Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/512eca32-eee1-358d-b323-e3fb0e1cd1ec.roa
File:                     512eca32-eee1-358d-b323-e3fb0e1cd1ec.roa (raw, json)
Hash identifier:          sUcduCjZKU3hkAEGMZ4MpIr8GfOakdpVpFv3aBSHcBs=
Subject key identifier:   2E:1E:C4:B4:DA:DF:E5:CC:A3:9B:E1:6B:36:08:36:F5:B9:68:26:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F7791C15FC34DEB0A4B500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/512eca32-eee1-358d-b323-e3fb0e1cd1ec.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        2603:240e::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:79:1c:15:fc:34:de:b0:a4:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=e939a50c-8545-4da5-87e2-32a4e0848381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:72:10:f9:82:a8:ef:30:b8:d9:b1:d6:36:
                    9e:04:6f:52:27:84:d2:92:09:4f:d8:48:9b:4f:8b:
                    e9:2a:49:c2:b3:63:87:0a:d9:2a:c3:1e:cf:e4:22:
                    cc:4c:a0:0d:40:bb:3c:19:82:d1:70:e1:2e:16:a0:
                    e3:31:f2:6d:ad:46:5c:f8:38:fd:aa:d1:00:86:f5:
                    6b:bd:a1:09:5e:3b:8c:e9:72:42:bd:40:fe:d6:e7:
                    96:0f:b0:1f:ab:14:eb:85:2e:e3:f9:ef:0f:02:7d:
                    8c:03:c4:bc:5f:28:2d:b5:99:84:68:f6:15:03:3f:
                    ac:e9:01:59:61:50:62:75:f4:9b:2d:74:f9:77:f0:
                    97:74:f3:5d:07:41:d4:a1:b7:b2:78:93:9b:b3:c7:
                    e6:0b:d7:91:44:c4:2a:ff:2e:e9:bc:6a:73:29:2f:
                    8c:e4:cd:b7:e3:5b:f6:10:44:94:93:ad:cc:32:aa:
                    49:fb:54:97:11:8a:4e:32:6a:f7:78:78:e8:5a:3b:
                    d0:be:b8:85:29:75:05:c7:8c:92:f8:f5:65:5b:0c:
                    bd:34:bb:aa:8b:76:cc:89:97:ad:59:e3:f0:2b:cd:
                    b2:7b:5f:48:0e:6c:a4:45:1f:2f:eb:e1:16:4f:d4:
                    b1:a1:73:c8:c0:48:36:de:a8:ca:9d:cb:c7:88:78:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1E:C4:B4:DA:DF:E5:CC:A3:9B:E1:6B:36:08:36:F5:B9:68:26:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/512eca32-eee1-358d-b323-e3fb0e1cd1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:240e::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ed:76:f7:df:7a:61:49:2a:66:08:f7:6c:ea:18:d5:44:3d:
         ac:f4:3f:ae:c9:1a:24:de:f4:a8:b8:29:eb:ce:1f:18:14:7f:
         ea:f6:61:72:a0:fb:57:3b:ba:e1:5f:0b:55:4a:b0:fa:27:e8:
         5f:68:d5:42:09:6e:b3:e7:50:16:87:f5:a9:c4:4b:c4:b7:6f:
         35:96:63:ce:01:02:1a:0c:43:22:af:31:99:2e:d0:5b:8f:08:
         b1:8f:cd:8a:fe:5f:33:81:2c:5c:fe:cf:57:0f:25:74:16:d2:
         c9:fa:dd:70:0f:f9:ad:fe:8a:45:b6:70:b0:a8:59:2a:91:37:
         7c:05:d5:b1:6f:49:60:51:a7:f3:53:3f:ba:10:3d:2e:23:ef:
         6a:52:5a:4f:d5:ef:83:7b:2b:38:84:46:20:59:30:9b:01:d3:
         92:f0:76:1b:8d:87:e3:79:a8:b8:af:00:61:df:2d:ee:3e:1a:
         40:e9:c7:99:98:31:90:f3:64:b2:30:b1:9d:e5:d3:60:02:1d:
         16:b7:01:db:4b:7c:b6:5a:79:29:41:8c:86:6b:0d:c0:30:30:
         78:6c:09:74:b9:1a:7e:f2:aa:10:30:7b:1c:bb:34:8f:78:08:
         13:3c:53:32:c1:09:71:bb:80:c2:d4:a7:86:aa:a6:0d:f7:40:
         3c:63:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:33 2025 by rpki-client