Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae6ffbd-8e76-3fd0-9db3-4ce848f96f41.roa
File:                     bae6ffbd-8e76-3fd0-9db3-4ce848f96f41.roa (raw, json)
Hash identifier:          zYwVHF54/F1Fsjs3RHZJr+r4XwULUk0JjbLeGgth+Uc=
Subject key identifier:   70:C0:A2:95:77:B9:CC:FD:F9:8F:EB:C3:14:7B:30:04:30:5A:74:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DD8E4D2DF98232AF26600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae6ffbd-8e76-3fd0-9db3-4ce848f96f41.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        2001:559:87de::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:d8:e4:d2:df:98:23:2a:f2:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=c25cda83-6250-4683-976e-c760fc54e7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:83:63:a9:ac:7d:7f:6a:52:3b:28:95:f0:
                    79:cf:ef:89:21:7b:26:e1:82:f8:2d:0e:55:15:ac:
                    e9:b8:bc:4a:44:43:9f:b8:f1:b0:0d:10:62:44:c7:
                    e4:c6:d8:73:1b:49:91:ca:bb:4f:1f:e5:51:53:15:
                    fd:6c:36:31:ce:71:99:85:1b:5f:db:73:e0:b5:97:
                    2c:7a:5b:c4:3e:fb:12:a7:95:47:92:bc:d4:94:a4:
                    5f:5a:9a:92:44:e8:af:d9:e1:a5:ee:c4:68:a6:ea:
                    ad:aa:a2:f4:b9:57:72:74:19:60:dd:83:f6:7e:68:
                    44:d4:b0:80:16:4d:27:04:a5:59:7e:e5:16:10:e0:
                    74:9c:32:4b:8d:51:a0:04:dc:c1:5c:19:86:31:f5:
                    cc:5b:76:5f:ea:1b:64:8b:27:6e:5a:e0:6f:77:99:
                    3d:63:18:e1:02:b1:56:30:7f:36:bc:22:f5:a1:ba:
                    36:17:2b:23:ea:34:3d:5a:0f:89:a5:5a:7f:fc:d7:
                    98:5f:03:40:55:40:2b:a0:b3:e2:5d:ff:58:4b:29:
                    0d:a1:97:5d:7e:7a:bc:03:62:ec:5c:cc:ab:fd:4f:
                    d0:fa:e8:91:b4:41:07:da:33:e6:37:85:cc:b5:40:
                    cd:3d:35:00:9f:2f:b7:c6:78:78:4c:2c:e0:c9:d5:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C0:A2:95:77:B9:CC:FD:F9:8F:EB:C3:14:7B:30:04:30:5A:74:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae6ffbd-8e76-3fd0-9db3-4ce848f96f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:51:db:6f:1d:d5:be:f0:5c:de:bb:9c:df:9a:2d:9d:6f:6a:
         aa:2b:85:cb:6d:a2:17:6f:72:e7:b9:0d:2d:85:01:8f:ab:95:
         32:85:16:e7:ff:69:76:49:da:59:2d:a6:aa:c8:5f:3f:f5:0f:
         ff:81:3f:46:71:24:5d:56:20:0c:ed:d0:c4:d0:fb:32:dc:86:
         eb:66:6d:db:37:34:70:a2:46:3a:13:75:5f:07:14:e5:d7:6a:
         3a:87:50:31:df:92:ec:cb:2f:d8:54:83:a2:58:2c:dd:7f:92:
         14:ae:64:81:dc:90:80:86:e4:63:07:cf:89:96:8e:df:3a:a6:
         45:75:98:61:2e:69:08:2e:d9:cb:75:89:55:46:fb:94:ac:8d:
         52:7a:10:28:51:24:33:b9:a8:e8:53:f5:12:8c:01:11:47:d1:
         df:9b:fd:6e:29:fb:80:60:8b:3f:ab:d2:dc:80:74:6b:d6:3d:
         a1:f7:2b:ba:04:20:3f:b4:26:e9:ca:01:5b:76:cd:dd:ac:55:
         be:c1:e5:35:5c:4f:2d:f9:20:ab:69:62:bd:6a:7b:c3:27:82:
         c6:4e:d3:12:1d:08:00:52:57:6a:c9:bb:db:12:d7:11:54:21:
         7a:9b:88:97:47:af:74:b1:72:60:31:f1:82:a6:31:72:7e:d7:
         7a:98:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:59 2025 by rpki-client