Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc09c7eb-66c0-3263-ad97-8d54a8b87762.roa
File:                     cc09c7eb-66c0-3263-ad97-8d54a8b87762.roa (raw, json)
Hash identifier:          86cl7JvVsWL7GA4HuxSZuQHb/Ts8vE1+CAWkWueoggQ=
Subject key identifier:   BE:B5:F3:45:25:6D:DD:36:57:82:B2:91:C9:DE:65:0C:8D:29:45:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143F0D12256F9958F6CB1900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc09c7eb-66c0-3263-ad97-8d54a8b87762.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        2603:3015:1200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:0d:12:25:6f:99:58:f6:cb:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=3afec7f9-d28b-4be7-a3fe-8abbec0259fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:a4:28:68:12:b8:b4:db:61:8e:43:fb:a4:
                    cd:76:53:0f:6d:80:b4:78:f9:1d:8a:fb:b3:81:83:
                    ef:50:9c:de:57:17:f8:8f:97:eb:8e:26:72:05:e9:
                    db:7b:3b:ab:62:b1:37:9f:3f:e2:93:da:4a:2d:fe:
                    0f:0b:64:27:ba:5c:20:9f:9a:c9:c0:8c:49:a5:64:
                    eb:ea:9b:c2:37:4d:18:a6:a0:0b:47:a7:e9:0d:53:
                    8e:22:dc:30:a9:a0:29:b8:44:0b:37:aa:d3:38:89:
                    ef:ac:13:f1:e9:65:33:5a:ae:94:95:36:a8:54:96:
                    81:3d:cb:10:dc:d9:24:ae:8e:6d:b3:25:44:94:60:
                    a3:b8:25:9c:b9:69:19:11:3f:62:8c:64:4c:2e:1d:
                    97:f4:73:3b:d2:5c:91:87:c3:d1:13:2f:ac:e9:c7:
                    57:6c:75:ff:b5:0e:0d:ab:f0:56:27:a6:a9:14:96:
                    07:61:2b:7c:2b:1b:c5:ee:e2:9d:3c:3c:bf:46:27:
                    4d:3e:1c:a1:82:25:9a:40:2a:92:7f:ce:a3:3b:92:
                    f6:dd:e5:31:20:a3:21:b3:5f:a0:d4:a3:b8:6a:a1:
                    e9:2c:26:44:5f:7b:8d:61:7a:c3:0e:40:45:a8:85:
                    eb:cb:57:bc:c4:72:59:ee:15:30:aa:b3:24:be:d4:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B5:F3:45:25:6D:DD:36:57:82:B2:91:C9:DE:65:0C:8D:29:45:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc09c7eb-66c0-3263-ad97-8d54a8b87762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:1200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:c5:da:a4:32:66:b1:43:a1:98:89:72:d3:0c:8e:ff:c1:
         3a:8a:20:da:5a:83:83:8e:c8:81:33:dd:fb:0e:13:5e:1f:58:
         dc:76:d0:0b:f4:9f:af:7a:e2:e6:73:80:d8:a4:11:b2:ce:c9:
         0a:d9:82:7e:51:2c:51:59:86:71:a8:35:b8:aa:fa:a0:a9:58:
         9e:30:f7:77:8b:70:1c:2c:24:c9:2c:ab:95:c5:14:c7:f7:17:
         c7:fc:9f:d3:17:c9:ae:e7:5f:c6:fd:fb:bc:fe:47:5b:d9:3c:
         d0:08:d7:45:94:32:76:9d:a9:e4:2d:de:c5:14:51:72:5e:0f:
         36:ea:4a:2e:a1:63:b4:51:e0:cd:f4:7c:cb:d4:4c:13:5f:6a:
         e3:fd:93:3a:a7:8f:ab:7c:e4:ec:4d:04:f5:73:58:07:90:d4:
         b3:be:a7:e9:8d:fe:08:c2:8c:69:df:11:80:39:bd:80:42:07:
         af:ea:d4:bc:a1:3a:ce:4a:c2:73:e2:ac:fe:4c:e4:05:4c:0c:
         a3:6c:35:28:51:8b:99:32:af:df:f9:a7:76:b1:2a:ae:df:61:
         c8:72:e6:15:a0:70:2b:2f:65:57:85:96:b1:71:8b:4b:3b:b9:
         e8:4b:14:b2:0c:19:30:3c:05:ba:c4:48:7e:46:e1:81:ff:3a:
         75:df:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:02:53 2025 by rpki-client