Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e968261c-491c-342f-b2a4-2a47d683012f.roa
File:                     e968261c-491c-342f-b2a4-2a47d683012f.roa (raw, json)
Hash identifier:          cKwt9CR9BoyCZdrU9hDci6ZUntYBCXl1WIZA3Uc8ruc=
Subject key identifier:   50:C8:30:F9:A2:CD:0F:AA:E6:F5:03:FA:0E:11:94:89:22:25:CF:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143AD71BF207480E3727C280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e968261c-491c-342f-b2a4-2a47d683012f.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        2603:2195::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:d7:1b:f2:07:48:0e:37:27:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=6b24c301-b019-41c4-ad10-113260145aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:16:e7:2a:bf:46:d5:ca:76:e5:ea:f6:8d:
                    dc:38:d5:76:cf:f2:f9:26:73:38:ca:a8:cc:54:cb:
                    f1:85:a8:2b:17:65:19:60:e8:a3:0e:ff:84:ef:cf:
                    2b:98:e8:99:89:5c:a7:61:b6:54:42:47:af:b2:48:
                    08:ee:5c:21:84:18:ee:d6:5e:72:27:da:31:e5:44:
                    b3:89:a5:4f:e4:85:00:c2:ee:8d:ea:9b:c2:cb:ad:
                    d1:7d:2a:79:fc:a0:2f:e7:76:24:bc:10:29:62:28:
                    39:08:ab:dd:ff:ed:71:f2:d1:9e:48:b8:f5:80:08:
                    b4:3d:f1:c4:88:e3:9c:99:80:4e:1e:50:7b:dc:e9:
                    6c:94:83:2d:4f:ad:b3:fd:e5:06:98:29:50:7e:97:
                    70:8c:7b:e7:5d:b0:18:c9:b7:af:c5:5a:e2:c2:cd:
                    19:19:74:f7:c6:c0:a4:51:ee:ed:1a:85:69:95:91:
                    d2:52:fe:a0:95:c7:91:f2:ef:db:08:be:74:7e:bd:
                    5d:65:44:de:b8:d3:16:48:42:de:a8:77:94:c8:c9:
                    b1:00:a0:59:dc:41:96:9c:70:fa:49:5c:89:41:b9:
                    6d:75:1d:d7:35:f1:ac:c8:b9:58:c8:50:ed:f0:43:
                    bf:2c:08:a9:60:1a:b3:d1:60:dd:87:9a:a7:29:62:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:30:F9:A2:CD:0F:AA:E6:F5:03:FA:0E:11:94:89:22:25:CF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e968261c-491c-342f-b2a4-2a47d683012f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2195::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:fc:6d:d2:4a:bb:b7:e6:29:8b:24:8c:bd:70:4a:29:5f:
         f3:4c:20:61:7f:61:62:71:0d:0a:61:b9:30:25:b2:d2:ca:75:
         36:75:94:c0:ca:bf:56:e1:40:d4:a8:47:fc:04:44:7b:35:4b:
         87:54:e6:e7:66:da:37:c4:7c:b2:44:9c:2e:04:ff:59:6c:fe:
         15:13:8f:e2:46:0b:1a:bc:23:f4:c9:a6:ca:32:bb:26:47:d6:
         98:de:50:c9:df:f1:a4:aa:89:f7:42:9a:85:18:58:a7:fa:ca:
         10:16:f0:45:fd:02:4f:9b:de:6a:3f:2f:24:5a:95:9e:b5:9e:
         47:04:16:15:d2:03:68:ad:b8:e9:a2:f1:f4:6d:02:aa:95:70:
         e2:f6:f1:c5:3f:f6:f9:51:88:d1:18:ea:eb:d2:f7:2d:87:62:
         11:03:d4:88:5f:5c:84:11:5b:d1:1b:f5:d2:d7:f2:39:d9:47:
         96:47:27:c1:8e:d4:a1:41:44:ae:67:d7:69:c8:72:70:32:3e:
         a0:be:0e:5c:fb:9e:0a:b9:96:62:6e:16:67:95:63:85:0e:ca:
         66:bc:18:aa:53:f0:ff:89:68:2c:95:47:02:cb:eb:25:47:7b:
         17:7d:23:4a:d1:04:76:cf:e2:49:51:35:ac:48:ab:f0:3d:20:
         33:d3:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:56:03 2025 by rpki-client