Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098efd7b-80b6-39b7-a16e-ba0da0058180.roa
File:                     098efd7b-80b6-39b7-a16e-ba0da0058180.roa (raw, json)
Hash identifier:          7XQyyafiBqmwWTea3KNm6TmCoT508ZlpUsuFi9tjTdg=
Subject key identifier:   AA:45:92:5E:2F:D7:CF:9D:73:7C:61:BA:2C:DE:F1:CE:49:B3:B4:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5512403AFE29E9109FD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098efd7b-80b6-39b7-a16e-ba0da0058180.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        2603:3016:2100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:51:24:03:af:e2:9e:91:09:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=10ddb544-8fa0-48c4-85fc-a7d5a86168b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:32:9d:f1:06:6c:5f:47:75:b7:90:b4:c5:28:
                    7f:27:8b:5d:35:b8:8f:4c:a0:4c:d5:59:86:e1:d9:
                    c0:9a:f1:30:fb:91:be:d4:73:86:c7:2e:a4:12:7b:
                    16:92:55:84:c4:68:8f:52:ca:9b:06:7d:19:b2:75:
                    f4:05:c5:79:20:c7:08:b1:e6:bb:65:2c:1f:25:f9:
                    6f:0a:a7:69:1f:4b:21:c7:9f:0b:c4:18:9b:f4:6e:
                    3d:37:aa:40:87:8a:dc:2d:4b:b7:78:9e:d0:95:50:
                    48:61:86:5b:24:85:c5:a6:11:00:b5:12:1e:4f:8b:
                    13:3e:2a:d2:a4:7c:43:92:86:2c:22:31:f2:3a:04:
                    e3:8d:a4:fd:1b:94:b3:67:a5:3d:04:a6:3b:87:48:
                    2a:da:7b:86:07:db:02:b1:99:7a:5c:b6:39:1e:d2:
                    1c:9f:12:f2:87:9d:08:9b:3d:56:e4:b8:5c:b8:56:
                    4a:78:9e:66:8f:1e:dc:2f:72:84:91:ae:3d:28:96:
                    7e:52:59:6b:f0:c2:49:dd:d8:0e:e9:b7:70:a4:58:
                    76:bf:60:ef:ab:7d:00:2a:e5:9c:20:b9:fa:36:8b:
                    1c:87:22:35:5d:1c:1f:c9:df:0f:7b:95:60:de:27:
                    2f:3d:b6:67:18:b2:94:b3:c0:f5:d1:e5:b7:45:e2:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:45:92:5E:2F:D7:CF:9D:73:7C:61:BA:2C:DE:F1:CE:49:B3:B4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/098efd7b-80b6-39b7-a16e-ba0da0058180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f5:92:32:ae:54:3f:92:9a:36:06:25:1d:d5:03:55:05:5d:
         fc:fc:98:e9:dc:0f:df:26:f6:4d:87:d2:b4:43:0d:20:49:0b:
         04:95:57:e4:1e:54:49:7b:d4:7c:bc:45:24:29:b2:b3:07:bc:
         35:cf:6a:f7:9c:bb:8b:66:32:97:8a:c7:95:80:67:21:56:26:
         b8:49:7b:34:ec:e9:fb:c0:d7:eb:10:bc:3f:16:99:26:f7:e4:
         cd:a0:13:51:5e:20:f4:c4:16:22:f8:54:58:0f:b0:8c:ec:e6:
         9c:47:7a:be:67:5e:9d:36:8a:56:2b:73:0d:d3:51:92:e7:6d:
         8e:23:18:75:63:d1:ca:cb:b3:9d:60:c9:db:97:19:19:b3:58:
         09:2c:53:4a:a9:4b:29:1c:08:22:fe:69:38:06:28:84:dd:47:
         28:27:9c:2c:f2:f4:40:6c:ad:44:64:ba:4c:15:94:63:9e:6f:
         4c:50:bd:54:21:3a:64:dd:84:7b:27:bd:bc:e3:43:83:39:40:
         c0:2f:7a:f3:6a:00:b5:32:57:9f:ed:4a:2b:f7:cf:28:84:bf:
         6c:cd:df:d4:9b:84:97:06:58:8e:46:6b:20:ea:6c:4a:4a:3a:
         81:8a:4d:d1:9e:70:30:90:9a:4c:60:85:13:36:6e:25:bc:27:
         9e:f7:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:28:58 2025 by rpki-client on console.sobornost.net