Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d02eb9e-412b-37fb-a50c-967dde9659b2.roa
File:                     5d02eb9e-412b-37fb-a50c-967dde9659b2.roa (raw, json)
Hash identifier:          5nKjhYCdywl7DG4gIaXX+uYFSEsjIkBX8sOXvlE2gLg=
Subject key identifier:   0A:F1:AA:99:68:8D:52:0A:8F:4A:75:27:71:6D:DE:A3:24:C5:0A:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4D1ADDD5D46CF8E3B9900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d02eb9e-412b-37fb-a50c-967dde9659b2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     21508
IP address blocks:        96.89.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:d1:ad:dd:5d:46:cf:8e:3b:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=8348636d-3a53-453a-80bb-7b414dd47aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:de:97:e9:73:d1:1c:25:e2:1d:9a:b8:65:
                    bf:fb:2f:b9:8d:e6:69:89:34:10:da:df:10:17:02:
                    30:b2:96:10:b5:fd:ce:b9:b7:e2:a6:93:d6:95:83:
                    d8:bd:bf:00:81:99:24:59:d0:23:1a:8f:31:47:9c:
                    0c:ef:49:f4:82:a3:12:f2:d0:71:3e:01:9e:11:1b:
                    d9:62:f6:35:89:67:54:a9:22:c7:84:76:33:88:4a:
                    19:24:f5:37:89:f9:e5:3a:2c:1c:c7:64:78:e4:9a:
                    60:c6:43:3b:04:3b:2a:d0:61:40:a5:f0:1e:4c:db:
                    62:25:c4:e4:6f:ee:6c:1f:0b:84:b9:48:32:23:d6:
                    7e:88:b2:06:5e:0d:3a:54:0e:b8:59:ee:0e:3d:7b:
                    b1:24:72:f9:83:b1:3c:65:84:84:ee:bd:e2:e0:43:
                    61:10:e6:6f:68:06:c3:68:9a:70:44:19:27:d2:b5:
                    7a:72:16:4e:16:3d:bb:99:a8:44:76:4e:d3:10:8c:
                    62:4d:33:77:1b:c8:9e:84:f8:24:be:b3:5a:11:3d:
                    03:c3:3c:46:79:76:9e:a7:59:bf:67:a9:c0:d0:23:
                    b0:67:46:15:d7:76:0b:b1:6d:cf:e8:7e:82:8c:85:
                    ff:6e:21:6c:7a:6b:ac:cc:42:52:7a:a8:94:a5:a0:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F1:AA:99:68:8D:52:0A:8F:4A:75:27:71:6D:DE:A3:24:C5:0A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d02eb9e-412b-37fb-a50c-967dde9659b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.89.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:0b:a0:64:fb:27:2c:33:fa:27:6e:f4:48:1c:9d:0d:1f:07:
         95:44:f7:ba:94:16:f3:87:4d:5b:1a:6a:20:00:18:62:cd:e4:
         07:a9:d9:b1:1a:9a:b0:1d:29:39:49:e5:a2:09:ce:7a:4c:63:
         d9:89:32:3c:2b:2c:ff:cc:b0:ac:db:10:af:07:05:45:f9:b2:
         17:c8:c4:3d:ad:ab:42:91:f6:a2:13:98:92:48:34:88:ed:28:
         3f:1c:4f:5b:49:e0:20:c7:8f:12:41:1b:95:ff:d5:13:b1:a7:
         51:1c:da:fb:39:51:05:09:3e:7d:66:66:d8:f1:f1:11:19:d0:
         f3:4d:77:e7:56:24:00:78:17:cc:a4:0a:d5:e0:9f:c7:95:aa:
         10:ba:1f:f6:07:24:3e:39:09:24:b3:4e:2a:94:5a:25:b7:c0:
         26:e7:9b:be:ab:f4:87:90:c2:4d:0c:db:62:9c:6f:70:38:0b:
         15:80:e7:1d:1c:7b:1d:ea:b8:43:d5:0e:9d:21:b8:a0:a6:bd:
         cd:1c:e0:e1:d5:01:2f:d0:e4:6a:ee:ee:c3:af:fa:b3:eb:22:
         7a:52:ec:77:4f:62:ed:32:78:10:3c:af:3b:91:30:36:43:84:
         e1:5f:d1:f2:7c:ac:d6:8f:cb:81:e3:0f:52:10:f9:6f:5a:1e:
         c9:0a:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----