Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63a2c1d1-7941-32b6-9e67-55fa07e2c1c9.roa
File:                     63a2c1d1-7941-32b6-9e67-55fa07e2c1c9.roa (raw, json)
Hash identifier:          OxaWK74QLAqOzwzzcTdJIVpCCKD2gqrumxXMMjRnEUA=
Subject key identifier:   3C:4C:95:86:35:2F:B9:1E:49:A6:6D:52:E9:D7:C6:CE:23:26:0F:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C125E2C29AAA262FE7B3400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63a2c1d1-7941-32b6-9e67-55fa07e2c1c9.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        2603:2046:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:5e:2c:29:aa:a2:62:fe:7b:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=02728a93-ad29-4c17-87ab-b1a15fb0e149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:aa:ce:1c:43:9b:6f:4a:82:39:15:cb:41:
                    eb:75:f7:87:9c:71:8d:55:ff:cf:72:81:25:0d:1e:
                    7d:b1:b6:a0:a6:b5:dd:e8:6c:c1:e4:8a:55:f2:08:
                    95:b7:7c:fd:ef:ae:02:67:58:d7:66:1d:5e:98:f9:
                    8a:1a:37:6e:5f:1e:b3:5e:aa:e8:70:dd:8f:7c:e4:
                    63:5a:80:7e:b8:e4:03:8f:2a:be:1b:e7:71:f2:09:
                    27:98:67:fa:ad:70:24:25:95:b8:0e:47:4c:c2:e5:
                    0a:f9:9b:d9:c7:de:f3:3a:ce:da:d6:37:e7:e4:02:
                    2d:16:61:0c:31:a2:c7:d2:5d:88:cc:dd:7e:e8:a0:
                    77:03:ab:cb:cd:c4:46:c0:42:51:2f:b7:f4:83:3b:
                    d0:1d:10:99:21:97:71:0f:3e:78:a2:e3:6e:56:5c:
                    e8:f4:2d:e9:00:de:9b:87:ad:10:5e:5d:55:3e:72:
                    82:80:f4:f4:39:84:21:73:0d:9b:60:a6:84:d6:fb:
                    60:46:3f:8b:6b:ed:f9:0d:5a:cb:3b:d2:4e:54:9f:
                    07:c1:4f:3b:0f:df:a6:0b:b2:f4:ad:62:fe:f8:bf:
                    e6:c3:e2:e5:f9:2a:4f:26:9a:b3:2f:0a:ad:b1:b7:
                    a7:e2:56:f5:42:35:cc:6c:bd:29:ce:89:f7:ef:84:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:95:86:35:2F:B9:1E:49:A6:6D:52:E9:D7:C6:CE:23:26:0F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63a2c1d1-7941-32b6-9e67-55fa07e2c1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2046:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:df:38:d8:09:29:52:2a:ba:73:93:59:04:d3:7c:a1:c0:
         92:49:92:2b:f6:22:64:e9:ae:32:96:70:85:53:2e:31:56:1e:
         34:39:9c:d3:a5:b6:88:f6:6b:a1:13:4a:6e:18:04:9a:52:5d:
         57:16:eb:1f:67:49:6b:26:c2:25:0d:c3:84:96:30:b1:6c:03:
         01:ff:1e:db:3e:a7:6b:b2:69:d6:63:aa:61:30:6c:e4:11:f6:
         51:b1:5d:c0:ec:fb:61:ca:4e:51:f3:bc:2a:24:ea:63:71:eb:
         39:53:12:cb:0b:c2:87:a5:e9:e7:1f:2e:dc:98:76:62:69:0e:
         2c:29:a6:4f:dc:33:1e:94:8c:99:b6:5f:92:08:2f:c4:cb:85:
         db:03:d7:b2:99:c4:9d:f4:f7:6f:3b:41:7d:91:0e:b9:e4:c7:
         2b:64:99:3a:b4:5c:8b:20:3e:4d:75:96:e7:c9:fc:36:67:be:
         d3:7b:78:eb:a0:e6:52:5e:d0:b6:64:57:a7:e7:ff:17:42:fc:
         99:94:83:f5:13:93:59:a9:6d:78:58:ec:e3:92:80:a6:6e:19:
         8b:7c:04:f5:7e:3d:6f:85:dd:3b:77:f5:71:3f:a1:3c:3e:eb:
         e3:a5:ce:0a:0e:a1:b6:76:a2:e0:2b:91:8c:21:ef:f2:bd:1c:
         71:d8:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:32 2025 by rpki-client