Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc94b52-1855-3978-920f-8fbf494887a8.roa
File:                     9cc94b52-1855-3978-920f-8fbf494887a8.roa (raw, json)
Hash identifier:          PhrmkICxwDYAF7uDOlEdVk1+E0bPpwMsutjtCg/meJM=
Subject key identifier:   40:5F:04:FA:46:F2:0B:60:1B:36:FC:23:52:A3:B1:BD:DB:CE:4C:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA54CD4D9B110676ED89780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc94b52-1855-3978-920f-8fbf494887a8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        2001:559:80d1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:4c:d4:d9:b1:10:67:6e:d8:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1b620f42-b437-44a4-84b1-e5df547f710b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:3b:8f:ce:e2:42:d7:10:1a:cc:de:31:8c:
                    77:b4:f4:c2:0e:0d:c0:a5:f0:62:f2:90:7d:6c:c9:
                    6b:e5:62:e7:2e:31:de:df:8b:9e:4e:a6:6e:dc:00:
                    38:a5:72:9b:0a:31:3e:4d:54:92:82:a3:c7:9d:1f:
                    98:6f:71:08:9d:82:a2:b6:e4:db:d3:b2:b7:fb:10:
                    57:a3:90:48:43:76:f6:69:f6:64:2d:46:fd:1b:96:
                    11:f4:e0:05:4e:24:2f:b0:90:f8:ba:4e:01:cf:77:
                    e7:71:81:2d:cb:bc:e1:d2:f2:0e:8f:01:f8:b3:f4:
                    71:4c:45:e4:ed:95:0f:f0:e9:02:4c:cf:49:7d:b4:
                    66:ab:03:6f:90:46:ad:33:0e:27:5e:35:50:b9:66:
                    3d:ed:13:36:70:d4:a3:b6:2f:6d:7d:35:5c:d3:b9:
                    f5:11:72:2e:3b:ec:9d:a5:c9:c9:ca:12:67:7f:c5:
                    41:60:22:c1:4c:25:0e:09:5a:7e:6f:6c:e4:dd:50:
                    eb:5e:7f:5b:2a:f2:62:a7:20:80:97:f2:ec:6c:9a:
                    33:9a:cc:1f:66:95:71:65:20:cc:9f:d4:87:ef:56:
                    f5:f2:d5:cf:58:e7:28:9f:14:09:e9:26:4f:eb:98:
                    40:c4:26:a5:04:0d:d1:1e:85:86:ba:6f:ee:89:a3:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5F:04:FA:46:F2:0B:60:1B:36:FC:23:52:A3:B1:BD:DB:CE:4C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc94b52-1855-3978-920f-8fbf494887a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:97:02:c6:31:e8:e3:bb:ec:ef:77:f1:05:f6:c2:a5:b2:
         f6:8b:fe:9c:73:d1:f8:1a:5d:5a:9f:14:f2:9e:d1:5e:d5:dc:
         19:d9:a0:96:53:a0:05:6a:97:0b:d9:d6:1e:7f:8d:6d:f5:df:
         4c:1a:9c:9b:cf:e0:d3:02:52:0a:78:d7:62:62:de:b2:98:1b:
         3a:58:86:c8:d3:89:fd:20:47:a1:a3:51:f9:87:37:fc:1b:b8:
         1a:34:67:ba:b1:e2:d4:c8:8a:a2:88:70:d3:4f:ab:d2:2c:be:
         0d:8c:16:4c:11:88:eb:ee:5d:d4:42:27:2d:00:2d:97:d1:d7:
         b0:2e:c9:51:e1:a1:8c:ee:ad:81:72:36:62:e1:73:c5:be:90:
         da:cb:e0:8e:a4:c6:8d:0a:79:5d:30:d4:95:01:6c:89:f6:a8:
         11:f7:fa:0d:0d:b8:e6:e3:1f:9a:92:e4:40:39:02:20:29:17:
         9b:0f:45:be:48:f9:2b:a5:48:f0:af:25:40:e1:b3:3b:74:dc:
         44:d3:9b:b4:74:45:72:9a:1d:c9:e1:46:0d:31:2e:79:0a:df:
         96:f2:45:3c:26:f7:35:a2:36:bf:f6:b8:df:4f:96:23:8b:ec:
         f8:fc:56:a5:5b:e6:0e:33:21:4d:05:bd:55:be:7e:6e:22:6f:
         bf:fa:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----