Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/807a31c9-7074-30e0-a8ab-a4b0340f57c6.roa
File:                     807a31c9-7074-30e0-a8ab-a4b0340f57c6.roa (raw, json)
Hash identifier:          Jt0Mq47a89zK9qpo/oilZaqY3ZPtVzBImubV/dCDEEQ=
Subject key identifier:   03:38:F1:18:9D:C4:88:75:9D:15:3A:C2:6D:62:EF:89:6A:79:C2:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C30755344B7996D9830C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/807a31c9-7074-30e0-a8ab-a4b0340f57c6.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7015
IP address blocks:        2001:559:42d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:30:75:53:44:b7:99:6d:98:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=1cc61d43-6d85-43a1-83c2-350d6ee83e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:02:5e:4a:6b:14:25:49:28:47:70:57:9b:
                    c0:41:fd:49:ca:55:33:7a:35:28:f4:7f:ca:de:72:
                    19:39:61:b5:96:14:50:82:e8:8b:33:ac:1a:a5:40:
                    88:e4:dc:96:dd:9a:c4:87:ae:f0:9d:e3:32:f4:41:
                    2d:a2:43:0b:41:2b:7d:53:4a:2c:65:ca:f9:86:49:
                    3b:73:25:cd:6f:ef:46:cc:df:90:ef:de:2c:5d:4c:
                    84:5a:36:a1:14:46:27:f0:84:9a:a2:49:96:9e:28:
                    2c:d1:8c:37:81:c4:19:52:a5:5d:4f:a1:02:85:bf:
                    dd:ac:ca:71:23:52:52:ff:ed:56:1d:5d:e8:00:11:
                    06:b2:98:aa:83:cb:0a:f7:54:bc:6d:75:35:cd:4b:
                    38:92:9e:f2:72:3d:61:1a:3b:53:4d:ea:ab:a9:4f:
                    03:5a:1b:7f:64:b4:c4:28:53:a4:00:ce:05:d3:b6:
                    15:db:02:c4:21:c6:b8:9b:d2:a9:5f:b2:12:80:cb:
                    41:fa:6c:4e:0e:83:60:cc:14:b9:d3:5c:2b:24:c2:
                    7c:4e:2f:79:07:ab:71:a0:de:4e:e6:d5:70:e7:07:
                    5b:be:9c:73:16:74:4b:7e:fb:20:e2:0e:fc:61:13:
                    7c:22:99:a7:f6:18:13:de:54:f9:97:b8:31:56:79:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:38:F1:18:9D:C4:88:75:9D:15:3A:C2:6D:62:EF:89:6A:79:C2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/807a31c9-7074-30e0-a8ab-a4b0340f57c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:42d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:bb:d1:44:83:f8:b5:cb:3e:05:a6:c6:63:2d:8f:c5:c7:
         97:94:09:ad:13:60:3b:5b:c8:8a:c8:b9:f5:85:f9:df:66:61:
         98:f0:de:69:16:96:a6:bd:8e:09:1e:7b:ab:fc:27:b4:d6:b5:
         36:4a:31:fe:ce:43:64:f2:57:6b:4d:f1:67:d2:d5:a6:67:90:
         61:73:2f:a5:13:df:6f:db:14:f8:a0:23:43:3c:35:d2:70:cd:
         8e:01:6c:34:06:08:7b:f0:61:e7:0d:16:7e:e3:e9:91:e1:87:
         f7:b7:a0:c6:f1:d9:69:7d:27:43:76:df:5e:fb:03:18:ed:4c:
         26:5f:96:8e:f8:4f:1a:ba:da:62:6e:93:c6:99:7d:82:4d:10:
         07:fa:99:a3:84:c1:50:82:89:ec:a0:f5:3c:46:09:ac:e3:3e:
         e9:1a:94:6d:73:40:e8:05:3c:24:c8:92:b6:db:12:69:ba:9f:
         45:9a:7e:08:00:94:7d:a7:28:74:a3:94:20:fc:6f:b3:8e:40:
         22:4d:b8:f1:e0:a3:82:1e:35:18:52:5a:ac:72:be:26:43:d2:
         94:1c:3b:5f:53:4a:5c:5a:35:d5:10:ea:e2:30:bd:65:35:8c:
         01:c4:23:06:c2:0c:d8:ae:75:b4:e7:51:53:0b:51:49:4d:7b:
         bc:0e:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:43 2025 by rpki-client