Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fe71683-22cd-33d1-b8c9-6f8bc1a9c429.roa
File:                     7fe71683-22cd-33d1-b8c9-6f8bc1a9c429.roa (raw, json)
Hash identifier:          5W3Ue2WPy4OjTjgFDEiPuK+dAQ3cC+JDIeAV4hk89rQ=
Subject key identifier:   7C:C5:46:71:EC:94:EF:04:7F:9E:A5:E3:F0:6D:65:82:22:CD:F7:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6A1BFD61717AE7B56B0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fe71683-22cd-33d1-b8c9-6f8bc1a9c429.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:5a5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:a1:bf:d6:17:17:ae:7b:56:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=91373497-a5f1-4196-9359-e8367d654cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:c1:3f:fa:45:1c:d2:6d:68:db:f4:2b:12:
                    7f:3d:ad:aa:54:56:75:70:ab:0e:c2:e9:9c:44:84:
                    09:9f:3c:3a:0c:93:c7:aa:a5:d7:1d:af:c0:3a:57:
                    93:a2:9c:4c:5a:92:cf:43:78:f2:33:5f:be:03:3a:
                    9b:3c:c2:7a:ef:03:20:d0:50:6f:ce:a5:34:49:de:
                    33:68:9e:e1:f2:90:2a:c1:76:e0:65:a8:7b:ce:e2:
                    54:9e:59:24:56:a5:52:34:69:43:79:25:58:93:87:
                    4f:45:c3:49:84:1c:00:78:81:21:20:48:f7:40:7a:
                    00:24:bb:00:6e:34:5e:93:2c:76:57:38:04:6e:61:
                    9f:f5:19:ed:33:65:de:b8:67:72:5f:41:10:c7:85:
                    d9:09:e1:56:4b:34:28:68:93:21:8c:23:05:cd:cf:
                    c2:0a:84:32:00:f3:b9:ff:b3:05:52:3e:b0:40:d4:
                    56:c8:d3:f3:e2:66:eb:71:06:5c:d6:11:18:db:d6:
                    b8:c8:f3:b4:96:6f:4d:4a:66:54:e5:94:d9:78:17:
                    ba:49:c4:56:89:18:50:d7:81:a6:ec:df:b5:e0:86:
                    f1:d1:30:f0:ce:d2:7e:26:88:f5:1e:c9:bb:a8:2e:
                    91:d7:d9:1c:c0:70:14:6a:52:79:17:c5:9e:7c:5a:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:46:71:EC:94:EF:04:7F:9E:A5:E3:F0:6D:65:82:22:CD:F7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fe71683-22cd-33d1-b8c9-6f8bc1a9c429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a8:db:db:41:18:6b:2a:30:32:de:a4:d2:22:91:87:20:a9:
         a7:28:26:15:d0:7e:fa:54:48:15:77:70:9f:10:c8:d2:24:30:
         e9:6b:de:f3:39:24:dc:9c:06:27:ee:78:32:29:54:31:9d:57:
         8b:71:2e:dd:d1:87:19:7f:b2:af:87:77:54:2c:89:ac:d0:dc:
         2f:a9:c9:79:28:39:0d:5a:0a:f2:63:6d:1c:3b:62:df:46:01:
         b9:59:01:64:de:43:c8:fe:9d:b9:ea:9e:b4:0e:f8:49:f1:b9:
         1e:ab:17:70:f1:72:95:63:75:7b:6f:01:fa:03:3b:6d:62:df:
         7d:ef:23:d8:0a:85:f8:2c:e9:52:12:9a:97:eb:6f:7a:14:63:
         70:b4:50:15:04:48:35:c4:fc:af:b5:b3:7f:ea:d8:d4:94:68:
         8b:a7:ab:83:10:12:16:c7:2e:2f:f2:5a:14:87:ac:95:ef:51:
         b0:0b:53:61:1b:0b:b3:84:0b:88:02:e3:e8:c9:c9:d1:1d:cc:
         c9:2d:59:9e:98:ec:d4:0c:b0:9f:3d:5d:5d:59:be:49:af:5c:
         50:00:67:1d:ba:58:6e:b6:0f:75:04:ec:89:8d:62:3f:13:90:
         19:85:46:ec:27:87:24:03:0e:5f:0b:2f:01:1c:3b:93:6e:37:
         9a:62:c8:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pqG/1hcXrntWsOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OTEzNzM0OTctYTVmMS00MTk2LTkzNTktZTgzNjdkNjU0Y2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fBP/pFHNJtaNv0KxJ/Pa2qVFZ1cKsOwumc
RIQJnzw6DJPHqqXXHa/AOleTopxMWpLPQ3jyM1++AzqbPMJ67wMg0FBvzqU0Sd4z
aJ7h8pAqwXbgZah7zuJUnlkkVqVSNGlDeSVYk4dPRcNJhBwAeIEhIEj3QHoAJLsA
bjRekyx2VzgEbmGf9RntM2XeuGdyX0EQx4XZCeFWSzQoaJMhjCMFzc/CCoQyAPO5
/7MFUj6wQNRWyNPz4mbrcQZc1hEY29a4yPO0lm9NSmZU5ZTZeBe6ScRWiRhQ14Gm
7N+14Ibx0TDwztJ+Joj1Hsm7qC6R19kcwHAUalJ5F8WefFpRLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHzFRnHslO8Ef56l4/BtZYIizfedMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2ZlNzE2ODMtMjJjZC0z
M2QxLWI4YzktNmY4YmMxYTljNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKOo29tBGGsqMDLepNIikYcgqacoJhXQfvpUSBV3cJ8QyNIkMOlr
3vM5JNycBifueDIpVDGdV4txLt3Rhxl/sq+Hd1QsiazQ3C+pyXkoOQ1aCvJjbRw7
Yt9GAblZAWTeQ8j+nbnqnrQO+EnxuR6rF3DxcpVjdXtvAfoDO21i333vI9gKhfgs
6VISmpfrb3oUY3C0UBUESDXE/K+1s3/q2NSUaIunq4MQEhbHLi/yWhSHrJXvUbAL
U2EbC7OEC4gC4+jJydEdzMktWZ6Y7NQMsJ89XV1ZvkmvXFAAZx26WG62D3UE7ImN
Yj8TkBmFRuwnhyQDDl8LLwEcO5NuN5piyD8=
-----END CERTIFICATE-----