Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec9d14d-8d68-3d57-a6ed-aeedf2ce9017.roa
File:                     bec9d14d-8d68-3d57-a6ed-aeedf2ce9017.roa (raw, json)
Hash identifier:          AIft14dJHLDef1QbrlWLPWVG6x8hfYe/niTDnSdOWlE=
Subject key identifier:   BD:65:A7:C5:90:3C:CE:B4:21:DB:EF:3C:1B:C1:DF:A9:71:BA:99:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4C9910E0A53C63896C120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec9d14d-8d68-3d57-a6ed-aeedf2ce9017.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7725
IP address blocks:        2001:558:6047::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:c9:91:0e:0a:53:c6:38:96:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=9f3ac6cb-1c47-4d18-aa30-27a0ea0816e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:86:ae:6a:74:d3:c5:a8:ba:36:72:0a:10:
                    43:f2:b7:a4:51:51:4d:2b:c2:a4:18:05:e7:34:ab:
                    03:68:be:0e:46:7e:b5:5f:fb:a0:43:4c:de:de:a8:
                    78:17:70:59:20:6e:ee:3f:7e:f4:81:cf:69:1a:7d:
                    da:97:60:26:48:9b:1b:79:92:2d:2c:23:80:bd:0f:
                    57:29:f7:b4:16:56:b6:e0:b6:9e:0d:b6:44:12:36:
                    46:6c:84:61:52:95:25:6d:80:79:cf:70:d7:03:35:
                    a9:ea:0f:4e:18:b7:ae:00:44:ca:1e:15:5b:94:6e:
                    54:7c:76:6c:34:12:9b:d0:44:b9:bf:06:dc:26:ec:
                    42:bf:9d:5f:12:ae:66:13:18:75:07:9a:c4:45:88:
                    19:56:73:7c:70:fa:d4:6e:7d:ba:48:4d:70:d7:e9:
                    d4:ab:c9:e2:5a:cc:10:af:57:97:51:04:87:59:b7:
                    7c:44:e4:e2:ca:23:fe:07:e1:cc:c5:02:f4:1c:84:
                    ec:6d:1c:f0:05:f7:7c:55:46:77:7c:01:71:25:a8:
                    4f:0e:c1:35:93:63:86:21:03:3c:c1:30:b8:0d:5b:
                    50:78:e9:34:58:62:08:55:81:49:55:4b:66:98:12:
                    27:4c:53:8b:95:39:df:de:38:03:0b:f0:8e:64:ad:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:A7:C5:90:3C:CE:B4:21:DB:EF:3C:1B:C1:DF:A9:71:BA:99:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec9d14d-8d68-3d57-a6ed-aeedf2ce9017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:6047::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:a7:50:58:1e:ab:ed:e2:fb:87:a2:03:07:11:f1:f8:e9:
         a0:b6:ab:c0:3a:f1:d9:d8:71:fe:53:6c:6f:01:bb:8e:f9:29:
         2c:fc:a6:b2:52:09:42:ae:64:e7:4e:63:eb:83:5c:fd:fa:37:
         f6:be:52:77:d5:32:4c:82:16:ba:61:2b:1d:04:95:8c:9f:9a:
         44:52:96:1e:6e:43:3f:fa:bb:fd:25:98:f7:17:86:45:d9:b6:
         99:63:b9:90:30:ce:5b:b9:63:dc:5d:31:61:e4:9c:c8:49:32:
         85:37:63:6a:30:d9:a5:a3:65:67:84:11:f3:35:fb:84:5c:49:
         3a:00:36:f5:c2:f4:62:65:44:c6:25:6c:2e:3a:a7:ef:88:a8:
         63:09:9b:39:75:58:fe:e4:2e:b5:a5:68:94:a1:f8:38:64:1d:
         8f:1e:38:59:10:dd:b0:bb:ba:7c:00:1b:a4:b4:e2:0b:dd:6a:
         38:f7:98:b7:39:7b:97:df:b5:2c:03:0a:f2:f1:1f:80:e6:8a:
         07:ea:ae:c5:0d:ef:fe:fb:bd:0e:ab:90:56:24:74:c3:94:8c:
         07:57:93:c4:18:16:d1:d5:24:b4:72:0c:e3:4c:3c:fd:d3:f8:
         e4:fb:99:c5:75:d3:01:79:86:da:98:01:27:e7:71:bf:ef:7f:
         a6:b4:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----