Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f93ac62e-4b6b-31d7-b420-d4914d939f35.roa
File:                     f93ac62e-4b6b-31d7-b420-d4914d939f35.roa (raw, json)
Hash identifier:          KV+S05qN7/cZrQnjTP5Oa+G1CBBZ5ONIB+zq8dfDIM0=
Subject key identifier:   9E:0A:8C:41:F3:06:99:0F:4D:70:00:F8:F3:D5:36:73:58:6F:A5:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FC82D9BF71A14D71B87AF
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f93ac62e-4b6b-31d7-b420-d4914d939f35.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     7016
IP address blocks:        2601:98c:c000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:c8:2d:9b:f7:1a:14:d7:1b:87:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=42429772-ca1b-4df7-bd7d-3bd782a63b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:83:53:1b:d0:aa:76:e6:c0:be:77:71:e9:
                    35:55:81:3d:4a:b5:fb:37:3e:34:16:51:d4:82:aa:
                    c3:6d:c9:65:5d:f7:b9:2d:60:1d:f3:5c:f5:07:ee:
                    40:e2:c4:3b:01:93:82:60:d7:ab:87:a6:d9:41:3b:
                    a5:ef:98:b9:6a:83:45:8b:a1:0e:ca:48:0c:22:94:
                    85:d6:8c:a8:d9:bb:f2:66:d4:d1:a5:c1:58:61:7f:
                    e6:6b:f6:6f:46:d2:52:64:1f:8c:ff:d0:08:8f:92:
                    af:49:b8:96:ab:e2:5f:79:b2:7e:50:db:dc:f2:9f:
                    35:78:6b:fc:55:55:be:a1:80:e6:3f:31:c3:7c:ce:
                    ac:82:84:14:00:bd:a9:be:5f:68:1a:01:c8:26:d5:
                    35:ac:af:4b:52:c2:98:5b:6a:00:ef:84:9d:55:e1:
                    f5:a5:ff:e5:79:d2:2b:a5:d6:b0:ac:22:36:3f:fe:
                    e0:b3:3b:ea:9e:75:bd:c6:8f:59:e0:c6:ba:5d:2b:
                    af:bf:be:6a:01:57:d8:c3:c3:fa:95:60:2c:be:b5:
                    ea:82:66:01:c3:44:a1:61:f2:03:bb:fb:b0:5e:88:
                    59:c2:c7:c8:09:d1:3f:14:ec:3b:5d:fc:fd:cd:dc:
                    64:6a:e8:16:e7:04:92:81:f7:23:4b:9c:57:e2:55:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:8C:41:F3:06:99:0F:4D:70:00:F8:F3:D5:36:73:58:6F:A5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f93ac62e-4b6b-31d7-b420-d4914d939f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:98c:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:e5:66:96:fb:74:7e:d1:88:75:b2:50:1f:8f:e2:33:b5:
         7f:86:38:6d:aa:8d:94:11:27:9e:84:80:22:09:43:23:a8:6a:
         ac:e9:23:33:e5:17:e5:73:85:76:e7:87:74:f3:bb:48:8f:a6:
         ca:c1:ce:a0:5f:37:fb:4b:21:90:f0:e3:ad:f9:6b:39:30:3b:
         df:7f:ea:dc:25:6b:ba:0c:83:2e:d8:6d:8f:e8:56:d3:fb:16:
         52:61:35:15:f0:9b:b8:45:1c:42:c8:ef:9a:ce:8b:29:a7:3b:
         bb:85:c7:97:3b:85:79:39:d1:fb:b1:96:11:82:36:34:60:9d:
         3d:97:47:78:9d:61:c2:5f:10:0d:dc:12:1d:62:a3:31:dd:9a:
         92:1c:86:4e:2f:d9:cf:7b:91:92:61:21:1b:0b:65:8f:1f:be:
         7d:87:a1:bd:5d:24:0f:3b:46:c0:30:a6:69:69:93:9e:2d:d4:
         01:fb:6a:cd:3f:f5:d4:16:56:59:44:09:ad:8d:2c:f1:25:2a:
         e5:8c:3b:97:f2:8f:b0:a1:b5:61:72:59:46:07:9e:1c:6c:5a:
         3c:2f:4f:c0:53:21:e3:88:20:8a:95:0e:9a:dd:7c:1b:2d:d2:
         ef:6d:68:46:2a:fd:44:8a:2f:30:c4:6f:52:43:f5:4d:ca:69:
         17:eb:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:36 2025 by rpki-client