Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/410af8eb-c9e1-321c-9ac7-714e0430560b.roa
File:                     410af8eb-c9e1-321c-9ac7-714e0430560b.roa (raw, json)
Hash identifier:          79o/H756/vyOkQVaflaWu8qRo/dZIWiM5kPk1h4Pm6w=
Subject key identifier:   2E:8A:B2:C5:E2:20:77:9E:8B:A3:ED:CE:A0:8E:96:B5:C8:1A:6E:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA696EA7947BF9C5406F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/410af8eb-c9e1-321c-9ac7-714e0430560b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        2001:559:8229::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:96:ea:79:47:bf:9c:54:06:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=c03529f6-3e9a-4bcc-a005-965d27a26e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:d4:86:13:b5:2b:f0:46:4b:6b:11:04:a6:
                    2b:92:78:ee:5d:46:13:de:c4:db:9c:9b:e5:23:3e:
                    73:e1:84:65:98:4d:91:a7:05:54:cd:e6:c8:fd:1e:
                    c8:e0:f6:31:86:82:75:9c:2a:92:83:d1:b5:be:56:
                    98:66:c9:67:99:1b:3a:b3:12:d3:ec:c6:3a:ed:a8:
                    60:f9:7a:86:9f:f2:5e:55:ea:a7:4c:38:35:cd:71:
                    ec:8e:e7:c5:0c:22:ee:d7:65:f9:22:e2:cc:a1:30:
                    14:44:86:1e:b7:04:2e:43:61:34:1f:d0:a9:06:53:
                    d6:ad:9d:5e:f7:1d:0a:49:94:49:51:e4:3d:38:e3:
                    62:89:06:5d:fc:fa:49:e7:28:3b:47:57:47:ad:6f:
                    18:9f:ea:c3:9c:39:31:a2:68:2a:50:2b:2a:1a:01:
                    f5:57:a7:38:0e:c9:29:0b:f5:72:95:4e:f8:a7:ea:
                    77:03:50:07:3d:ad:c7:dc:8f:55:8e:c7:18:5d:34:
                    84:5f:82:e0:d0:4d:59:db:55:ba:a9:71:26:fd:76:
                    c6:c2:f9:f9:4f:58:03:0c:e8:6f:c3:c4:88:4b:d7:
                    58:cf:de:f0:15:a7:62:7f:a3:2d:be:06:8b:73:30:
                    d0:f1:f8:79:67:38:58:b4:2b:15:5e:a0:99:af:86:
                    da:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:B2:C5:E2:20:77:9E:8B:A3:ED:CE:A0:8E:96:B5:C8:1A:6E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/410af8eb-c9e1-321c-9ac7-714e0430560b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8229::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:59:a4:b6:18:f8:67:84:fa:8e:aa:cd:d0:5a:54:db:cb:e5:
         37:8e:f6:de:86:cc:a1:f4:44:c8:f4:d7:70:15:4e:12:91:ec:
         fc:36:f4:92:a6:cc:e1:01:76:24:6e:cb:45:ba:8a:8a:46:5d:
         20:c7:30:4e:18:0b:d8:1f:17:41:22:3e:57:e6:8d:45:d9:0e:
         f9:61:65:36:5b:84:22:47:4f:1a:00:5c:49:20:9c:d5:85:80:
         10:8b:c0:35:4e:0f:e3:0d:f1:95:9d:a1:c4:fd:f1:a4:b2:23:
         9d:5b:b9:ca:87:be:00:1c:a7:96:78:25:ae:12:51:31:05:10:
         25:54:6f:b5:f4:a4:98:cb:28:fa:63:06:f3:47:84:a8:27:5f:
         75:7e:6e:6e:a8:e8:91:4a:bd:f6:1b:53:4c:73:e4:51:82:31:
         16:7f:18:10:c4:8a:7e:de:d9:53:e4:ff:e9:a3:df:7a:bf:cb:
         f4:11:89:cc:5c:a3:ff:28:b9:de:68:e9:e6:e8:92:96:ad:e0:
         da:20:b1:de:c7:25:ca:be:14:46:8b:1e:c6:4f:e8:c4:2c:93:
         23:be:e0:7c:e4:46:b9:a9:90:26:39:03:8f:04:c4:1f:8c:30:
         c8:f7:86:b3:dc:6c:74:76:52:56:31:35:72:04:67:f1:ed:d3:
         e8:cd:e9:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9ppbqeUe/nFQG+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YzAzNTI5ZjYtM2U5YS00YmNjLWEwMDUtOTY1ZDI3YTI2ZTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntPUhhO1K/BGS2sRBKYrknjuXUYT3sTbnJvl
Iz5z4YRlmE2RpwVUzebI/R7I4PYxhoJ1nCqSg9G1vlaYZslnmRs6sxLT7MY67ahg
+XqGn/JeVeqnTDg1zXHsjufFDCLu12X5IuLMoTAURIYetwQuQ2E0H9CpBlPWrZ1e
9x0KSZRJUeQ9OONiiQZd/PpJ5yg7R1dHrW8Yn+rDnDkxomgqUCsqGgH1V6c4Dskp
C/VylU74p+p3A1AHPa3H3I9VjscYXTSEX4Lg0E1Z21W6qXEm/XbGwvn5T1gDDOhv
w8SIS9dYz97wFadif6MtvgaLczDQ8fh5ZzhYtCsVXqCZr4ba6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC6KssXiIHeei6PtzqCOlrXIGm48MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDEwYWY4ZWItYzllMS0z
MjFjLTlhYzctNzE0ZTA0MzA1NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYIp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFBZpLYY+GeE+o6qzdBaVNvL5TeO9t6GzKH0RMj013AVThKR7Pw2
9JKmzOEBdiRuy0W6iopGXSDHME4YC9gfF0EiPlfmjUXZDvlhZTZbhCJHTxoAXEkg
nNWFgBCLwDVOD+MN8ZWdocT98aSyI51bucqHvgAcp5Z4Ja4SUTEFECVUb7X0pJjL
KPpjBvNHhKgnX3V+bm6o6JFKvfYbU0xz5FGCMRZ/GBDEin7e2VPk/+mj33q/y/QR
icxco/8oud5o6ebokpat4Nogsd7HJcq+FEaLHsZP6MQskyO+4HzkRrmpkCY5A48E
xB+MMMj3hrPcbHR2UlYxNXIEZ/Ht0+jN6a4=
-----END CERTIFICATE-----