Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425e4300-dc56-3137-89f3-1ea87e991b56.roa
File:                     425e4300-dc56-3137-89f3-1ea87e991b56.roa (raw, json)
Hash identifier:          HZdWzzklocKmHK61FVuocQC0FqD96db8F2ennnNh4kk=
Subject key identifier:   07:88:6B:CB:3B:CA:A0:26:2C:B0:79:4C:0F:07:2A:30:AD:C3:94:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B447F4423F12106AE3D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425e4300-dc56-3137-89f3-1ea87e991b56.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33668
IP address blocks:        2601:401::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:44:7f:44:23:f1:21:06:ae:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=789faa34-9b6f-4222-b22e-34baa35daa6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:d7:19:97:ba:67:8b:e4:7d:da:70:78:8f:
                    be:6e:4f:66:f7:a2:d2:c1:a7:fe:81:a6:ec:e1:28:
                    d4:4e:46:02:c7:47:c2:cc:39:61:ea:ae:48:30:75:
                    b8:ec:e1:58:a0:bc:42:20:20:d0:31:dd:f3:74:6b:
                    e7:04:d9:18:91:9b:82:ca:f3:9c:aa:2b:7f:47:f1:
                    46:5d:7a:e6:4a:c3:82:c4:4b:54:38:54:04:4b:5a:
                    7d:57:80:8b:22:09:62:d2:11:d1:e0:3e:7d:d1:74:
                    75:18:f1:95:49:99:3d:d8:2c:cd:3d:07:89:71:0a:
                    35:d3:56:f5:6c:c6:16:73:43:a4:09:88:49:d4:07:
                    7a:9d:51:02:77:69:ef:72:55:16:69:15:83:c1:68:
                    de:83:26:81:5e:f0:ae:f3:91:37:4b:71:4d:97:c6:
                    a1:cf:d7:c1:6c:a5:c2:a6:6e:25:55:ab:63:c0:5d:
                    ce:24:d2:7b:2b:6b:e0:27:27:6f:da:03:d3:5b:2a:
                    1f:02:ea:28:55:82:59:5c:ff:e1:76:c0:f3:66:a2:
                    45:7f:3d:24:ef:9f:67:21:91:82:2c:8b:05:0b:5c:
                    16:72:e3:ea:93:4a:46:23:ca:b8:1c:00:c1:8a:28:
                    ef:44:cf:c9:cf:40:04:2a:6e:6c:c1:b2:9a:17:67:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:88:6B:CB:3B:CA:A0:26:2C:B0:79:4C:0F:07:2A:30:AD:C3:94:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/425e4300-dc56-3137-89f3-1ea87e991b56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:401::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:c5:d9:5a:b6:6a:41:c4:55:8d:62:37:ed:f3:2a:df:85:17:
         bb:31:3c:5a:ed:fb:ed:21:ca:68:ac:71:15:82:59:d0:4d:ce:
         cf:c3:61:5d:7a:f3:1b:14:13:93:63:27:45:21:4b:30:81:99:
         45:e5:04:bc:ef:1b:fc:47:72:90:48:1d:ae:ed:5e:f9:e1:e4:
         0a:3a:13:81:19:89:34:a2:ae:61:38:65:ff:9c:f8:ec:ed:14:
         69:ff:cd:89:e7:21:3c:20:3a:fb:8b:13:94:44:f5:a9:9d:0f:
         48:e0:0a:17:c7:3b:01:d0:33:66:b6:c6:86:59:ab:76:73:e2:
         46:91:0d:0f:4e:86:d9:8f:7f:7b:5e:6f:a7:d1:e0:83:70:c7:
         c4:00:49:a1:e3:cc:e9:48:7b:43:78:0b:f7:fc:cd:04:5e:87:
         16:11:97:14:da:66:36:2f:46:c0:14:4b:29:ec:be:01:f7:ef:
         a0:fe:52:0f:ec:0a:33:f1:36:dc:f6:17:ad:ae:67:d4:f2:cc:
         ed:60:de:88:0e:e6:81:0a:69:0e:70:f4:a9:e8:6a:9f:e9:c4:
         44:31:64:91:2d:74:49:7d:5e:20:1a:7d:a4:47:8a:54:d8:65:
         91:90:02:0c:56:ce:f3:f2:b5:57:89:eb:e7:8c:47:12:f5:ff:
         67:ed:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:15:05 2025 by rpki-client