Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e363e1c-4fa7-3047-a9b3-05cdc1fa8010.roa
File:                     5e363e1c-4fa7-3047-a9b3-05cdc1fa8010.roa (raw, json)
Hash identifier:          kyPSNwbFbtGmCAK+z+tNLCK7NDrhVIWKzOMH5PtUZH0=
Subject key identifier:   AA:1C:0A:D1:98:9B:74:8B:03:3F:1E:2B:EE:72:D9:26:FC:8F:25:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BB9897D457924A0EFDC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e363e1c-4fa7-3047-a9b3-05cdc1fa8010.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7016
IP address blocks:        2001:559:56f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:b9:89:7d:45:79:24:a0:ef:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=68d2df5d-13a4-4a48-9d53-1041dcfe4a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:50:57:50:79:ab:52:45:d9:0b:a0:0b:f0:
                    15:b1:11:7d:6b:fd:6c:51:9b:8e:be:d0:bb:e5:40:
                    41:31:1a:51:0c:8c:f9:6c:ed:4e:fc:56:a4:9c:46:
                    26:fb:2c:5c:b5:f2:12:fb:6b:be:d2:e0:4c:a4:62:
                    a4:ea:39:4f:2b:62:29:d5:40:20:26:85:81:11:63:
                    7a:67:f7:13:15:fe:38:82:14:ef:64:bf:25:8e:87:
                    d6:77:55:f4:c9:84:a2:36:38:de:21:b4:81:42:d5:
                    11:71:d6:07:cd:80:bd:62:c4:e2:ef:f7:7d:51:dc:
                    8e:4b:90:85:8a:68:36:23:11:a2:78:22:bc:8e:b8:
                    ad:d4:3c:61:90:63:7a:11:4c:6e:5e:9f:6d:82:51:
                    87:8b:a8:64:17:31:d1:15:91:89:48:27:13:70:30:
                    84:ad:96:6c:3f:34:5a:fe:ca:b7:c1:81:a0:dd:0c:
                    c8:c9:34:4b:9a:a4:dd:63:bf:f0:14:c3:44:9f:86:
                    5f:4a:3e:03:22:4b:0e:95:8b:ff:27:4a:39:3b:7c:
                    a5:18:28:69:ec:d9:ba:46:00:ed:7e:d6:2f:dd:35:
                    c8:f9:02:23:36:a1:9c:fb:d2:a4:50:ee:f2:79:07:
                    03:10:4e:7b:8f:53:82:42:95:f3:37:42:17:97:ba:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:0A:D1:98:9B:74:8B:03:3F:1E:2B:EE:72:D9:26:FC:8F:25:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e363e1c-4fa7-3047-a9b3-05cdc1fa8010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:56f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:0f:34:86:61:77:82:23:8c:8d:8f:2e:3f:85:05:2d:13:
         55:50:88:f8:b7:f1:7a:de:4c:1f:c9:9a:7d:c9:e5:5f:51:c7:
         f3:26:12:a0:60:55:3b:fb:28:d6:56:d3:f8:e2:eb:8a:66:44:
         41:b4:37:84:92:4a:16:8c:39:c5:c2:00:57:17:c3:98:10:75:
         e6:7c:5a:25:18:72:09:5b:28:28:06:50:e1:29:70:ab:9f:23:
         10:ec:c7:32:90:c3:e0:2c:cd:a8:b9:1f:89:5e:39:7d:4a:27:
         5c:12:1a:ea:c8:3d:0e:06:9a:7c:04:35:ff:0c:51:e3:11:ef:
         74:46:da:f0:13:65:62:26:ab:63:40:c2:29:4b:c4:ee:01:b6:
         5d:d6:6c:df:75:00:4d:06:2c:f6:9f:72:9d:e3:13:44:0e:70:
         81:97:6c:10:cf:87:54:da:dc:79:ce:17:ac:0f:56:36:8c:3a:
         de:22:37:b5:2a:3f:2f:7c:c9:80:e0:fc:6f:7a:12:17:5e:8f:
         80:59:73:aa:c8:61:71:e0:78:e0:1b:01:d1:0d:6a:a8:f9:7f:
         58:da:6b:27:8f:4b:26:a6:c1:80:cd:7a:df:f1:89:69:7b:bf:
         b0:76:f3:51:39:f1:a4:ac:b9:a9:42:a8:74:9b:5b:12:af:4f:
         2d:0e:d4:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea7mJfUV5JKDv3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NjhkMmRmNWQtMTNhNC00YTQ4LTlkNTMtMTA0MWRjZmU0YTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOlQV1B5q1JF2QugC/AVsRF9a/1sUZuOvtC7
5UBBMRpRDIz5bO1O/FaknEYm+yxctfIS+2u+0uBMpGKk6jlPK2Ip1UAgJoWBEWN6
Z/cTFf44ghTvZL8ljofWd1X0yYSiNjjeIbSBQtURcdYHzYC9YsTi7/d9UdyOS5CF
img2IxGieCK8jrit1DxhkGN6EUxuXp9tglGHi6hkFzHRFZGJSCcTcDCErZZsPzRa
/sq3wYGg3QzIyTRLmqTdY7/wFMNEn4ZfSj4DIksOlYv/J0o5O3ylGChp7Nm6RgDt
ftYv3TXI+QIjNqGc+9KkUO7yeQcDEE57j1OCQpXzN0IXl7oi3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKocCtGYm3SLAz8eK+5y2Sb8jyVjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWUzNjNlMWMtNGZhNy0z
MDQ3LWE5YjMtMDVjZGMxZmE4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACDBDzSGYXeCI4yNjy4/hQUtE1VQiPi38XreTB/Jmn3J5V9Rx/Mm
EqBgVTv7KNZW0/ji64pmREG0N4SSShaMOcXCAFcXw5gQdeZ8WiUYcglbKCgGUOEp
cKufIxDsxzKQw+Aszai5H4leOX1KJ1wSGurIPQ4GmnwENf8MUeMR73RG2vATZWIm
q2NAwilLxO4Btl3WbN91AE0GLPafcp3jE0QOcIGXbBDPh1Ta3HnOF6wPVjaMOt4i
N7UqPy98yYDg/G96Ehdej4BZc6rIYXHgeOAbAdENaqj5f1jaayePSyamwYDNet/x
iWl7v7B281E58aSsualCqHSbWxKvTy0O1HY=
-----END CERTIFICATE-----