Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f27899-c086-3083-9ed2-5d963e0a7209.roa
File:                     65f27899-c086-3083-9ed2-5d963e0a7209.roa (raw, json)
Hash identifier:          mXBlco6CeUaxyZxwxqK9kWfxFonlybkWGjWYKjp0PA4=
Subject key identifier:   63:BD:A4:FA:6B:7C:9B:52:F1:31:2F:DF:2F:48:7D:DD:25:B5:B3:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5A0F71201532A84BFBC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f27899-c086-3083-9ed2-5d963e0a7209.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        2001:559:59b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:a0:f7:12:01:53:2a:84:bf:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=33218845-4c3b-4960-b085-39b7cfae5480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:4b:10:67:a4:f2:d8:bc:a4:e5:56:c0:7c:
                    d4:9b:84:d0:ea:13:aa:cb:7c:cd:a5:76:2a:d7:08:
                    f6:6f:51:f2:72:52:d6:90:f5:37:0e:b3:82:e9:e3:
                    fd:22:b0:33:9c:c7:f8:70:51:e8:f7:08:11:11:d2:
                    f3:18:95:c9:9b:f7:7c:68:7d:13:0b:b4:73:fe:0e:
                    a8:fb:07:b1:cd:f2:22:50:15:93:69:04:b8:5a:5a:
                    bf:92:4e:46:a3:fe:2e:56:40:ef:6e:d2:5b:79:f0:
                    42:64:c0:36:bc:28:01:9f:1c:dc:d3:38:53:9a:af:
                    73:03:9f:b2:a1:8b:c6:bf:38:ec:74:4a:92:f7:12:
                    2d:79:70:f1:1f:9f:11:1c:c2:3b:3c:8b:be:0f:c5:
                    f3:9a:6e:6d:b5:ef:90:86:27:77:34:e6:ca:15:e0:
                    6c:a5:66:ad:cc:28:bf:78:12:9f:df:57:cb:38:46:
                    15:8d:5f:ad:32:e3:86:49:1f:98:12:56:19:3c:4d:
                    8b:51:d8:6a:5d:d2:54:2f:a8:35:e6:c9:26:50:02:
                    02:f2:86:55:70:7f:76:fb:1c:c0:ad:74:26:cd:c0:
                    d6:f9:d6:3d:cb:30:85:2a:92:5c:5e:0a:77:ba:11:
                    8e:7d:29:72:d3:29:32:2b:f6:a9:6c:cc:a2:ca:cb:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BD:A4:FA:6B:7C:9B:52:F1:31:2F:DF:2F:48:7D:DD:25:B5:B3:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65f27899-c086-3083-9ed2-5d963e0a7209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:59b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:f5:51:d6:cc:fb:ed:d2:9f:3c:01:dd:03:d0:03:dc:64:
         7d:37:6d:29:d7:cd:3b:e8:df:ee:08:e0:f3:44:b6:af:07:62:
         1c:f3:9b:b9:d0:f6:fc:a8:f9:f0:00:74:94:ec:5d:aa:f5:94:
         28:15:84:60:56:6d:c5:99:1d:54:c2:18:5d:33:c4:e2:ad:83:
         44:68:0f:60:a4:b4:83:55:84:62:70:45:da:75:15:89:90:3b:
         2d:aa:cb:9a:83:3a:8b:f1:3b:de:bb:c7:cf:7d:b0:66:d6:d7:
         6d:d0:d8:ee:ea:4e:fb:a3:82:a1:b3:10:ec:96:59:1e:da:6b:
         b8:ab:ea:07:81:eb:70:f0:2e:42:41:ef:2c:92:85:4d:8e:aa:
         ba:d9:83:e7:00:79:63:c7:38:9d:c3:94:43:b3:3e:c1:7f:c1:
         d8:6d:6b:08:a2:8b:c2:68:43:3e:e1:48:b4:d0:20:52:88:d9:
         b6:f3:27:4e:53:d6:73:3e:99:da:56:a1:7d:00:c2:f7:2f:cf:
         2e:90:6e:04:76:cf:3f:1a:c7:de:ef:cc:6c:7b:24:ba:fe:9f:
         10:cc:4e:2c:35:67:25:cb:d0:f0:cb:c0:0d:43:a2:45:11:26:
         86:d5:9f:7f:df:0b:6c:75:6e:34:09:80:6a:97:e2:1b:6a:aa:
         bf:0c:45:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9paD3EgFTKoS/vAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MzMyMTg4NDUtNGMzYi00OTYwLWIwODUtMzliN2NmYWU1NDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviFLEGek8ti8pOVWwHzUm4TQ6hOqy3zNpXYq
1wj2b1HyclLWkPU3DrOC6eP9IrAznMf4cFHo9wgREdLzGJXJm/d8aH0TC7Rz/g6o
+wexzfIiUBWTaQS4Wlq/kk5Go/4uVkDvbtJbefBCZMA2vCgBnxzc0zhTmq9zA5+y
oYvGvzjsdEqS9xIteXDxH58RHMI7PIu+D8Xzmm5tte+Qhid3NObKFeBspWatzCi/
eBKf31fLOEYVjV+tMuOGSR+YElYZPE2LUdhqXdJUL6g15skmUAIC8oZVcH92+xzA
rXQmzcDW+dY9yzCFKpJcXgp3uhGOfSly0ykyK/apbMyiystmFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGO9pPprfJtS8TEv3y9Ifd0ltbNuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVmMjc4OTktYzA4Ni0z
MDgzLTllZDItNWQ5NjNlMGE3MjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFkM9VHWzPvt0p88Ad0D0APcZH03bSnXzTvo3+4I4PNEtq8HYhzz
m7nQ9vyo+fAAdJTsXar1lCgVhGBWbcWZHVTCGF0zxOKtg0RoD2CktINVhGJwRdp1
FYmQOy2qy5qDOovxO967x899sGbW123Q2O7qTvujgqGzEOyWWR7aa7ir6geB63Dw
LkJB7yyShU2OqrrZg+cAeWPHOJ3DlEOzPsF/wdhtawiii8JoQz7hSLTQIFKI2bbz
J05T1nM+mdpWoX0Awvcvzy6QbgR2zz8ax97vzGx7JLr+nxDMTiw1ZyXL0PDLwA1D
okURJobVn3/fC2x1bjQJgGqX4htqqr8MRe8=
-----END CERTIFICATE-----