Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef7a09f1-634b-3b8a-a81a-44009c85a566.roa
File:                     ef7a09f1-634b-3b8a-a81a-44009c85a566.roa (raw, json)
Hash identifier:          ASZe2m7FnMSRvM8gc4MdnZU1y4SYy6j1vJz41aw/q4Q=
Subject key identifier:   E6:A9:A4:A8:96:E4:D6:1D:7F:3E:B6:62:46:75:99:13:17:61:A8:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5CFF92A944004516A6280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef7a09f1-634b-3b8a-a81a-44009c85a566.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        69.252.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:cf:f9:2a:94:40:04:51:6a:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4c5ea7c9-4d71-47e8-b87c-cf6f51af857b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:cb:6f:05:48:92:ad:e6:8f:76:d7:57:95:
                    6e:9a:b1:ef:a3:f5:01:cb:72:cf:a8:8e:eb:ce:49:
                    1e:84:fe:16:7c:d8:9e:c6:c7:00:6d:2e:2d:bf:7f:
                    b3:f0:66:f4:3a:b3:72:5c:3a:0c:6d:9c:c1:b1:d5:
                    77:e1:86:55:62:ca:c1:4c:54:49:97:e3:32:08:87:
                    28:fc:5a:40:35:e9:26:bc:28:87:b0:81:9a:db:87:
                    39:25:a9:3b:cf:61:85:54:c2:9b:03:09:d5:74:28:
                    f0:a4:fa:7b:d0:6e:bb:7c:67:a1:4a:74:a4:c0:8e:
                    98:e8:cb:56:5d:fd:f5:9d:17:79:c7:da:aa:03:8c:
                    4b:f0:23:85:b9:21:e8:d1:1d:72:55:c7:33:ce:69:
                    0f:2b:75:9d:46:3d:38:c0:c2:7f:72:f2:d3:11:cd:
                    68:0c:78:84:74:a9:81:53:87:5e:80:60:1d:b5:c4:
                    09:58:57:c6:31:95:ac:5b:9f:cc:81:3f:a4:80:d2:
                    44:7b:5a:1f:04:7a:80:c1:ae:d0:bf:1a:d7:c4:0e:
                    a4:da:ed:f2:4e:6d:48:61:2c:fc:fd:f3:cb:bf:81:
                    72:e0:0e:33:11:9a:89:f3:74:b8:de:af:cd:8c:3a:
                    5b:3c:d5:ea:45:2d:67:e6:12:f0:db:eb:90:1d:55:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A9:A4:A8:96:E4:D6:1D:7F:3E:B6:62:46:75:99:13:17:61:A8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef7a09f1-634b-3b8a-a81a-44009c85a566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:06:f3:e1:a1:58:f6:70:9b:be:10:8b:f2:7c:da:f6:87:d8:
         df:e5:7e:02:f9:bb:66:e3:14:31:fa:57:cc:a9:99:ee:7f:18:
         f1:3b:64:fa:e8:62:80:18:54:2f:90:14:02:96:fa:14:fa:d6:
         66:2d:62:95:e3:c9:51:3b:a1:a4:b3:39:9a:87:ea:26:f6:21:
         a9:cf:d5:3d:72:be:3e:55:c6:d9:37:bc:9b:af:3e:a8:be:af:
         4a:66:a4:78:25:70:ec:8a:df:37:39:86:4b:ac:4e:11:74:79:
         e3:56:7a:b6:a7:7b:7f:04:c3:f6:02:96:ce:8e:cc:37:88:99:
         1d:68:0c:74:6c:18:f9:ba:86:95:6b:2b:c3:e7:70:35:fa:dd:
         13:44:56:64:cc:69:7b:b4:63:cb:74:42:8e:4b:10:89:d6:b2:
         18:62:1e:de:91:14:22:10:11:5f:cb:8c:26:55:b4:14:39:cc:
         2c:6d:83:19:58:f6:35:00:5b:6f:b8:66:df:16:f4:9b:cf:b4:
         a1:67:3f:a5:83:58:3c:19:f2:38:9e:28:b0:d3:e0:59:85:b1:
         69:03:cd:78:84:8c:d0:fb:ea:76:2c:16:fc:1c:c8:fd:bf:f4:
         d9:25:07:b9:03:66:69:ec:90:e5:40:ab:b7:48:64:f1:83:16:
         4e:a0:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----