Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/024549fe-32d9-36fb-a936-37001400f39e.roa
File:                     024549fe-32d9-36fb-a936-37001400f39e.roa (raw, json)
Hash identifier:          qjw1M/2UR650ZeydVcPeSdo2V60OLpj6ZzmixoonFwo=
Subject key identifier:   8B:91:10:83:DE:F5:1F:8B:C8:06:4A:E5:13:F5:44:F4:B9:B8:E2:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA63756B4F3C1B3A86E7578
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/024549fe-32d9-36fb-a936-37001400f39e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        2001:559:8326::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:37:56:b4:f3:c1:b3:a8:6e:75:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a2f898d6-9d03-4963-8e88-ac8d27be52fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:fa:fb:4e:28:c7:ea:5f:d8:9c:cf:b5:0d:
                    9d:4d:e3:c4:7d:04:a2:b9:ac:d2:6f:e0:a0:38:f5:
                    16:6e:2a:47:5b:f5:3d:ed:89:c9:57:63:51:c2:e9:
                    f5:fe:26:9e:8a:39:31:0a:07:14:62:1e:f6:26:3b:
                    ea:6e:19:54:d4:cb:e3:79:be:95:8a:66:67:13:6e:
                    82:86:c0:c9:6b:50:db:43:3f:e7:9a:dd:ef:0c:ca:
                    a8:89:95:d7:b1:74:56:f6:74:7d:63:77:3f:44:45:
                    a9:1f:de:3c:28:80:5a:42:7f:ae:8a:01:4e:a1:7d:
                    14:eb:6b:ac:ba:19:bb:20:e2:0d:7e:12:37:fe:c7:
                    db:c6:66:de:b6:02:44:c4:27:f6:6d:cb:79:00:59:
                    50:af:0f:30:e9:4d:70:6f:ec:41:0c:25:8b:fe:db:
                    09:fb:29:0f:a3:98:27:69:c2:53:ea:38:e0:c9:1e:
                    45:47:92:86:c2:2d:c2:4d:9f:e9:3f:2c:17:3f:1a:
                    3f:1f:c0:aa:20:13:97:b0:1d:9f:6b:0e:58:7d:2e:
                    d5:df:61:32:e3:07:4e:5c:eb:66:dd:5f:06:72:98:
                    ad:fd:5a:44:2d:f3:a8:37:ea:88:14:16:95:6d:e3:
                    05:4e:d6:71:b4:d2:80:94:b6:a0:35:b1:3f:f1:81:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:91:10:83:DE:F5:1F:8B:C8:06:4A:E5:13:F5:44:F4:B9:B8:E2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/024549fe-32d9-36fb-a936-37001400f39e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8326::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:27:6a:b1:c6:23:2e:57:f6:31:a8:bc:bb:86:9e:d8:05:ef:
         ce:a6:ed:43:0a:60:83:e9:b5:26:50:f4:89:6b:78:79:ab:7a:
         56:49:3a:16:2a:60:bc:35:d4:22:90:5b:ef:25:79:72:10:31:
         f1:09:96:cd:74:8b:91:c4:b1:32:aa:05:ba:8d:10:37:ae:63:
         9b:f7:17:91:17:1d:8b:3b:6e:ea:04:dc:2a:11:2d:f9:aa:61:
         03:e6:20:01:74:63:13:c6:72:d4:aa:df:3b:d4:5a:66:6a:eb:
         5e:74:84:45:8f:98:b2:77:1e:02:9f:10:27:ec:09:68:c3:b0:
         03:f7:39:5c:c3:e1:ed:61:f2:e0:65:fa:ca:ff:2e:55:26:d7:
         ea:35:4d:81:04:09:22:10:90:93:98:89:22:1a:72:37:18:0c:
         23:f3:65:87:30:12:c3:8d:28:c3:bb:02:8a:0c:b8:01:72:1e:
         8c:95:84:ba:4f:d9:23:06:7b:1d:e4:a9:d7:36:e7:9d:19:d8:
         38:0e:88:c0:dd:cb:b8:57:c2:19:d5:c5:f3:c7:9e:f6:75:73:
         15:18:c1:9b:bb:4a:f5:cc:e0:ee:9e:c3:d3:5d:d0:ec:32:18:
         44:ed:13:f0:3c:92:c4:ae:d4:78:5c:f4:2e:74:d4:ee:53:38:
         be:7c:b1:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pjdWtPPBs6hudXgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YTJmODk4ZDYtOWQwMy00OTYzLThlODgtYWM4ZDI3YmU1MmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApET6+04ox+pf2JzPtQ2dTePEfQSiuazSb+Cg
OPUWbipHW/U97YnJV2NRwun1/iaeijkxCgcUYh72JjvqbhlU1Mvjeb6VimZnE26C
hsDJa1DbQz/nmt3vDMqoiZXXsXRW9nR9Y3c/REWpH948KIBaQn+uigFOoX0U62us
uhm7IOINfhI3/sfbxmbetgJExCf2bct5AFlQrw8w6U1wb+xBDCWL/tsJ+ykPo5gn
acJT6jjgyR5FR5KGwi3CTZ/pPywXPxo/H8CqIBOXsB2faw5YfS7V32Ey4wdOXOtm
3V8Gcpit/VpELfOoN+qIFBaVbeMFTtZxtNKAlLagNbE/8YHWdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIuREIPe9R+LyAZK5RP1RPS5uOJpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDI0NTQ5ZmUtMzJkOS0z
NmZiLWE5MzYtMzcwMDE0MDBmMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYMm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADEnarHGIy5X9jGovLuGntgF786m7UMKYIPptSZQ9IlreHmrelZJ
OhYqYLw11CKQW+8leXIQMfEJls10i5HEsTKqBbqNEDeuY5v3F5EXHYs7buoE3CoR
LfmqYQPmIAF0YxPGctSq3zvUWmZq6150hEWPmLJ3HgKfECfsCWjDsAP3OVzD4e1h
8uBl+sr/LlUm1+o1TYEECSIQkJOYiSIacjcYDCPzZYcwEsONKMO7AooMuAFyHoyV
hLpP2SMGex3kqdc2550Z2DgOiMDdy7hXwhnVxfPHnvZ1cxUYwZu7SvXM4O6ew9Nd
0OwyGETtE/A8ksSu1Hhc9C501O5TOL58sbc=
-----END CERTIFICATE-----