Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6249f65c-c62c-3b39-b994-c702d389ccfd.roa
File:                     6249f65c-c62c-3b39-b994-c702d389ccfd.roa (raw, json)
Hash identifier:          BFarz1FuoJ3VfohsTYk9PNf3ajhn8vpvzSPSX1pt/lo=
Subject key identifier:   DF:D3:1B:5A:77:5F:BD:17:C7:3B:D2:58:C0:48:A4:56:92:90:95:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C9283DEBE7B5CB7D58400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6249f65c-c62c-3b39-b994-c702d389ccfd.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33287
IP address blocks:        2001:559:86ee::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:92:83:de:be:7b:5c:b7:d5:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=d6a05683-c957-43f6-8c3e-a506a6abee60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:8a:1f:40:bb:a5:46:07:50:3d:fd:5d:06:
                    ea:e0:7d:31:c4:08:55:50:e8:ec:4f:12:3f:ed:e9:
                    1c:2b:9b:72:36:a7:75:aa:0a:a6:11:65:c5:84:24:
                    3e:2a:ec:eb:ab:55:55:2f:fb:19:4c:bc:85:60:50:
                    ce:c3:fd:de:3e:de:c9:0c:d1:07:16:55:64:f4:2e:
                    2f:b3:22:08:d4:ff:f6:b8:5a:ae:c8:17:bb:f3:fe:
                    3d:08:75:64:7f:01:25:1e:1d:77:75:42:95:04:b5:
                    0d:27:aa:be:81:3b:45:ed:14:0b:9c:c7:6f:70:bd:
                    fc:68:4b:25:46:e0:a1:a4:b0:d9:14:ae:a9:61:54:
                    f5:23:a3:8d:d0:ce:80:40:2e:64:af:7f:0f:c6:db:
                    bd:c8:35:3a:98:23:5b:c2:b5:6f:16:1a:81:90:bf:
                    d7:96:d4:3b:5f:12:1c:e1:57:9c:2a:9d:6e:73:b6:
                    11:ec:5a:e9:f4:81:7b:91:79:8f:17:d9:3e:5a:b2:
                    35:b7:c5:6e:56:c0:fa:39:a1:17:7d:33:cd:c4:ed:
                    6f:65:8f:56:56:d7:c4:c5:c2:76:40:be:81:d9:9e:
                    e1:38:6c:31:1e:86:67:f4:e5:44:fc:84:97:48:61:
                    11:34:6b:17:6b:a2:92:de:e5:7a:65:56:4c:0d:fc:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:1B:5A:77:5F:BD:17:C7:3B:D2:58:C0:48:A4:56:92:90:95:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6249f65c-c62c-3b39-b994-c702d389ccfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3d:5b:0b:2c:60:42:b7:b0:5b:64:9f:fe:00:12:ab:d8:e0:
         57:bc:12:96:54:b7:f6:96:58:25:8b:d5:85:39:9b:6e:5d:18:
         61:95:be:96:f6:c1:ad:3c:f2:0d:32:0c:c2:aa:cd:d2:00:4c:
         ae:24:33:69:5f:63:eb:4a:74:e4:1b:f7:91:0f:ef:aa:a3:ec:
         85:98:b0:ee:e4:65:ef:6f:ef:78:de:b5:3e:ee:28:df:52:71:
         a0:65:87:70:d5:33:05:58:06:48:42:96:55:59:02:5a:a0:f3:
         b3:d0:8a:51:76:b0:66:1c:25:8d:7c:34:49:e2:d4:89:e1:91:
         64:bd:b2:ea:08:30:85:9b:f8:c7:b4:c1:3a:54:f3:1a:7d:d3:
         61:7a:e9:e9:d8:38:70:a2:1e:e7:4a:24:5b:52:48:32:52:2c:
         a8:8e:f7:84:d7:ad:38:54:47:57:81:03:23:2b:74:69:0a:48:
         14:36:20:da:19:0a:48:66:48:9f:17:73:d8:07:6b:4d:a2:21:
         d7:a1:b2:78:8c:2d:c3:71:d8:0b:81:97:6e:a6:ab:53:c0:80:
         8d:b2:12:3a:13:a4:e9:b0:5b:98:3d:aa:ab:5d:fd:ed:a9:ce:
         76:f5:6b:08:fe:27:63:ba:06:b2:8e:30:2c:40:3c:22:02:26:
         49:f4:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:05 2025 by rpki-client