Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c04bf6b-d2bf-34bc-9ac9-4e9872a3c88f.roa
File:                     4c04bf6b-d2bf-34bc-9ac9-4e9872a3c88f.roa (raw, json)
Hash identifier:          vDR3gVdF+mLXN+DJ5JMI/pbZuvN2y5vsG/N87X7Klj0=
Subject key identifier:   44:37:24:44:14:B9:8C:F9:25:61:AA:D6:59:9D:D8:3B:3F:DA:DC:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA649B8281D8244FC449940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c04bf6b-d2bf-34bc-9ac9-4e9872a3c88f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        2001:559:334::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:49:b8:28:1d:82:44:fc:44:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=71e729d4-5b45-487e-bdba-b417b69035c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:cc:0f:1b:48:1b:cb:1c:ed:21:54:b5:7a:
                    78:d4:26:54:f1:ef:4c:27:60:0d:dd:89:f3:05:63:
                    ab:c6:92:ad:fc:89:ed:8d:e5:85:9d:cb:56:fc:6d:
                    d2:47:82:7d:75:d7:5c:4c:14:07:b1:0d:3f:0f:0d:
                    27:ef:c1:a1:63:d0:f6:01:4d:ad:d0:9f:5f:ae:e0:
                    ca:bf:12:7e:2b:83:7e:ce:80:24:b2:65:76:9b:e9:
                    65:b4:1f:ea:36:d2:66:88:6a:82:07:3b:c4:3c:b6:
                    9b:64:2f:76:7e:cc:52:9c:b6:4b:be:69:e5:78:e5:
                    ea:52:7c:a0:53:e4:43:e0:45:db:07:ca:cb:f4:57:
                    1b:c8:27:7e:97:29:28:c0:73:92:39:96:d4:3b:1e:
                    1f:d4:80:08:39:ee:bd:69:3d:e9:92:1f:ff:e5:25:
                    58:07:b7:73:55:35:0a:3d:10:42:4b:ba:69:a9:8e:
                    42:d7:95:6d:bf:b9:ce:1f:da:a1:0e:ed:3e:14:cf:
                    55:5b:62:64:b4:03:6a:80:bb:13:f1:b2:e4:5c:8a:
                    cc:f6:a4:e2:98:55:de:05:6f:1e:06:7f:64:65:bf:
                    9b:1f:03:6e:7c:03:e3:11:8b:11:ce:75:ea:f6:4e:
                    ae:09:58:88:34:3f:23:a5:6f:23:26:76:97:94:8b:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:24:44:14:B9:8C:F9:25:61:AA:D6:59:9D:D8:3B:3F:DA:DC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c04bf6b-d2bf-34bc-9ac9-4e9872a3c88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:334::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:37:c7:77:86:8d:d2:48:3e:30:33:66:69:f8:f2:92:cb:da:
         b3:21:8d:c1:fb:51:e0:46:e7:90:53:09:17:43:63:a1:0c:18:
         5d:44:9d:d8:e9:12:f5:cd:ae:62:3c:ad:e3:06:d2:c3:45:e8:
         a5:a6:e7:87:03:84:df:3a:c8:06:a0:ee:a1:7e:d7:79:38:03:
         14:b5:66:bf:ae:d5:14:ea:a2:58:ea:db:62:0e:95:8f:f8:e9:
         9f:7d:96:eb:ad:7a:5e:5b:e0:c7:f8:4a:12:96:c2:93:b8:87:
         04:ca:1e:cf:f7:8f:37:d5:1e:a3:b8:90:1c:aa:4a:fc:c5:fc:
         dd:36:c6:18:06:4a:c9:79:82:15:1d:42:bf:b6:e1:d2:98:cf:
         af:ae:43:c5:ce:5c:92:3e:3b:10:fe:97:7b:3c:56:e1:d9:d0:
         45:62:99:51:d2:c8:3c:dc:ed:86:62:55:df:8c:33:6a:3e:fd:
         48:6d:a9:e2:63:86:bc:fa:ad:23:48:d4:ac:a6:8e:c9:f6:6d:
         ed:36:d0:1a:08:30:df:2a:4c:77:bd:29:c3:2f:d5:1d:48:b1:
         8d:93:69:ad:6e:02:4b:35:b4:26:14:b2:c0:aa:3b:bc:13:42:
         fc:24:44:24:9a:1e:4d:86:00:ad:eb:4e:53:57:fe:35:e0:22:
         fa:62:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----