Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6419c24-448c-36fb-92e7-bd52f6945cd8.roa
File:                     a6419c24-448c-36fb-92e7-bd52f6945cd8.roa (raw, json)
Hash identifier:          M8Fg+A58R0L9o4SI3ABBtuBz0+GXzz2yX9YuRuAGSl8=
Subject key identifier:   25:D3:61:D1:C9:26:1F:EA:C5:DF:FC:E0:C3:B8:E4:A2:59:5D:83:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA516EAF419DD2FDEC00600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6419c24-448c-36fb-92e7-bd52f6945cd8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:8079::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:16:ea:f4:19:dd:2f:de:c0:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=43b0bf02-7324-494b-b0ae-dab093ff480e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bc:2e:32:d1:d1:19:2b:34:07:9c:bd:a7:a9:
                    07:aa:af:4f:44:38:64:74:73:1c:8c:58:84:24:54:
                    7e:93:cc:f4:15:05:3a:dc:fe:ba:95:8e:86:f3:59:
                    dd:2f:14:2a:a6:b4:8b:43:9e:7c:00:ef:cf:9d:49:
                    56:bd:c7:a3:7b:5c:47:2a:a8:8d:e1:0d:1d:fe:37:
                    76:56:f3:b2:11:0f:66:53:3a:bf:86:c3:1f:8a:e8:
                    38:c3:bb:fe:e6:40:0c:4f:2e:e8:1b:46:21:b7:5b:
                    f1:69:f3:a6:6b:d3:48:4a:ed:15:65:ef:41:b0:af:
                    20:f0:34:50:f4:34:ba:ea:69:67:e1:80:cc:41:56:
                    2c:4e:ee:3f:7c:b4:65:ff:b3:2e:db:e7:c8:91:96:
                    fe:b9:8b:92:b2:bd:c2:34:df:6f:5e:65:2e:d7:65:
                    59:7b:fb:eb:ec:54:c8:57:53:fa:c0:29:d4:ca:b1:
                    6b:96:2f:9f:5e:b8:00:58:0f:40:d6:e5:71:00:36:
                    b9:ec:09:82:6d:76:88:9b:2c:ff:e3:63:71:fc:df:
                    ff:34:78:8c:39:58:29:22:d5:4e:74:a3:52:a9:57:
                    61:2c:92:13:fa:b8:e1:03:48:94:9b:b9:ab:dc:35:
                    64:86:69:8d:65:cb:d0:8d:32:a1:33:8e:70:e8:eb:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:61:D1:C9:26:1F:EA:C5:DF:FC:E0:C3:B8:E4:A2:59:5D:83:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6419c24-448c-36fb-92e7-bd52f6945cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8079::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:53:18:a5:f7:d5:fc:8d:58:5a:a5:a5:70:16:ae:b3:90:
         d1:16:89:1d:4e:a8:3b:b4:cd:22:e3:bb:6a:52:11:1d:8f:52:
         3c:92:67:83:14:1f:47:7d:9e:07:a9:a7:e6:c7:ec:fe:55:ee:
         5a:f0:d1:b8:06:c6:06:b4:ec:a1:9a:f4:33:be:01:6d:95:51:
         a1:da:6e:03:66:50:07:a6:26:72:28:b3:33:43:c8:f0:9c:3b:
         be:dd:56:30:8a:3b:ab:ec:f2:3c:75:e5:d7:99:53:95:71:01:
         d8:c9:5e:71:c2:a9:f6:c6:44:8d:0d:63:34:c6:a1:82:2c:22:
         ee:fe:1e:dc:02:65:3d:40:7c:cc:e4:6c:69:44:4c:7b:19:0c:
         58:58:d9:d5:08:14:d3:3d:38:22:8b:3f:59:b3:8a:22:6b:d2:
         e7:bc:69:2e:bb:d1:f5:60:47:34:98:59:f8:7a:a7:60:e4:45:
         7f:6a:7e:20:a5:df:99:6d:2f:73:71:a1:bd:da:5a:8b:f3:1a:
         50:77:af:6b:21:2f:59:47:e5:a5:c1:fb:8a:ad:80:37:50:fa:
         01:6c:ab:a4:e3:ea:c7:6f:7f:00:75:96:87:6c:01:f8:48:9f:
         41:f9:c9:75:5b:9a:f6:dc:86:99:67:06:3e:fe:31:33:c0:e7:
         79:e5:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----