Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2d6c7e-37a2-38e1-956e-e21fb3aa9b59.roa
File:                     bd2d6c7e-37a2-38e1-956e-e21fb3aa9b59.roa (raw, json)
Hash identifier:          uVDFmubCTu23jpq8Vfw6wFHTUd7R/+RKWyhNn4VwMtM=
Subject key identifier:   91:6D:48:44:9E:64:60:AD:D5:F4:A1:E6:92:8C:0A:56:4A:08:75:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEF719B61F3C5D6A854FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2d6c7e-37a2-38e1-956e-e21fb3aa9b59.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        2601:82::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:f7:19:b6:1f:3c:5d:6a:85:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=865acd6d-20e7-41ad-b9e9-7c30bac9c538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:28:73:4f:fa:c9:36:e1:24:e5:5f:a6:62:
                    df:e5:60:38:b8:7e:24:21:df:ae:8b:d3:10:13:e2:
                    ce:22:32:7f:43:29:39:8d:52:23:8f:b1:f7:89:40:
                    1c:78:a6:69:fb:d9:60:49:27:94:90:56:08:b6:83:
                    9f:1f:f2:bb:8f:6d:6f:fd:14:dc:e2:83:a5:8a:44:
                    b0:87:4d:be:33:a5:0f:e1:9f:91:9c:46:1a:ca:c5:
                    29:23:9a:8e:d8:c5:c0:b9:ac:0f:b3:4c:03:2c:1d:
                    c3:51:07:4c:8c:e4:94:25:4c:55:3a:e7:f7:ac:36:
                    25:32:81:48:e3:26:2e:b8:7c:fc:82:da:04:02:e9:
                    70:0c:98:b5:24:53:a6:30:62:21:a6:31:50:97:f5:
                    4d:1b:1e:ee:b6:bd:cb:5a:8f:0c:44:be:21:88:eb:
                    22:f2:ce:47:a1:f8:de:5a:64:ba:77:34:ee:dc:8e:
                    9c:4e:01:ea:d7:67:5f:c2:bd:02:49:5b:f6:1c:19:
                    11:0c:46:0b:b5:e6:70:44:87:4b:50:9f:2b:35:f2:
                    7b:f3:b8:78:bc:2c:2c:03:06:14:ed:92:c8:7f:07:
                    c6:50:fe:ae:fc:82:0e:12:42:01:ac:6d:db:f7:9c:
                    96:72:91:5a:ea:80:ad:52:01:e1:7f:ff:87:4b:41:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:48:44:9E:64:60:AD:D5:F4:A1:E6:92:8C:0A:56:4A:08:75:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2d6c7e-37a2-38e1-956e-e21fb3aa9b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:82::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:49:d3:2a:c0:4f:ee:56:00:9d:db:86:c1:fe:4a:ce:04:
         fc:e4:4e:e1:ab:70:5c:a5:5e:08:53:09:78:81:cb:32:0b:12:
         02:ee:2f:22:ad:b2:20:94:43:44:52:4a:70:bc:02:0e:35:5f:
         82:67:33:4a:d1:f5:58:0e:5d:4c:36:c2:41:c8:07:bf:87:26:
         ef:14:ba:19:61:f7:6e:4a:2b:24:13:40:5a:7b:28:5f:95:b1:
         d7:dd:cb:e8:c0:02:a7:11:69:cb:5f:79:f3:c7:dc:e7:c5:e9:
         12:9f:9f:0a:ba:31:63:fe:bc:5d:0b:25:3e:5a:59:ce:a8:b4:
         4d:6b:76:ab:5d:67:e8:e7:ae:b9:90:37:64:d3:b3:10:7e:9a:
         39:d6:d3:e2:58:28:b5:b8:6b:fc:15:2d:a5:d2:88:34:51:e7:
         fc:4d:5b:8b:f5:ec:52:47:02:7b:d4:e7:8b:bc:53:f8:51:db:
         dd:93:70:e7:c9:88:7e:02:19:2b:1b:8d:16:df:06:c6:b8:c3:
         65:b3:43:d5:ce:21:c0:07:04:3b:d7:fa:52:63:e0:64:e5:5a:
         ee:f4:e3:8a:1a:01:28:96:06:ce:7e:38:f3:63:94:1b:d8:fa:
         e9:cc:fd:3e:ef:eb:62:a4:98:5f:7d:d9:4e:1c:23:fc:3a:8f:
         8b:b4:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:13:02 2025 by rpki-client