Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960f4fa7-cb59-3ce2-a40d-4e790084f8dd.roa
File:                     960f4fa7-cb59-3ce2-a40d-4e790084f8dd.roa (raw, json)
Hash identifier:          ZeEFOBXw191EJh829I2vGcojwnntrAoOB8UigPmJcrA=
Subject key identifier:   A6:D4:85:60:FB:50:0B:BD:19:B4:C6:D4:05:DA:F3:84:EB:B5:97:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848117005F79F2AC76693209800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960f4fa7-cb59-3ce2-a40d-4e790084f8dd.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     7016
IP address blocks:        2603:2543:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:70:05:f7:9f:2a:c7:66:93:20:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=34f35ea6-b2c9-4dd6-a97c-88c71c4e11db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:58:fc:cd:57:98:11:28:21:94:64:12:c7:
                    c4:70:3a:03:aa:15:b3:67:f6:06:87:02:5e:42:ba:
                    df:54:ee:b6:4a:69:8e:17:a3:5a:d4:1a:91:aa:fd:
                    3e:9e:91:55:90:3b:44:b1:2b:1c:e4:75:88:cd:b7:
                    f9:97:41:a3:a7:f5:f5:a2:52:fb:3a:1d:aa:b0:7d:
                    56:57:5c:f1:5b:0f:3c:8f:2b:26:8f:7c:df:cc:2d:
                    81:53:b5:8a:96:2f:ef:d7:d2:36:86:d0:af:00:75:
                    7c:3c:0b:f6:7c:49:d6:2b:7b:a1:07:c5:83:5b:a0:
                    d8:58:7e:48:fb:1c:88:b2:5a:2c:6c:88:23:a9:5e:
                    91:37:d6:98:85:ba:61:90:56:e8:22:fa:75:2b:5a:
                    80:b3:73:c2:72:cb:4e:8e:64:2a:37:66:c0:3d:2e:
                    aa:4d:64:6f:ed:81:fc:47:c3:f0:77:7e:62:c9:68:
                    30:0f:e9:25:0e:9c:06:73:e5:52:8a:ea:de:6c:85:
                    23:3d:af:82:9a:03:cd:e2:38:55:ff:d9:16:5e:8d:
                    b5:f7:f1:a5:9d:80:7c:0c:59:cd:c2:25:d6:b7:61:
                    05:5f:ba:4f:de:91:9d:39:fa:eb:fe:04:97:9a:41:
                    97:30:31:e2:15:85:73:e4:46:60:fd:20:65:40:98:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D4:85:60:FB:50:0B:BD:19:B4:C6:D4:05:DA:F3:84:EB:B5:97:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960f4fa7-cb59-3ce2-a40d-4e790084f8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2543:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:a8:97:0f:2b:5e:8e:42:4b:a8:25:4d:93:12:ba:3a:18:
         02:f6:b9:cc:8b:ae:e8:df:bd:67:ec:87:70:c1:52:eb:27:8c:
         db:21:48:7f:a3:b5:ce:4a:93:d3:de:bd:90:c2:0e:54:09:17:
         fb:78:67:98:66:e4:85:53:6c:da:ad:23:e0:2e:0f:f1:6a:5c:
         f2:5c:5c:2f:69:0b:28:8f:47:65:47:93:05:5a:7e:b8:5f:95:
         d4:ff:71:bc:70:79:b7:75:fd:76:6b:c7:71:3b:63:14:72:ae:
         b7:00:86:db:f5:fb:23:0a:3e:6c:81:9a:88:90:ec:96:82:33:
         64:92:ab:ca:74:5f:bb:c2:88:ab:d1:04:f7:eb:4d:b4:ac:eb:
         b1:5b:64:87:c8:ce:55:fd:74:6f:52:b4:36:e8:de:0a:51:18:
         58:69:74:c6:4c:19:d5:27:18:c4:08:01:f7:76:21:9a:f7:f6:
         fe:fd:6f:39:c9:69:92:bf:84:6c:bb:8f:66:46:4e:38:01:b4:
         11:22:84:b5:6e:f2:77:4a:a7:22:d7:59:43:c8:d9:7b:ca:a6:
         31:4a:0e:d7:78:8e:f9:25:62:d8:53:58:67:09:36:c1:93:28:
         68:fe:eb:f0:35:32:be:a6:cf:06:fb:32:d1:24:ca:9b:eb:bd:
         83:ca:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:58:47 2025 by rpki-client