Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b07747-8a5b-3be1-bfdd-307508b9510f.roa
File:                     10b07747-8a5b-3be1-bfdd-307508b9510f.roa (raw, json)
Hash identifier:          FSsu6uOkxjNDyTtYtPZxSw3HMtAAI8GCYZyNnowCocs=
Subject key identifier:   90:CA:5F:56:1E:B5:44:16:0F:C5:4B:12:0D:AC:06:37:64:C6:FA:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF379CD5A23A85510FB900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b07747-8a5b-3be1-bfdd-307508b9510f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        2603:300f:1e00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:37:9c:d5:a2:3a:85:51:0f:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e8a05a65-3f69-4d02-bf61-fa2c3ca00b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:c8:e8:bd:d9:6e:e2:97:f3:df:04:6b:1a:
                    7e:21:a8:3d:34:58:88:7a:d6:b5:75:79:5e:03:e4:
                    db:06:b0:ae:d7:21:2a:60:71:8b:84:bd:df:c3:82:
                    e3:c3:b4:3a:ae:25:79:fd:6b:86:4a:c8:fe:13:0f:
                    ee:18:7e:d3:d7:14:25:ff:74:28:1b:35:37:f5:76:
                    26:93:9e:43:2b:a0:2b:9b:94:a0:2e:88:c2:94:29:
                    ef:d6:98:56:75:8c:20:6a:3b:d1:45:2a:a1:6e:9e:
                    32:74:7f:8f:25:01:b5:4b:8f:f9:f9:bb:dd:a9:61:
                    47:ae:13:28:8b:2e:71:40:9b:87:17:c5:09:fb:2c:
                    69:cb:69:96:cd:08:76:c8:48:11:86:a2:8c:65:9e:
                    96:3e:b2:59:e5:11:1b:bb:7c:4d:29:e6:4c:37:3c:
                    8a:98:26:31:c4:20:ae:db:29:cf:fb:27:aa:57:11:
                    8e:ee:01:8d:bf:74:10:fb:73:3b:cc:30:c9:0d:0c:
                    b6:39:e5:8e:28:07:19:3a:0f:68:1b:2c:29:66:55:
                    74:5d:ce:58:aa:5e:40:f4:70:21:f6:16:08:db:bd:
                    4a:32:fe:e4:97:90:3b:81:49:2d:18:90:f0:26:1c:
                    72:73:e6:1e:26:d7:82:00:fe:77:98:c3:a1:88:e6:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CA:5F:56:1E:B5:44:16:0F:C5:4B:12:0D:AC:06:37:64:C6:FA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10b07747-8a5b-3be1-bfdd-307508b9510f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300f:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:94:51:0e:cc:c4:39:df:d0:ec:d4:95:10:a4:8e:34:21:f8:
         c2:c9:d3:b4:50:a6:d1:ec:ec:9c:fc:a8:1f:2b:ea:07:cb:0b:
         31:8c:c6:85:98:4d:b8:df:25:18:4f:aa:63:5e:e3:7d:52:c2:
         69:2b:45:51:1c:05:73:af:8d:41:4b:21:df:ce:7f:2e:41:f7:
         cd:a1:f1:a0:e2:73:35:04:97:67:2a:98:4e:94:d2:31:c4:31:
         db:94:71:5c:65:c6:99:54:bb:9c:fb:e8:e8:2e:58:37:9d:7c:
         19:3a:74:22:73:7e:f6:90:48:d2:aa:39:e2:ee:2d:67:22:6e:
         e7:59:5c:76:9e:14:45:88:88:9b:11:e5:90:34:74:d7:fb:28:
         eb:0c:74:d3:0c:8c:94:78:9a:2a:3f:ca:f1:22:06:dc:93:f5:
         53:a6:44:78:ce:59:dd:b5:ff:f3:62:f0:47:57:25:02:6e:04:
         88:3e:c8:f0:91:f0:e6:79:27:14:d5:ce:06:c2:78:ed:21:4f:
         d0:b1:3e:f5:55:b9:93:aa:04:6b:30:af:44:c1:36:89:a7:cc:
         5f:09:f7:f2:e2:b5:1e:8c:c8:0b:9d:12:6d:75:f2:2d:2a:dc:
         00:3d:51:a7:fd:ca:d7:4d:01:bb:db:f6:9f:cc:43:d4:c6:3f:
         1b:4f:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----