Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56d12166-559d-340c-9c57-f9e337329243.roa
File:                     56d12166-559d-340c-9c57-f9e337329243.roa (raw, json)
Hash identifier:          wkyY6c9HArvL54Ly+n6QGP0VkVTC8CG/nHLDtcVuz8M=
Subject key identifier:   78:0F:73:76:8A:2B:FD:01:ED:74:74:F2:E2:B9:46:E8:DE:A6:5C:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FC66F78CA327DAAE23400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56d12166-559d-340c-9c57-f9e337329243.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     7016
IP address blocks:        2601:981:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:c6:6f:78:ca:32:7d:aa:e2:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=f6d4cb0a-6b86-41c6-afc0-0105483ba23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:0e:59:c9:8e:d1:70:63:fd:d9:04:de:7c:
                    33:5b:46:c0:33:13:13:0e:4b:23:6e:5f:60:22:96:
                    f4:8e:18:af:6b:4e:68:20:4f:02:de:68:3f:76:7a:
                    78:ce:f9:b4:5b:42:7b:b8:87:f0:5d:38:51:a0:05:
                    35:92:1a:98:50:49:ff:e0:42:cf:b9:c3:ac:90:61:
                    b1:1a:ea:5b:8f:59:13:a4:0a:a4:7d:3f:88:88:6d:
                    9d:c2:81:49:f4:dd:ad:fe:01:a2:ff:41:cc:20:35:
                    5f:62:2a:e5:8e:5c:4e:71:5f:b6:d3:b6:9a:2b:95:
                    80:5b:69:75:88:12:61:24:2f:06:03:87:8d:0a:9f:
                    fa:fb:cc:15:48:76:2e:40:b5:a1:81:63:df:c9:1d:
                    6b:f6:05:b6:37:dc:d8:50:af:03:aa:8b:f3:c3:27:
                    8a:5c:72:92:66:48:76:a0:58:aa:da:43:fd:c2:0e:
                    59:d9:a4:c2:72:d6:2d:70:68:b5:61:a9:dc:2d:7d:
                    0a:b3:e5:c3:4b:a8:15:49:90:45:10:df:d6:37:00:
                    66:33:86:51:79:ab:02:40:ce:63:a4:a9:d8:58:56:
                    33:f4:20:91:11:81:c0:3c:d2:ce:2b:5b:55:5d:11:
                    75:32:6b:4a:04:65:a3:8e:1f:2c:49:9f:44:41:fe:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:73:76:8A:2B:FD:01:ED:74:74:F2:E2:B9:46:E8:DE:A6:5C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56d12166-559d-340c-9c57-f9e337329243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:981:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e9:fa:51:36:64:c3:ac:94:d3:d2:70:6a:e0:1f:3a:b4:60:
         d4:55:74:be:4d:27:c9:a8:89:75:c4:a3:5b:b5:c7:16:2a:a6:
         2a:d6:0f:23:2d:12:42:21:66:90:eb:98:fa:f9:6b:0b:cb:3b:
         9d:0d:cd:47:79:a0:60:85:ce:cd:57:a5:09:a9:c1:c8:8f:26:
         95:10:4a:23:a4:95:33:b5:d3:cd:05:40:ce:13:20:26:2f:47:
         f1:ca:be:27:ea:a5:d0:00:ca:6a:bb:97:38:91:6c:8f:90:21:
         3c:88:9b:33:a0:52:e5:fe:1c:d4:09:60:16:50:be:3d:1a:13:
         71:20:cb:51:15:63:f1:bc:25:0a:e4:bc:3a:6d:86:b0:65:96:
         60:de:7e:98:d8:c6:a5:9e:ef:99:34:5a:c9:0e:cc:43:11:07:
         6e:ff:40:fd:bb:87:33:ef:65:3e:65:65:34:4c:4f:a4:78:46:
         3d:d5:97:49:5a:68:2b:9a:1e:f6:aa:61:07:8e:48:7b:92:01:
         e1:f4:6e:70:fa:5d:65:9e:9b:cf:86:b3:15:9e:70:57:35:bc:
         bf:fb:f5:28:c2:a2:cc:fb:b6:02:89:80:97:72:18:29:49:4b:
         30:ab:32:dc:2f:c5:8f:2d:25:1b:ad:2c:f5:25:2a:e8:92:6c:
         2e:bd:f5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:59:56 2025 by rpki-client