Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e10b3f2c-4693-3b69-8d47-26e389dd4920.roa
File:                     e10b3f2c-4693-3b69-8d47-26e389dd4920.roa (raw, json)
Hash identifier:          +AAK8IualVgaNUWZy5ptdnoVMyfYKQAxHZBV7G8HPOU=
Subject key identifier:   1B:13:01:92:81:B9:03:38:22:4E:7F:E9:62:8D:85:FD:05:7D:30:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143FC39909FD295DA9DA1000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e10b3f2c-4693-3b69-8d47-26e389dd4920.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        2603:300c:1b00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3f:c3:99:09:fd:29:5d:a9:da:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=7dd564c7-afc6-4b8f-b6ec-9d56ed974766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:a6:93:fe:07:47:d4:36:a4:19:27:50:b3:
                    05:41:15:ed:51:4e:e7:05:df:32:1f:d9:4a:4f:aa:
                    82:d9:28:37:62:b3:4a:7a:60:91:44:e8:d6:83:7b:
                    b5:c0:41:e5:6c:db:4b:fc:54:da:bf:8c:46:f1:4b:
                    da:d4:73:0b:79:76:64:da:67:99:e0:31:f7:f5:61:
                    54:88:2a:78:a3:23:de:82:4c:6b:39:da:b9:c7:22:
                    11:e5:06:76:1c:f4:30:79:37:96:22:04:b9:8c:64:
                    23:e3:cc:74:db:01:c7:0b:c4:b9:48:67:d1:af:08:
                    dc:fa:50:2a:95:bb:96:e2:ef:a2:a5:5f:c9:94:10:
                    48:84:72:b9:af:ed:1e:40:81:6c:01:66:94:87:23:
                    32:17:ea:18:85:27:98:d3:bf:e6:80:b7:0d:c7:6c:
                    4d:20:6b:fd:ea:f4:7c:16:62:96:4b:ed:da:46:58:
                    91:4b:d6:38:24:49:dc:7c:89:a8:b0:85:92:09:15:
                    33:00:3b:a9:b3:9a:3f:f4:92:e4:f3:1c:7c:de:fb:
                    df:ea:62:72:2c:24:a5:83:e3:3f:b3:18:1c:bd:e6:
                    02:fb:c9:cd:cb:5e:66:cd:3d:94:6a:97:e1:b8:c5:
                    c8:3e:1c:e0:cc:29:bf:80:f6:f0:db:95:6e:df:e6:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:01:92:81:B9:03:38:22:4E:7F:E9:62:8D:85:FD:05:7D:30:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e10b3f2c-4693-3b69-8d47-26e389dd4920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:1b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:4c:4f:c2:f7:dc:24:1c:28:83:13:ef:95:89:31:92:68:
         2e:c1:de:3d:d5:eb:81:bf:e6:96:ed:ad:32:9e:8c:c8:f1:93:
         22:ef:85:b6:79:ba:bb:18:1a:aa:1c:9f:bf:32:04:83:a0:a3:
         58:d5:0f:bc:10:c1:b9:a3:c9:26:3d:35:f6:b6:8e:13:b1:2a:
         5d:bb:10:05:2f:c1:ea:fa:50:98:0d:81:af:6a:b6:f0:bf:62:
         9f:e2:96:e3:0a:3f:78:88:68:87:ab:bd:fb:fe:32:7a:6a:63:
         06:ba:ff:42:1d:de:ef:5a:3d:cc:9b:8a:e5:75:f1:a2:89:98:
         fa:8b:b5:17:76:32:4f:1e:cb:42:3d:be:ce:1f:50:8a:11:fd:
         83:83:f3:03:4c:b5:41:31:a0:2f:d5:8f:d5:c5:c8:bd:f5:69:
         4b:51:3d:a1:43:29:00:73:61:98:60:92:6a:29:28:8b:a6:2c:
         a6:fe:43:0f:3a:2c:4c:a4:f0:1e:aa:c6:08:f2:11:68:8e:c8:
         12:65:b9:ec:a0:58:03:20:ed:b1:f4:18:15:32:da:87:0a:04:
         ff:87:47:10:94:7c:26:4b:c9:e4:11:db:6d:84:d3:33:1a:ee:
         06:5f:18:76:b4:40:f3:72:aa:ac:14:40:2e:12:91:6e:c9:2d:
         f4:d7:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:50 2025 by rpki-client