Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa
File:                     da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa (raw, json)
Hash identifier:          NjH89rL5tMHN1EPVPE39nHhC5mbUwl8bE58AdYZtG8I=
Subject key identifier:   89:9E:E2:71:16:14:28:72:E6:9E:C9:25:8F:EF:82:B4:E3:E1:BE:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4FE749ABDAB1345070C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        2001:559:c0d8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:fe:74:9a:bd:ab:13:45:07:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a29ac075-cf34-42d6-a341-8270df6e764e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f0:5e:37:36:51:ab:75:47:3d:6a:c2:62:fe:
                    bd:e9:37:f8:2d:ab:1e:ba:9a:55:4e:2a:ba:87:c3:
                    78:f2:9d:44:a8:f1:00:c3:bb:88:c4:1a:e1:e5:91:
                    fc:b1:b5:1b:40:06:4c:e5:6a:19:58:35:47:a4:26:
                    29:c3:ce:4b:63:1f:62:8c:7d:11:44:50:98:c7:3c:
                    68:be:6e:67:26:5d:a0:04:7a:a9:29:22:be:26:19:
                    39:1f:e1:41:45:ea:5b:15:64:ae:6c:85:bb:c6:e7:
                    88:34:bf:1c:14:bf:28:a8:f4:8e:49:8b:56:48:1e:
                    d6:e8:f1:fa:3d:0f:8e:15:58:33:20:eb:b3:3f:dd:
                    f6:a3:80:5e:8f:bf:77:db:c1:1a:81:84:85:b1:07:
                    e8:4f:02:27:3c:29:54:ba:21:cf:22:58:4c:d9:ae:
                    38:f8:ed:c7:7f:45:e9:bc:f7:2c:32:a3:af:c8:a2:
                    21:5b:b7:74:10:34:7c:91:67:67:39:f9:6e:6f:85:
                    ad:2b:34:54:bb:74:a5:c3:ef:aa:b8:39:0c:44:d0:
                    bd:40:2e:d2:17:d7:08:6c:af:ed:8f:5a:c0:2b:67:
                    d7:37:f8:4f:90:c7:ff:25:c2:07:e8:af:75:4e:5f:
                    31:08:71:f9:ac:4b:24:57:94:23:22:98:51:b0:08:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9E:E2:71:16:14:28:72:E6:9E:C9:25:8F:EF:82:B4:E3:E1:BE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da9204f6-2b1e-3774-9451-3d2b3397e6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c0d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:6c:93:23:7b:dc:59:72:80:58:7d:6c:a9:61:e5:79:e5:
         cd:c5:8e:74:66:49:c6:e0:1e:95:2f:8a:18:e4:f8:5a:88:92:
         26:96:a7:da:e6:db:cb:8f:b8:fa:24:3e:fe:c3:ce:6d:7a:48:
         98:a6:ce:91:1d:b6:1a:9f:c0:3b:3e:5c:5f:02:d0:8a:7e:ca:
         bd:99:37:6d:8a:c4:12:b5:ba:86:9f:90:c1:20:c6:38:bf:18:
         0e:a4:d7:91:33:5c:01:f3:fe:cb:a3:3e:f5:75:a2:f8:f0:f2:
         73:fa:33:18:03:c8:db:9f:68:ec:b9:3c:0f:a1:d0:32:a3:83:
         df:fb:be:fe:1b:7d:5e:8e:04:43:29:55:08:27:34:eb:1b:de:
         0f:2a:a3:74:50:5a:5a:fa:aa:b2:ee:61:b3:e7:22:c3:e0:a0:
         61:a8:81:6c:63:cd:dc:72:48:ed:fc:e5:40:e7:8f:44:4b:85:
         0e:cc:0a:48:2e:28:1b:c7:54:4e:d4:2a:93:ee:ed:09:48:09:
         e6:a8:4c:84:a5:e0:b2:f7:b9:d8:3a:e7:73:7e:94:59:42:73:
         12:04:5d:e8:26:f3:0d:ec:95:c8:d2:92:3e:5f:cc:53:58:fc:
         c7:2b:20:75:5e:95:b4:35:2f:70:83:eb:be:41:ca:a6:d0:70:
         33:3e:64:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pP50mr2rE0UHDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YTI5YWMwNzUtY2YzNC00MmQ2LWEzNDEtODI3MGRmNmU3NjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivBeNzZRq3VHPWrCYv696Tf4LaseuppVTiq6
h8N48p1EqPEAw7uIxBrh5ZH8sbUbQAZM5WoZWDVHpCYpw85LYx9ijH0RRFCYxzxo
vm5nJl2gBHqpKSK+Jhk5H+FBRepbFWSubIW7xueINL8cFL8oqPSOSYtWSB7W6PH6
PQ+OFVgzIOuzP932o4Bej79328EagYSFsQfoTwInPClUuiHPIlhM2a44+O3Hf0Xp
vPcsMqOvyKIhW7d0EDR8kWdnOflub4WtKzRUu3Slw++quDkMRNC9QC7SF9cIbK/t
j1rAK2fXN/hPkMf/JcIH6K91Tl8xCHH5rEskV5QjIphRsAjI3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIme4nEWFChy5p7JJY/vgrTj4b4iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE5MjA0ZjYtMmIxZS0z
Nzc0LTk0NTEtM2QyYjMzOTdlNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcDY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABFsbJMje9xZcoBYfWypYeV55c3FjnRmScbgHpUvihjk+FqIkiaW
p9rm28uPuPokPv7Dzm16SJimzpEdthqfwDs+XF8C0Ip+yr2ZN22KxBK1uoafkMEg
xji/GA6k15EzXAHz/sujPvV1ovjw8nP6MxgDyNufaOy5PA+h0DKjg9/7vv4bfV6O
BEMpVQgnNOsb3g8qo3RQWlr6qrLuYbPnIsPgoGGogWxjzdxySO385UDnj0RLhQ7M
CkguKBvHVE7UKpPu7QlICeaoTISl4LL3udg653N+lFlCcxIEXegm8w3slcjSkj5f
zFNY/McrIHVelbQ1L3CD675ByqbQcDM+ZEY=
-----END CERTIFICATE-----