Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d77a36b-2b5a-3642-b3a0-73053fb2001d.roa
File:                     7d77a36b-2b5a-3642-b3a0-73053fb2001d.roa (raw, json)
Hash identifier:          FUSvbaehzumNsxbgTYt7mutntUZl3qe4KzVeYHOhhp4=
Subject key identifier:   EF:C3:95:F7:B3:29:30:97:22:25:DC:39:86:13:56:90:DF:D0:43:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C125ED91A5969CE39877600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d77a36b-2b5a-3642-b3a0-73053fb2001d.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        2603:301d:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:5e:d9:1a:59:69:ce:39:87:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=271ab784-bc54-4a10-b52b-9a57265537a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:eb:ea:da:a5:46:57:22:7f:f0:ec:69:95:
                    67:13:80:51:57:a1:8e:80:0b:b3:62:68:a9:42:93:
                    73:71:82:b1:20:ea:c6:8a:9a:8a:5a:12:81:0c:70:
                    d6:d4:7d:4b:5c:de:a6:35:00:9d:d9:46:05:38:98:
                    00:03:a1:e2:c4:21:c1:e3:f6:53:6e:45:e2:67:a1:
                    e8:95:03:b6:44:e8:d1:e5:e6:32:67:bc:48:83:f0:
                    9a:35:ef:e7:28:16:bd:f3:c7:32:54:fc:b2:6a:7a:
                    21:54:06:d1:0c:25:20:03:02:82:72:6a:2a:f0:bf:
                    2c:b4:96:bd:bf:93:e8:c5:aa:ed:92:61:c3:2e:87:
                    08:09:3d:d7:ba:e8:1e:ed:04:ef:aa:7b:5a:04:1e:
                    3c:c7:2c:e0:1f:2b:23:72:7b:3c:a0:4a:0e:bd:46:
                    f3:68:cc:0f:60:9d:dd:18:09:20:56:a6:fc:75:ad:
                    2c:81:ef:aa:25:29:84:00:5d:47:0a:34:34:58:c1:
                    a0:cb:5e:f6:97:2e:74:09:d3:75:38:a8:fe:e6:17:
                    28:5d:73:f8:29:de:ab:e9:32:e5:16:ff:d1:6b:0c:
                    af:11:52:d2:05:62:b0:49:34:ba:29:c1:bd:f3:42:
                    83:f9:1c:55:c9:57:99:f6:ef:86:59:72:b3:80:ef:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:95:F7:B3:29:30:97:22:25:DC:39:86:13:56:90:DF:D0:43:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d77a36b-2b5a-3642-b3a0-73053fb2001d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301d:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7d:1b:ce:9c:98:7b:40:ac:19:5b:84:ce:f1:01:7a:19:37:
         6c:cc:c2:3e:3e:cb:f3:f9:9d:47:f9:ca:70:2a:cb:e4:5a:1d:
         48:47:05:e2:49:a2:ac:f2:70:4b:c0:57:e9:c1:74:65:4f:63:
         db:0f:f5:29:52:29:f0:7e:0c:62:52:ed:0a:35:b0:5b:fb:be:
         41:91:72:6e:d4:8a:fd:d0:3d:49:e7:be:c3:e4:b4:8f:0d:0f:
         f2:19:39:39:b2:f2:43:df:b3:8a:68:c7:f7:4e:d7:a8:60:09:
         a0:34:8a:6d:02:3b:44:da:18:bc:cc:3c:30:1c:ba:c4:19:6e:
         10:dd:a1:35:86:cd:c5:ce:41:a7:31:95:38:c6:ef:1a:94:1f:
         56:73:cd:69:ab:90:45:25:3e:1b:dd:64:0a:40:a3:43:84:be:
         f3:0d:9f:97:25:85:2e:aa:59:04:13:2d:a4:fd:90:11:df:b0:
         e2:04:33:94:8d:30:31:7b:b8:51:02:45:7b:e2:5b:dc:c1:dd:
         3c:4c:fd:05:d3:d2:4a:d9:11:ac:de:bb:d5:95:53:f6:41:69:
         a1:6a:10:bd:0e:52:fb:4a:42:c2:a3:a0:8e:88:fd:aa:30:fa:
         b0:75:fa:5a:d1:72:b7:e0:0b:94:87:69:5e:73:ce:23:4f:e0:
         a3:ae:ff:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEhMEl7ZGllpzjmHdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjcxYWI3ODQtYmM1NC00YTEwLWI1MmItOWE1NzI2NTUzN2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSnr6tqlRlcif/DsaZVnE4BRV6GOgAuzYmip
QpNzcYKxIOrGipqKWhKBDHDW1H1LXN6mNQCd2UYFOJgAA6HixCHB4/ZTbkXiZ6Ho
lQO2ROjR5eYyZ7xIg/CaNe/nKBa988cyVPyyanohVAbRDCUgAwKCcmoq8L8stJa9
v5PoxartkmHDLocICT3Xuuge7QTvqntaBB48xyzgHysjcns8oEoOvUbzaMwPYJ3d
GAkgVqb8da0sge+qJSmEAF1HCjQ0WMGgy172ly50CdN1OKj+5hcoXXP4Kd6r6TLl
Fv/RawyvEVLSBWKwSTS6KcG980KD+RxVyVeZ9u+GWXKzgO+ogQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO/DlfezKTCXIiXcOYYTVpDf0EONMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q3N2EzNmItMmI1YS0z
NjQyLWIzYTAtNzMwNTNmYjIwMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwHSAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqn0bzpyYe0CsGVuEzvEBehk3bMzCPj7L8/mdR/nKcCrL5FodSEcF
4kmirPJwS8BX6cF0ZU9j2w/1KVIp8H4MYlLtCjWwW/u+QZFybtSK/dA9See+w+S0
jw0P8hk5ObLyQ9+zimjH907XqGAJoDSKbQI7RNoYvMw8MBy6xBluEN2hNYbNxc5B
pzGVOMbvGpQfVnPNaauQRSU+G91kCkCjQ4S+8w2flyWFLqpZBBMtpP2QEd+w4gQz
lI0wMXu4UQJFe+Jb3MHdPEz9BdPSStkRrN671ZVT9kFpoWoQvQ5S+0pCwqOgjoj9
qjD6sHX6WtFyt+ALlIdpXnPOI0/go67/8Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:51 2025 by rpki-client