Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca145ced-05b1-30c4-9863-08818d21925b.roa
File:                     ca145ced-05b1-30c4-9863-08818d21925b.roa (raw, json)
Hash identifier:          FLpjMTmrGUnQLLNULAmJn4t9/oAkIK4EsGd4Fq4YwIM=
Subject key identifier:   72:DA:E0:D6:7F:4C:73:6A:3D:08:43:47:88:47:4D:A3:04:03:DB:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA600F58D894D57F381F010
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca145ced-05b1-30c4-9863-08818d21925b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        2001:559:16c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:00:f5:8d:89:4d:57:f3:81:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=435514f3-7cfd-4e7f-a8d2-d8adf6d11ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:08:0e:f0:d1:4f:7e:cc:a4:d6:c2:75:1d:
                    9d:c8:4a:50:b7:09:8e:d3:91:71:0a:a0:66:88:30:
                    94:0e:68:63:91:ea:fc:ce:62:2a:b6:8c:69:95:4f:
                    14:9f:ba:be:b0:b6:5d:e7:05:93:21:b1:40:fc:44:
                    88:45:3b:c5:18:47:e9:dc:6f:28:18:55:b8:d4:22:
                    11:7e:03:33:70:af:9e:fb:5f:79:b7:d7:fe:5b:61:
                    20:43:c0:05:38:8c:3c:0e:64:ff:67:b5:a5:46:9e:
                    47:12:d4:a4:2f:ea:dd:39:1c:61:d0:69:58:f8:a8:
                    6d:da:c0:28:d7:a1:9d:8d:a8:65:9b:7d:78:2d:19:
                    91:c5:8b:02:0b:60:24:4c:19:b2:f1:54:06:fe:f5:
                    24:80:85:ce:ed:b1:ed:8d:b7:47:b5:f6:3c:3f:a0:
                    2a:eb:f7:46:dc:0f:cc:28:d1:4d:a8:fc:af:cf:13:
                    6e:39:0d:df:bf:86:05:fd:cb:67:fc:f6:76:ae:92:
                    3d:66:23:0a:88:40:e4:df:45:07:d9:b7:e1:0a:78:
                    10:59:bf:3e:02:2c:b8:8a:70:dc:e4:22:1e:26:3a:
                    bb:04:40:90:22:57:b8:8e:7c:9a:4f:fb:db:28:12:
                    2d:38:66:76:b4:0f:05:64:d3:84:84:21:73:7d:6c:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DA:E0:D6:7F:4C:73:6A:3D:08:43:47:88:47:4D:A3:04:03:DB:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca145ced-05b1-30c4-9863-08818d21925b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:16c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:07:bf:1d:91:b6:fd:8a:d4:d7:8f:72:70:ba:96:8f:30:
         49:42:b1:8a:9d:31:2a:f2:eb:ab:53:d3:88:82:3c:09:9f:50:
         50:4d:0c:47:5f:6e:2f:d2:23:3e:22:a6:62:43:c6:7b:3f:12:
         99:82:a4:90:39:5a:51:ea:04:42:05:2e:a5:06:f4:39:38:a5:
         56:b9:4b:58:ce:cd:c7:5a:e5:9e:2f:09:2a:fd:7f:d2:36:0e:
         4a:d3:66:e4:47:c0:6c:1b:10:99:ec:28:b5:b5:0e:3e:a8:fc:
         67:95:95:93:f3:47:97:06:4a:ce:3d:f1:ca:a4:85:3a:50:1c:
         cf:41:ec:ee:66:60:d8:27:5e:3c:5b:8d:c6:48:01:b7:d3:70:
         f8:c9:d0:a3:c9:27:97:af:bd:78:b3:95:44:fc:6b:09:20:fc:
         0f:47:75:e2:cf:de:fe:f0:3d:f8:ed:4e:d1:9f:90:48:53:e4:
         4e:91:ed:0f:82:30:85:ff:3a:1d:58:17:c7:6a:be:6d:8d:d5:
         38:e3:0d:79:28:86:6f:c6:c2:39:bb:ac:61:f2:4c:e2:70:88:
         5c:65:9b:fe:d3:3e:1c:85:1d:07:09:9d:f7:1f:48:c5:97:5a:
         14:b6:df:68:2a:4f:0d:62:d9:30:04:2e:da:8c:cc:54:c2:cb:
         dc:02:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----