Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f0c7b86-c21b-3869-ad5d-c4a8f74a57f3.roa
File:                     1f0c7b86-c21b-3869-ad5d-c4a8f74a57f3.roa (raw, json)
Hash identifier:          ALlGKpRKrs8U4XSv7impeBdaxV6SNnJL+th9oHavbak=
Subject key identifier:   E4:99:5A:D3:CD:46:AF:5F:DE:33:05:EC:E8:50:8C:8B:DD:0D:08:AE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D15671FBAF8D8BBC29180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f0c7b86-c21b-3869-ad5d-c4a8f74a57f3.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     19047
IP address blocks:        2001:559:0:4c::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:15:67:1f:ba:f8:d8:bb:c2:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=38be2928-b816-4157-b6fb-7ebd88a04c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:73:99:9b:16:b5:e3:0d:41:30:65:4b:55:
                    6e:67:12:ad:d9:a4:c1:b5:17:1c:6f:ee:e3:fa:f1:
                    02:34:2d:8c:3f:6d:83:f5:8b:b9:96:a6:87:fe:7e:
                    69:88:be:df:5c:11:37:84:65:0e:46:12:ae:2a:89:
                    71:8b:2a:81:c0:7c:88:8e:e7:ba:7b:0f:26:ec:49:
                    4f:83:4b:91:07:3c:d8:0c:7b:30:de:a0:18:73:f6:
                    bb:4e:73:0b:3c:08:27:96:6b:eb:ec:fe:e0:87:93:
                    34:98:41:12:92:a4:d2:0a:61:9e:b8:39:5e:17:1a:
                    a5:8f:89:ff:60:a3:9b:cb:05:33:ca:b5:01:34:f7:
                    c6:3e:29:f5:09:2a:57:0f:1a:7d:e1:60:a9:38:16:
                    be:38:6f:9e:79:f8:3f:b3:c8:39:51:f7:25:1c:06:
                    65:5a:c2:af:23:38:f3:a5:69:e0:ae:e0:84:b1:51:
                    01:af:e2:26:f6:2d:35:32:4d:3d:04:8d:8e:75:b8:
                    d1:21:ea:10:e8:73:8d:8d:8a:3b:86:46:91:48:9c:
                    61:90:78:6f:45:18:37:20:c6:db:ad:1b:cb:eb:7e:
                    4a:c3:3e:60:85:56:d6:d2:0a:c2:8a:90:2c:d9:bd:
                    75:4e:d9:3c:1f:3d:01:1d:e5:24:76:a0:8d:95:61:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:99:5A:D3:CD:46:AF:5F:DE:33:05:EC:E8:50:8C:8B:DD:0D:08:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f0c7b86-c21b-3869-ad5d-c4a8f74a57f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:4c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:82:77:ae:75:07:62:69:ce:1c:6c:eb:99:67:ee:eb:af:15:
         d1:32:c8:e3:3e:be:5b:b9:3c:8f:c1:79:9b:2c:8a:66:cf:a1:
         f4:cb:79:a1:bf:99:ad:ef:41:aa:e8:57:9c:27:7c:10:0d:e7:
         f2:ed:15:1b:24:2a:e0:36:60:a8:d6:ac:c9:f0:a4:6f:fe:26:
         d6:80:64:55:ae:80:49:93:71:f4:bc:ba:94:1f:76:90:15:30:
         b7:6a:3c:24:ef:b9:93:4d:3d:44:13:a0:79:88:83:a0:8b:c4:
         4c:c6:29:a4:9a:be:33:d1:be:70:10:6b:4e:fb:9f:db:86:5c:
         27:6c:96:2a:61:8c:c8:bf:30:9e:00:85:62:82:99:1b:71:72:
         ba:7c:b6:03:21:62:b8:54:77:c1:a5:c2:e8:ff:da:08:04:ac:
         3c:b6:20:76:06:6e:f4:8d:7d:99:83:d9:0c:45:6d:8e:f7:fe:
         13:9c:93:89:6f:82:95:a5:0c:07:8b:6d:9b:77:e2:bf:fa:38:
         27:56:43:df:91:7b:4e:bd:6a:ef:13:ca:e4:54:91:9f:f9:4d:
         24:11:96:fe:98:0a:aa:6d:cb:04:11:70:fe:bd:6c:3d:a1:25:
         9f:65:f7:68:09:81:4a:ef:69:e8:b8:a7:e0:92:96:90:79:53:
         20:c8:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:29 2025 by rpki-client