Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b658644c-0e36-3e20-9545-9800457131b2.roa
File:                     b658644c-0e36-3e20-9545-9800457131b2.roa (raw, json)
Hash identifier:          M1S3mQRlUQOkBFbvKCmAqfDb7dw8rPyaOf5Xx/+u6cs=
Subject key identifier:   69:64:D6:D5:E2:EA:D3:52:DE:75:9F:69:50:A1:1A:4B:8D:E9:F1:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5696763675C3C288D4C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b658644c-0e36-3e20-9545-9800457131b2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:83b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:69:67:63:67:5c:3c:28:8d:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f39bcd82-606a-4201-abee-caa640932316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ea:0b:72:e4:97:1c:84:07:83:dc:45:56:bc:
                    0d:7d:c4:a8:d1:af:cd:78:02:18:ef:1a:2f:a6:2e:
                    90:a9:58:36:0a:87:9a:a5:c5:e0:0c:d1:ca:5f:2b:
                    26:f9:7b:4b:4c:f9:0c:bc:c2:42:d8:82:22:2b:3d:
                    29:07:33:e8:4b:fd:56:20:a2:0e:d9:cb:20:9e:a3:
                    cd:e8:ac:ad:aa:fb:5a:a5:85:9c:ce:3c:19:70:c1:
                    06:09:84:47:e2:09:65:7a:b2:3f:24:2f:f6:93:f0:
                    ec:58:11:7f:f7:8e:0a:70:9d:14:86:67:d7:6a:79:
                    6d:58:28:75:05:44:df:4d:46:46:48:2b:4c:0a:0d:
                    6b:a5:56:e3:07:10:47:b9:af:d3:7d:f1:f2:f9:20:
                    2c:8c:75:7d:c7:23:a2:f6:4d:ec:17:0f:ae:f6:66:
                    88:07:65:f7:ba:4e:2a:2a:7b:a2:41:e2:99:4f:fc:
                    00:4e:74:bb:bb:4e:99:26:32:8a:a8:e9:93:98:e1:
                    4e:eb:eb:13:12:6b:22:bb:81:a1:02:7e:64:17:e2:
                    e9:8b:c4:36:aa:28:32:6f:c2:05:08:39:a0:91:2c:
                    03:70:6b:30:c7:95:d0:55:8e:c8:56:4f:c9:3d:3b:
                    d4:d5:a2:69:bb:12:d8:37:2e:90:ea:a9:99:bf:89:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:64:D6:D5:E2:EA:D3:52:DE:75:9F:69:50:A1:1A:4B:8D:E9:F1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b658644c-0e36-3e20-9545-9800457131b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:83b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:ec:57:a8:98:c1:f2:cd:4b:86:10:4f:e2:b3:85:b3:92:
         d5:09:16:39:f2:8f:6f:d6:ae:5b:ef:15:5e:af:23:e9:19:49:
         7f:7f:80:a5:84:a4:bf:5e:00:2e:1b:e0:fb:d2:73:c7:72:4d:
         db:27:37:bd:bf:51:cd:1d:fb:fd:4c:0c:05:71:04:ae:25:a4:
         91:47:66:9b:2c:41:e4:21:b5:a6:ef:36:c1:6b:9d:78:17:7d:
         2c:88:31:72:3b:bf:c4:97:05:00:ba:97:84:2d:a3:fa:ef:48:
         40:08:98:84:0d:72:85:e3:c3:b1:ba:33:de:5f:dd:81:85:8b:
         47:5f:c7:7e:df:0d:ec:58:4a:29:db:9b:63:53:ad:6a:24:48:
         db:9b:8f:23:0b:ba:e7:ba:27:6b:0b:a1:a9:c1:90:db:2f:84:
         54:d2:22:7d:c9:05:d0:7a:c1:4f:83:b5:25:25:29:30:29:ee:
         c6:65:ef:20:6c:0e:15:b7:b4:26:c9:82:03:55:b4:0c:36:5d:
         55:54:de:4e:ed:e2:c0:07:94:9f:20:62:90:2e:8b:60:56:bb:
         d9:85:35:44:48:91:38:a7:a4:14:c3:f4:3c:5e:f9:69:55:28:
         3e:4a:9e:42:91:6a:d7:22:98:89:77:ae:f7:91:02:ab:4d:e4:
         c9:f4:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----