Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d3073a5-699b-359a-b5ef-a7fb92017237.roa
File:                     1d3073a5-699b-359a-b5ef-a7fb92017237.roa (raw, json)
Hash identifier:          c7KVUe0qWELnvAH9hX6ONAShmZUsMwGh18dwcRGObAc=
Subject key identifier:   1D:49:50:4D:27:FC:C0:18:1A:1D:12:89:08:31:89:16:41:86:6A:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D4BD5D0B1394EC53BE8A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d3073a5-699b-359a-b5ef-a7fb92017237.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22258
IP address blocks:        2603:3014::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:4b:d5:d0:b1:39:4e:c5:3b:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=938aac22-85c5-4efe-89d7-f6fab7a57cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:b2:d0:cc:2d:a6:8c:90:15:b1:58:4e:ca:
                    c1:1c:4a:69:c4:eb:98:75:b6:4a:d7:6c:12:d2:7e:
                    08:2a:57:68:f6:14:e5:bf:74:fc:25:78:1a:d9:55:
                    55:a1:aa:47:df:cd:57:06:9c:fa:c7:8c:78:8d:52:
                    ba:f8:ae:3c:e0:4b:71:f1:bb:73:9c:37:42:d2:ca:
                    7d:26:c8:d6:ba:84:13:83:52:b8:86:ef:d6:a9:2e:
                    e3:6d:2e:03:99:c9:0a:77:3b:ca:bb:3b:9a:33:0b:
                    52:9e:d2:f3:de:af:9a:fa:c9:ed:14:80:fe:c6:32:
                    be:b6:d7:b9:3c:bd:49:59:1e:51:b7:ae:32:ed:9a:
                    14:b2:8e:34:38:a4:a1:99:9d:42:00:6a:5d:68:34:
                    ab:f9:7c:02:8e:17:1d:a7:7c:8c:74:6d:ea:61:b9:
                    b3:ff:cc:c0:e7:20:23:5c:d7:39:0b:5f:a1:b4:9f:
                    87:12:0f:60:c1:ea:7d:47:a2:0a:f7:67:80:65:ee:
                    3e:1b:9c:65:19:7b:ca:44:46:d5:8e:59:22:2e:5b:
                    5b:b6:4e:58:72:27:ac:a5:ca:4b:e6:98:a9:b0:23:
                    7c:6d:fa:04:73:e7:34:bb:3b:27:79:4e:49:a0:ad:
                    30:b9:b5:fa:ac:92:10:0e:99:49:42:f8:b9:7a:02:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:49:50:4D:27:FC:C0:18:1A:1D:12:89:08:31:89:16:41:86:6A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d3073a5-699b-359a-b5ef-a7fb92017237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:54:65:e7:3c:c3:f1:53:82:74:0c:e3:e4:c2:5d:e3:87:04:
         ba:f8:c8:98:0d:66:dd:1f:ad:bb:9f:bb:99:1e:8a:a2:ee:28:
         7d:50:90:24:ab:37:81:cd:1c:4c:44:fa:f9:27:54:df:7f:9d:
         68:2f:5b:60:a8:cd:92:5c:8a:da:c4:6b:4d:98:f3:7d:ed:8f:
         6e:f3:0f:f8:00:5d:82:cb:a0:d4:3a:5b:45:42:4d:47:92:8e:
         2d:4e:1e:1c:8f:a2:98:8e:7a:ca:c4:f6:72:eb:6c:2f:95:8f:
         fb:cc:e2:58:52:1f:32:81:23:a8:a2:8b:37:e6:92:30:bb:55:
         3d:08:32:14:cc:70:2f:7a:45:68:23:61:4e:15:b7:80:44:a5:
         ba:68:29:4f:9c:2f:82:85:f7:db:8d:62:ef:c9:1d:ca:d7:37:
         a3:5d:25:74:4d:e1:ae:b3:e7:50:ac:69:4a:3c:ed:88:ab:5a:
         fa:64:d0:b2:00:a0:ed:fc:67:e1:c6:c7:a9:4f:55:33:74:57:
         08:27:6a:40:b3:ae:17:58:d1:06:cf:8c:fa:bf:50:64:a8:df:
         df:cd:fc:02:32:a8:1b:99:75:55:fb:72:82:72:d1:f9:68:7d:
         d8:d7:30:ec:d1:9a:02:60:d0:43:ab:ee:a8:48:be:c3:8c:62:
         78:04:52:3f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiebUvV0LE5TsU76KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
OTM4YWFjMjItODVjNS00ZWZlLTg5ZDctZjZmYWI3YTU3Y2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHay0MwtpoyQFbFYTsrBHEppxOuYdbZK12wS
0n4IKldo9hTlv3T8JXga2VVVoapH381XBpz6x4x4jVK6+K484Etx8btznDdC0sp9
JsjWuoQTg1K4hu/WqS7jbS4DmckKdzvKuzuaMwtSntLz3q+a+sntFID+xjK+tte5
PL1JWR5Rt64y7ZoUso40OKShmZ1CAGpdaDSr+XwCjhcdp3yMdG3qYbmz/8zA5yAj
XNc5C1+htJ+HEg9gwep9R6IK92eAZe4+G5xlGXvKREbVjlkiLltbtk5YciespcpL
5pipsCN8bfoEc+c0uzsneU5JoK0wubX6rJIQDplJQvi5egLEqwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB1JUE0n/MAYGh0SiQgxiRZBhmqyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzMDczYTUtNjk5Yi0z
NTlhLWI1ZWYtYTdmYjkyMDE3MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgMwFDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4VGXnPMPxU4J0DOPkwl3jhwS6+MiYDWbdH627n7uZHoqi7ih9UJAk
qzeBzRxMRPr5J1Tff51oL1tgqM2SXIraxGtNmPN97Y9u8w/4AF2Cy6DUOltFQk1H
ko4tTh4cj6KYjnrKxPZy62wvlY/7zOJYUh8ygSOooos35pIwu1U9CDIUzHAvekVo
I2FOFbeARKW6aClPnC+ChffbjWLvyR3K1zejXSV0TeGus+dQrGlKPO2Iq1r6ZNCy
AKDt/GfhxsepT1UzdFcIJ2pAs64XWNEGz4z6v1BkqN/fzfwCMqgbmXVV+3KCctH5
aH3Y1zDs0ZoCYNBDq+6oSL7DjGJ4BFI/
-----END CERTIFICATE-----