1f:89:2d:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:22:C6:A7:46:D3:65:12:3A:13:66:B8:B2:1C:31:43:1B:B1:73:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caae7ea7-86b6-355f-840c-5ef5c6a8e548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:4500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:90:c6:f7:ee:5f:3b:8e:b1:20:4c:0b:d3:22:24:72:9d:
         18:5d:4b:ca:ca:b4:ab:f8:4d:55:6b:88:5b:d8:92:8f:a1:88:
         20:5a:1a:b5:6a:87:69:d6:b1:98:74:2d:dc:0a:9e:16:16:aa:
         fa:13:2a:5c:5b:d3:79:2f:38:b0:37:b1:99:a7:e9:8f:ac:d7:
         46:0a:3e:e8:60:3e:0b:86:55:08:12:17:6a:2d:05:cd:17:7b:
         6d:43:c4:75:46:62:e8:d1:d5:ff:55:d3:a8:56:c1:0d:f7:79:
         d0:5c:6b:a8:bf:10:53:3b:2c:a0:04:ee:89:f2:5f:34:23:3c:
         81:9a:f9:0b:90:35:5d:0d:33:63:a7:52:33:46:28:bf:a4:4f:
         47:bd:fb:63:9f:a1:72:c5:02:ca:22:4c:14:b4:55:92:92:e6:
         9a:0f:54:01:dd:ec:8e:c7:59:b6:6e:7e:3c:9d:d4:f4:81:09:
         27:c4:84:30:57:53:2b:e2:30:06:10:c8:3d:e7:ab:6e:82:fd:
         bc:b1:e7:c9:e1:3d:0e:90:8d:d5:6b:9e:53:a2:6c:3b:45:b2:
         a6:0c:6d:5d:d5:1e:2a:5d:ba:5b:f7:87:1a:1c:45:ff:f0:8f:
         89:6e:8f:b6:14:08:81:fe:af:db:93:d0:28:58:6f:29:54:32:
         1a:de:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:44 2025 by rpki-client