Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12431040-8113-379b-9478-cea17e1ac4c3.roa
File:                     12431040-8113-379b-9478-cea17e1ac4c3.roa (raw, json)
Hash identifier:          DVg2GsSISW5fSQt9WlncyO0lFXZu4XwTWsh5YdL7J7Q=
Subject key identifier:   B3:44:9E:57:35:5E:44:71:6D:0E:60:5A:A7:A9:AB:41:7B:6B:7A:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6659F71819424760B2780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12431040-8113-379b-9478-cea17e1ac4c3.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:8081::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:65:9f:71:81:94:24:76:0b:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=47fa6233-b389-453d-bd08-6ccf0b5c1ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:f2:6c:a9:60:78:5c:9c:2a:5d:45:b5:a4:
                    79:fb:e6:9b:78:8e:2b:d2:67:9f:60:d9:1f:6a:90:
                    93:87:92:0d:a1:af:1d:18:05:2a:b2:01:e4:50:cf:
                    54:51:c0:15:9e:ca:a9:32:76:7c:87:b7:c2:ff:35:
                    04:17:64:b2:9e:09:ca:af:b7:cd:68:73:8a:43:6e:
                    e3:07:e6:6e:9b:e9:e2:47:8d:99:4e:44:07:0a:43:
                    20:7d:4b:26:6c:a0:a9:f3:a0:78:f9:97:d5:a8:63:
                    f9:da:3a:30:bc:5d:0f:a6:c9:f9:75:40:fb:1d:13:
                    eb:1a:f8:83:31:25:d7:24:7d:e2:ef:e7:dc:3e:03:
                    13:a4:f2:d4:de:b5:56:cc:06:ec:e6:da:a0:96:3c:
                    8d:0a:8d:35:e0:74:8a:1d:32:fe:bb:69:b5:50:f1:
                    9b:f3:4d:5e:6b:d8:24:53:af:c9:49:1d:42:e1:f9:
                    f1:d7:42:5c:a2:4e:65:13:62:8d:82:47:cf:7c:72:
                    32:f0:f9:ab:9e:cd:ef:28:4c:36:e4:1f:db:0f:b2:
                    6c:c5:79:1c:66:82:ca:76:16:30:a9:20:02:72:f3:
                    11:27:dd:b6:73:ab:fa:40:db:1a:6e:dd:d7:17:e1:
                    f9:96:c7:07:2d:39:7b:8f:58:70:d3:27:b3:4b:31:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:44:9E:57:35:5E:44:71:6D:0E:60:5A:A7:A9:AB:41:7B:6B:7A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12431040-8113-379b-9478-cea17e1ac4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8081::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:84:1c:f4:e9:61:f3:39:8a:d2:c4:05:93:a5:3d:62:2b:
         fe:5e:50:c0:93:c8:af:1f:e6:af:c7:b9:b4:51:30:5a:81:14:
         f5:25:03:1e:7a:1c:8b:46:3c:49:d9:8c:85:e8:c8:b4:84:a6:
         27:35:e4:c2:37:10:40:ce:5d:d6:e1:6e:4e:ae:72:b1:7c:9b:
         73:c6:0e:94:85:8c:1e:9a:83:ac:4b:7e:9e:df:93:22:44:98:
         d8:af:1a:8f:64:cc:4f:01:70:fa:e5:32:25:ea:9b:67:ba:5a:
         17:75:13:d8:44:2e:5f:d3:d9:2f:3a:f1:6b:b0:b2:61:43:b8:
         53:16:0e:65:30:cd:be:32:0d:27:ef:1c:c3:7c:1a:f3:99:28:
         b3:27:9a:a9:2d:5c:1d:f1:73:95:ab:91:e6:42:57:9f:db:85:
         f8:d3:38:4c:00:e1:80:a5:ba:18:b5:80:a3:fd:bf:12:33:3e:
         9f:b8:4b:e9:3b:c4:bb:4f:84:17:2b:22:8b:5a:1d:1f:04:8a:
         54:b0:4a:8e:c4:e5:8d:8b:8a:c1:ba:c1:98:fb:4b:dd:de:73:
         03:9c:69:9f:04:79:59:2c:dd:5e:51:c3:a2:f0:69:93:dc:e7:
         ca:fd:6c:6d:7b:e5:78:36:4c:01:50:a4:4e:8f:b2:3c:f1:19:
         07:93:f9:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pmWfcYGUJHYLJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NDdmYTYyMzMtYjM4OS00NTNkLWJkMDgtNmNjZjBiNWMxZWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFDybKlgeFycKl1FtaR5++abeI4r0mefYNkf
apCTh5INoa8dGAUqsgHkUM9UUcAVnsqpMnZ8h7fC/zUEF2SyngnKr7fNaHOKQ27j
B+Zum+niR42ZTkQHCkMgfUsmbKCp86B4+ZfVqGP52jowvF0Ppsn5dUD7HRPrGviD
MSXXJH3i7+fcPgMTpPLU3rVWzAbs5tqgljyNCo014HSKHTL+u2m1UPGb801ea9gk
U6/JSR1C4fnx10Jcok5lE2KNgkfPfHIy8Pmrns3vKEw25B/bD7JsxXkcZoLKdhYw
qSACcvMRJ922c6v6QNsabt3XF+H5lscHLTl7j1hw0yezSzF+twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLNEnlc1XkRxbQ5gWqepq0F7a3olMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI0MzEwNDAtODExMy0z
NzliLTk0NzgtY2VhMTdlMWFjNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYCB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHimhBz06WHzOYrSxAWTpT1iK/5eUMCTyK8f5q/HubRRMFqBFPUl
Ax56HItGPEnZjIXoyLSEpic15MI3EEDOXdbhbk6ucrF8m3PGDpSFjB6ag6xLfp7f
kyJEmNivGo9kzE8BcPrlMiXqm2e6Whd1E9hELl/T2S868WuwsmFDuFMWDmUwzb4y
DSfvHMN8GvOZKLMnmqktXB3xc5WrkeZCV5/bhfjTOEwA4YCluhi1gKP9vxIzPp+4
S+k7xLtPhBcrIotaHR8EilSwSo7E5Y2LisG6wZj7S93ecwOcaZ8EeVks3V5Rw6Lw
aZPc58r9bG175Xg2TAFQpE6PsjzxGQeT+QE=
-----END CERTIFICATE-----