Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e19ed4e4-446e-3ad8-bb7b-8aaf61dcfb00.roa
File:                     e19ed4e4-446e-3ad8-bb7b-8aaf61dcfb00.roa (raw, json)
Hash identifier:          j5Jx8B3pE3bLbpp2UahktySKEoTUbVf3YJi9j6nYbrU=
Subject key identifier:   A4:E8:97:B5:F5:93:73:18:BB:E4:97:12:7A:D6:21:86:22:51:DF:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C10BE5D2E37784611303600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e19ed4e4-446e-3ad8-bb7b-8aaf61dcfb00.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        2603:204b:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:be:5d:2e:37:78:46:11:30:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=86d683aa-802a-4138-8fe6-43751625c7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:11:8c:83:e9:0b:b2:49:0f:87:b5:37:7d:19:
                    ff:62:b8:33:66:f1:82:48:57:c1:6b:86:b9:38:b0:
                    fb:38:05:58:2c:de:77:79:13:7a:4a:7e:1f:38:22:
                    7a:37:35:66:20:94:9f:ec:af:4f:6e:78:ba:6f:1f:
                    8c:a0:5d:87:a4:87:32:5b:77:f8:57:a0:50:3f:14:
                    63:13:0a:14:19:da:0a:6a:0a:ae:0a:c1:59:66:65:
                    7c:e9:a0:74:99:79:73:ba:08:f8:40:8e:29:56:52:
                    3f:46:7f:8e:66:ee:e9:3e:c1:a9:53:54:f3:f2:5c:
                    08:f1:55:94:2c:b4:67:f4:1f:3a:4b:90:86:ae:73:
                    49:65:23:db:6d:92:27:f2:f0:7d:c9:1b:e1:d4:4d:
                    0b:a2:89:90:06:9e:80:40:28:53:80:21:5f:a7:60:
                    80:95:a9:6f:33:60:6d:6c:ea:cb:60:24:86:b1:4a:
                    c5:69:98:2d:37:1a:89:5a:e1:3b:46:73:6a:07:50:
                    5b:eb:3c:e9:0f:71:3d:00:40:a7:43:3f:81:2b:3c:
                    dc:e1:b9:b8:fa:cf:d5:d1:13:0a:be:94:95:89:b4:
                    6f:74:e8:7c:f1:34:6c:14:68:55:6d:e0:57:3e:af:
                    8d:e4:14:ab:5c:dd:76:1f:9e:77:e2:2c:63:29:cc:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:97:B5:F5:93:73:18:BB:E4:97:12:7A:D6:21:86:22:51:DF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e19ed4e4-446e-3ad8-bb7b-8aaf61dcfb00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:204b:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a2:f2:38:21:cb:d2:16:3f:61:9b:bb:92:ce:c1:b3:3d:85:
         16:6c:5f:c9:29:ee:13:01:76:1a:32:87:ad:be:6b:93:25:4f:
         d2:1e:56:9a:8b:e9:87:f9:d6:8a:40:b5:5a:1b:55:da:01:cb:
         aa:06:ed:56:0b:4f:1e:ec:c5:d3:8f:3a:0e:3f:45:f1:62:51:
         18:3c:4f:22:3c:34:df:5f:0b:32:45:7b:3f:02:9e:99:fb:40:
         b2:c9:51:fe:ac:1e:db:b2:69:9a:d5:84:23:9f:26:1b:e5:ab:
         e7:8f:dd:5c:61:8b:ec:03:57:f4:8f:da:dc:ec:8f:d5:89:02:
         dd:c7:e3:87:12:f8:10:aa:65:6d:fa:b9:d3:5e:a5:66:e0:ca:
         63:1a:4b:75:57:71:b9:23:8c:9e:6e:c8:17:ba:b5:30:16:b1:
         f7:52:85:26:78:10:ac:df:7f:82:ea:68:5b:7b:db:e8:31:f3:
         4a:aa:f9:13:a8:91:97:5f:c6:31:e9:70:73:e8:45:8f:f9:80:
         52:95:55:8b:d4:2e:09:a1:1b:f3:27:5c:fa:ef:bd:12:95:f8:
         d7:d2:28:72:88:c0:69:41:10:73:87:29:5e:cc:32:59:98:ab:
         59:d6:a6:22:16:60:04:48:36:64:ea:c8:ac:df:cd:55:94:ab:
         73:f6:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:05 2025 by rpki-client