Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/666afe24-cf5d-32c7-a5ac-391856012f8c.roa
File:                     666afe24-cf5d-32c7-a5ac-391856012f8c.roa (raw, json)
Hash identifier:          Zjf5btbvGM6vSnUcHbLPVw04W8nLUFsEV7QwiMCFIvk=
Subject key identifier:   22:F7:FB:0A:3A:4B:41:2D:62:90:7B:96:57:EF:59:7F:99:12:14:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C337FCC0BD673B0DE7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/666afe24-cf5d-32c7-a5ac-391856012f8c.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7015
IP address blocks:        2001:559:818a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:33:7f:cc:0b:d6:73:b0:de:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=26324a93-9538-439c-a9b6-6018f2ec1009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:a2:dd:c3:78:f7:26:aa:1c:1d:6f:09:cc:
                    98:ca:9b:b1:b8:93:a7:8e:00:8b:5a:65:d2:5d:df:
                    00:17:33:06:e8:14:2e:32:f5:1a:e8:0b:d0:8b:50:
                    cf:f5:0a:ac:83:ef:96:81:bf:03:fa:33:26:7c:2f:
                    85:15:7f:6b:e4:56:51:54:c7:d8:91:99:57:55:de:
                    c7:1a:7d:7a:98:92:bd:ff:82:61:79:9c:fb:a1:52:
                    e7:27:d0:22:0a:c4:86:a6:a9:5b:4b:a7:fb:31:4a:
                    f9:74:b1:16:ec:3d:e1:76:3d:c4:d4:f1:4a:2e:6c:
                    9a:79:7e:45:eb:d3:7b:e3:b0:70:d4:d8:72:02:72:
                    a9:2e:b9:85:be:73:db:04:da:2b:55:49:a9:99:4c:
                    8d:44:ef:dc:a6:38:6d:2d:12:39:e7:6f:f9:41:3e:
                    fb:fb:60:23:f3:1a:e7:2e:21:4a:30:1a:5f:5e:33:
                    51:5b:8e:58:05:4c:36:b5:de:dc:56:39:a9:bf:73:
                    cb:fb:b6:54:a0:f5:fe:fc:62:7c:40:5c:60:22:88:
                    1a:92:29:c7:b0:f3:6d:45:77:35:5b:52:3a:3a:f4:
                    5b:b8:f9:fa:65:00:40:a4:15:35:5d:ec:e3:65:7c:
                    32:f2:38:4b:80:c0:57:99:aa:70:d2:9f:3d:2c:43:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:FB:0A:3A:4B:41:2D:62:90:7B:96:57:EF:59:7F:99:12:14:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/666afe24-cf5d-32c7-a5ac-391856012f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:818a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:73:a9:a1:c6:9c:f3:0a:88:64:4c:da:bb:8d:69:89:97:
         0d:c0:02:6c:70:a0:41:1d:01:91:d2:0f:58:f3:7c:9b:e5:db:
         01:f4:10:0a:e5:0a:14:66:fb:13:8c:c6:6f:c8:34:e9:13:34:
         d5:47:b3:fc:ee:a0:d3:ed:37:1b:bf:16:14:70:b0:13:cf:97:
         46:6a:ed:e6:fc:82:76:eb:bf:b6:1a:2e:97:8e:e2:ae:de:d7:
         c3:38:1f:5d:eb:32:4f:b8:7f:68:9f:f6:c7:6b:d9:b9:cf:dc:
         f2:de:f1:ff:0f:d9:92:b7:b7:88:cc:6f:74:1a:37:1b:f4:6c:
         0c:4e:d7:c5:5c:02:a0:9b:04:89:a8:20:65:1c:06:97:8e:85:
         3a:ec:7d:4a:1d:46:66:da:13:ff:fa:56:5f:81:19:de:42:e5:
         d3:43:ab:0e:dc:91:78:34:a4:80:92:d8:d6:d1:0e:97:68:2e:
         a3:23:49:84:00:9a:66:db:76:0d:16:3e:ec:eb:4e:b7:c5:f6:
         2c:0a:cc:31:12:27:43:2b:0c:0d:75:41:49:dc:d2:df:c1:25:
         6f:a7:40:08:b9:b3:06:62:b4:10:69:96:0b:d6:84:12:0e:35:
         b0:94:08:4a:84:ee:7c:ff:a1:32:fd:8c:1d:75:0a:94:e8:36:
         63:b3:0a:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDN/zAvWc7DeegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjYzMjRhOTMtOTUzOC00MzljLWE5YjYtNjAxOGYyZWMxMDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dii3cN49yaqHB1vCcyYypuxuJOnjgCLWmXS
Xd8AFzMG6BQuMvUa6AvQi1DP9Qqsg++Wgb8D+jMmfC+FFX9r5FZRVMfYkZlXVd7H
Gn16mJK9/4JheZz7oVLnJ9AiCsSGpqlbS6f7MUr5dLEW7D3hdj3E1PFKLmyaeX5F
69N747Bw1NhyAnKpLrmFvnPbBNorVUmpmUyNRO/cpjhtLRI552/5QT77+2Aj8xrn
LiFKMBpfXjNRW45YBUw2td7cVjmpv3PL+7ZUoPX+/GJ8QFxgIogakinHsPNtRXc1
W1I6OvRbuPn6ZQBApBU1XezjZXwy8jhLgMBXmapw0p89LENi2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCL3+wo6S0EtYpB7llfvWX+ZEhQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjY2YWZlMjQtY2Y1ZC0z
MmM3LWE1YWMtMzkxODU2MDEyZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYGK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJj3c6mhxpzzCohkTNq7jWmJlw3AAmxwoEEdAZHSD1jzfJvl2wH0
EArlChRm+xOMxm/INOkTNNVHs/zuoNPtNxu/FhRwsBPPl0Zq7eb8gnbrv7YaLpeO
4q7e18M4H13rMk+4f2if9sdr2bnP3PLe8f8P2ZK3t4jMb3QaNxv0bAxO18VcAqCb
BImoIGUcBpeOhTrsfUodRmbaE//6Vl+BGd5C5dNDqw7ckXg0pICS2NbRDpdoLqMj
SYQAmmbbdg0WPuzrTrfF9iwKzDESJ0MrDA11QUnc0t/BJW+nQAi5swZitBBplgvW
hBIONbCUCEqE7nz/oTL9jB11CpToNmOzCkE=
-----END CERTIFICATE-----