Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa
File:                     0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa (raw, json)
Hash identifier:          dWiiYlovtuQt4TUbZkzo4KrNci6qTL0yJCRZ2z1FIyY=
Subject key identifier:   31:D5:05:B1:00:07:42:CB:BB:CB:FF:D2:AF:27:92:47:CE:00:E8:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C6708DF3A9031704DE170
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        2001:559:c102::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:67:08:df:3a:90:31:70:4d:e1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=699d57d1-3bf3-44c3-af0d-9e0c2a87e0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b0:18:ae:e5:92:96:94:e2:c2:ed:24:9a:59:
                    1d:67:ce:49:7d:51:29:af:d0:ee:f2:b7:eb:6e:90:
                    34:3a:55:b2:f8:c3:b0:14:92:ec:3d:7c:84:3b:3a:
                    3a:3d:12:39:43:60:b2:d5:80:77:30:02:f9:b6:fc:
                    c3:2c:da:ae:79:20:0d:5e:23:65:b8:b8:2a:86:5a:
                    7b:e7:0e:43:35:63:a1:b4:cd:65:66:eb:b5:a3:df:
                    9a:2b:56:9b:f1:09:98:ea:77:11:7d:7f:16:2e:67:
                    6c:d7:3d:a5:7c:0b:1e:ea:7e:b4:82:26:7a:c9:4e:
                    a3:4c:c9:2d:75:8b:9a:f6:38:8e:61:f0:14:6c:71:
                    b1:80:c8:8b:69:b7:3d:b3:60:5d:3e:dd:1f:d0:15:
                    82:56:2b:38:c6:f3:86:a6:f5:a5:bb:b1:45:fb:b6:
                    52:fa:0c:2f:f9:b1:71:e3:6a:b2:3d:5d:49:db:c2:
                    ee:5d:43:56:61:cc:9a:49:c0:15:1c:47:a6:c0:ce:
                    73:8f:c5:4b:54:99:45:30:e6:b8:31:4f:8d:b8:d3:
                    16:b8:4c:f3:bd:29:e4:68:f2:be:3b:45:46:13:c5:
                    fa:28:ef:d5:19:cd:64:56:72:02:5a:c2:9d:6f:b5:
                    23:bf:26:40:c2:41:46:98:59:b7:65:27:c8:76:11:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:05:B1:00:07:42:CB:BB:CB:FF:D2:AF:27:92:47:CE:00:E8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:34:83:41:74:de:b9:d2:5e:71:c5:ae:3c:ea:42:e7:c1:21:
         25:a2:ab:48:03:85:40:8a:3b:33:c9:c8:4e:0d:6c:a9:87:3c:
         b5:43:ec:fd:1d:3b:f8:65:7d:d7:04:00:2a:11:d2:3b:f5:f7:
         14:7f:26:c9:a9:52:ab:1e:9c:1d:03:07:6b:96:a2:39:ff:4c:
         5a:3b:17:21:8a:af:8a:be:fb:de:f0:89:3a:0c:29:cd:c3:c4:
         da:2c:6b:d8:ca:25:97:f9:08:8f:cb:f0:38:76:c1:52:63:32:
         fa:13:1e:9b:67:4f:9d:43:d0:9f:c5:46:87:85:ea:55:a5:03:
         b3:5b:7c:7f:37:b8:a4:d3:6a:48:90:cb:1e:65:0c:49:02:ba:
         14:31:ed:cf:49:55:36:d9:01:87:d4:d4:90:ab:7f:16:9c:44:
         75:18:85:ad:21:63:8a:5f:f3:38:e9:cc:62:19:bc:3a:7c:50:
         7a:94:3e:8f:bd:ef:be:77:a1:7a:35:c6:07:18:e6:d4:ff:e0:
         c4:79:72:08:4b:27:41:31:87:4e:e2:e5:17:6d:f2:1e:1a:53:
         47:94:af:60:96:48:9f:b0:30:f0:b9:67:f4:53:99:05:50:c1:
         bd:63:90:a2:c3:ab:03:be:93:f7:9d:5a:2e:f0:bb:d4:7c:9d:
         7a:02:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:13:41 2025 by rpki-client