Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418617a4-e3dd-33a7-98e7-e9a673f1c36b.roa
File:                     418617a4-e3dd-33a7-98e7-e9a673f1c36b.roa (raw, json)
Hash identifier:          3I9JPvo2iUo61wEryWicwCrG10t711JeQ+w7FS/PB9Y=
Subject key identifier:   30:FB:EA:BE:D7:71:56:CC:FC:C3:27:F7:74:06:0B:2F:E7:17:62:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143FC037E31D3D7EC5E55C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418617a4-e3dd-33a7-98e7-e9a673f1c36b.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        2603:22c0:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:c0:37:e3:1d:3d:7e:c5:e5:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=46a7c5cd-09f1-4082-b067-c85150986c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:5d:1f:08:34:92:15:be:97:70:6a:63:a3:
                    45:80:a8:50:c4:64:77:b1:db:17:ed:d3:15:8c:06:
                    c3:b1:0d:5e:65:0d:33:d5:4f:5a:e9:57:ac:14:da:
                    1e:10:6d:e2:92:70:fe:6d:9f:57:34:25:e3:e6:08:
                    b3:8c:37:a4:8f:46:de:26:75:25:50:46:32:7e:7d:
                    d1:0b:e2:fb:b2:74:16:c8:f0:2a:f3:5c:0c:0f:28:
                    15:12:6c:3b:90:9b:38:32:53:fb:fb:0c:cf:dc:d3:
                    7e:ec:30:6b:1a:bf:81:16:1a:40:52:f7:1f:54:ea:
                    7f:d0:2e:61:03:77:2d:c0:31:94:60:d9:88:91:d9:
                    59:2d:8b:c3:85:4c:cb:0a:b3:bc:d0:81:0d:c1:2b:
                    ef:90:01:43:83:dd:d2:28:c8:2d:90:b3:26:38:bd:
                    d6:d5:31:a0:25:21:e5:c5:97:30:d4:d3:0f:26:a8:
                    95:db:25:6d:d5:23:20:ab:65:c3:df:3a:7e:b7:42:
                    af:ba:81:4c:1d:86:be:c3:69:cc:20:6f:27:57:21:
                    16:13:03:28:17:d4:cb:cf:5f:9f:df:4f:78:65:19:
                    1d:97:99:ec:3d:17:f9:0b:4d:52:8c:5d:10:c8:73:
                    1b:6c:96:72:0d:6f:bc:32:e1:f2:d5:ae:40:18:6f:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FB:EA:BE:D7:71:56:CC:FC:C3:27:F7:74:06:0B:2F:E7:17:62:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418617a4-e3dd-33a7-98e7-e9a673f1c36b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:22c0:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:82:cc:de:a2:72:63:39:d5:8c:a2:ca:93:79:a4:e9:de:78:
         e0:eb:fc:3c:00:df:54:ea:eb:d6:38:75:8f:d8:c3:98:fc:18:
         df:ec:ba:96:a5:18:a7:36:1d:b1:a7:8e:c1:ac:e9:cb:e2:07:
         9a:b8:5f:1b:f7:d2:d3:cb:f5:63:31:12:91:b2:09:e4:b5:0a:
         de:74:b8:77:7b:a7:96:a3:12:c9:53:21:59:44:d1:11:b7:fa:
         b1:ee:09:e5:bf:79:f9:2d:7f:7f:55:d1:46:e7:2f:fd:9f:74:
         14:77:77:29:6e:b2:f0:68:e9:20:25:13:9a:4b:70:83:1f:d1:
         16:a5:12:99:57:95:9f:b9:2b:34:c2:0c:35:ea:42:e9:d4:00:
         6f:78:9d:88:04:27:b9:88:00:c4:53:5d:90:87:52:fb:54:6d:
         2c:82:28:6c:c6:30:f3:81:4d:87:b0:c1:a1:fd:9a:d6:c2:c1:
         d4:c7:13:4d:20:de:f3:a9:96:b6:2e:c5:96:95:d0:fc:bf:7d:
         3d:91:0f:5b:55:12:55:63:71:29:39:01:f3:cc:67:af:f6:14:
         90:d0:69:cc:96:df:c3:a5:a6:7b:0f:e6:89:4c:8c:39:84:55:
         2a:02:0e:4d:16:31:c0:56:ab:02:e8:d6:8a:e1:77:c5:9c:e1:
         b0:2f:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:51:51 2025 by rpki-client