Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f30c72bc-94ad-35a9-8963-614a3b19f52e.roa
File:                     f30c72bc-94ad-35a9-8963-614a3b19f52e.roa (raw, json)
Hash identifier:          CSnjv54MF6drJa5WFNbxTDV7vH1dfuy7OLOrPjZI+LE=
Subject key identifier:   93:DA:75:21:78:33:96:A2:3A:6D:C4:B4:C1:B7:5F:C9:42:48:B4:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5661087BE265A22A7BC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f30c72bc-94ad-35a9-8963-614a3b19f52e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:81ee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:66:10:87:be:26:5a:22:a7:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0b585f47-b4be-4b0b-9011-0f85489f8e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:c0:84:32:be:f9:b5:6e:a1:66:fa:a7:98:
                    64:3c:47:98:62:0b:a8:b0:3b:52:f9:b1:a2:84:a0:
                    44:48:ca:98:17:f3:0b:0d:12:b6:17:39:c3:db:94:
                    df:9c:48:8e:bb:5d:98:89:01:a5:81:80:fd:ab:60:
                    f0:6f:df:5d:7b:92:95:77:b7:0e:ae:eb:f0:74:27:
                    27:dd:3f:d6:d2:7a:c2:fa:10:3d:ac:d2:62:b5:ce:
                    89:de:30:81:bc:8a:5b:07:38:87:cd:de:03:96:4d:
                    e8:1d:2b:59:1c:77:e0:ab:53:3e:36:9a:27:35:b9:
                    28:76:30:08:6b:56:dc:c7:a2:f9:32:1a:64:4f:1d:
                    65:c7:ec:68:0e:56:53:6f:4f:62:52:16:81:92:25:
                    7a:eb:74:7e:f7:fb:77:07:d3:01:36:d9:b0:00:17:
                    b8:51:f0:54:36:d7:09:3e:2c:35:f2:78:69:ac:a9:
                    af:13:e9:43:7a:93:32:33:3b:16:4b:56:9f:ae:6b:
                    c5:1d:b4:f0:aa:b3:15:61:ef:88:23:82:98:95:65:
                    ad:f8:64:d9:81:db:56:af:3a:fc:b0:8e:ef:b8:f5:
                    5d:30:27:e8:05:19:a1:16:30:1f:b6:5f:99:89:04:
                    3e:09:90:84:32:ac:1b:aa:05:67:a9:bc:12:93:8a:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DA:75:21:78:33:96:A2:3A:6D:C4:B4:C1:B7:5F:C9:42:48:B4:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f30c72bc-94ad-35a9-8963-614a3b19f52e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:81ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:85:76:e2:4d:b6:3c:e2:83:e1:5b:fe:b3:8e:09:c3:01:
         76:46:dc:73:a0:d4:61:1b:79:53:75:76:4a:61:e0:b8:19:cb:
         77:26:99:60:98:d3:28:80:e2:29:3e:42:2b:3f:82:10:14:7c:
         5a:f0:08:02:1c:00:c1:5d:ff:16:28:45:80:d9:fd:07:93:87:
         e6:5a:ee:a1:a5:29:df:67:1a:69:29:ae:68:13:63:fb:95:80:
         47:64:e3:c0:c9:3c:04:9f:d8:af:8e:ea:a2:96:e2:f4:4c:59:
         50:5a:4c:65:37:f9:01:02:82:e7:f2:9c:b0:5b:7f:d0:58:8d:
         68:cb:6f:d1:f0:7e:89:b3:68:a1:bc:33:04:a5:11:e2:d2:57:
         84:7b:01:2a:e9:81:44:a9:96:22:0b:51:50:38:bc:54:39:d0:
         55:20:c0:12:29:db:bc:55:8f:07:57:b6:4f:44:ab:b8:50:11:
         10:ef:35:09:fb:3e:48:b4:45:1e:a8:60:8e:3e:ae:9e:55:ee:
         a6:16:1c:23:4e:56:f1:8c:9c:03:91:93:5b:52:1d:cb:0b:20:
         1f:2c:7f:f9:2c:71:76:1a:5b:7c:09:9d:06:7d:3a:75:45:48:
         71:e8:3e:fd:10:69:67:f2:e8:db:65:dc:da:6a:b2:23:49:d3:
         09:9b:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----