Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4e8c7e7-a9e5-35f0-99f8-b193ab086acd.roa
File:                     f4e8c7e7-a9e5-35f0-99f8-b193ab086acd.roa (raw, json)
Hash identifier:          REWK3TKMd0Ahdxt/nOoU5wcclFoZITJVyW49Fr9gsy8=
Subject key identifier:   C8:2D:47:BC:75:B0:23:45:61:62:20:60:27:28:04:41:40:34:80:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E2C04FBD0590494A4FE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4e8c7e7-a9e5-35f0-99f8-b193ab086acd.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        2001:559:879e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:2c:04:fb:d0:59:04:94:a4:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=4f90ec31-3a0e-4b41-8e5a-857ff46b5a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:39:90:20:b8:08:a0:9b:1b:4f:6b:0c:10:
                    b4:f5:6d:15:a9:38:3c:55:31:25:18:87:0d:aa:54:
                    30:11:4a:d8:e8:3e:9a:c1:0b:3c:dc:da:fd:5a:7d:
                    f9:9f:3a:b5:ad:fa:43:08:d8:0f:05:23:61:da:b5:
                    f5:cc:81:b8:85:b9:83:fa:af:35:8c:5d:13:8c:7e:
                    c4:cc:d4:f1:1a:a4:89:52:0c:1b:01:0b:c8:de:40:
                    ba:d2:c2:ce:52:13:da:97:e7:de:9d:d5:cc:fa:39:
                    38:6e:dc:28:6f:49:a6:de:9a:d1:39:99:82:5e:50:
                    5e:b2:73:f3:aa:8f:eb:62:b4:b7:96:ab:da:d7:8d:
                    6c:6e:db:b8:58:d8:9e:27:b0:53:6c:96:5f:79:8a:
                    d9:3c:fe:4a:27:99:b3:ad:92:2c:b7:ec:31:3e:cb:
                    29:cd:0f:2c:81:41:cf:76:39:68:59:fa:4e:93:23:
                    ff:8a:08:d0:f7:38:52:c8:8e:04:70:4a:7d:79:98:
                    68:ff:15:6d:a8:51:fb:31:a5:30:10:7d:ec:1e:da:
                    e2:a6:3a:42:95:e2:b0:5a:df:4f:08:07:ed:cd:c0:
                    0a:9a:b2:ee:dd:c9:fd:d7:61:ff:a9:2b:d7:76:39:
                    f3:2e:39:20:b5:23:e8:40:3b:c1:e1:5e:a5:3c:e7:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2D:47:BC:75:B0:23:45:61:62:20:60:27:28:04:41:40:34:80:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4e8c7e7-a9e5-35f0-99f8-b193ab086acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:879e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:be:6e:9f:b7:48:9c:7e:48:7c:1c:5c:3e:c5:ab:f6:eb:3e:
         aa:9e:d9:41:09:8e:f7:d8:e2:40:9d:f1:c3:d4:04:51:cd:0d:
         3b:bd:05:f6:99:62:80:48:f9:34:a4:aa:77:7f:96:4c:06:ee:
         a6:0b:a6:65:ae:e1:1e:b7:da:bb:db:59:01:21:23:64:23:22:
         ef:cc:0b:7b:c9:ac:e8:fb:6e:fc:9a:91:33:46:c2:fd:3f:ad:
         c2:9c:22:5c:ba:99:a0:f7:a3:24:03:f0:65:49:3d:aa:da:76:
         0e:86:1e:cd:e7:cc:f2:9c:a0:0c:f5:46:cc:f4:6d:0b:62:06:
         12:3c:19:3c:68:59:4b:8f:4d:6c:6e:2e:83:45:3e:ad:d3:c4:
         a9:67:1e:6f:bb:7b:45:19:74:be:6b:17:7b:30:ee:e9:ff:c5:
         6e:78:3a:e0:1e:2b:3a:9e:2f:c2:40:21:6e:3d:7b:40:07:95:
         7a:34:a9:fd:01:27:52:0f:6a:e8:d9:ed:25:df:41:e8:3b:9e:
         e2:d9:a8:a0:04:73:1b:f2:04:d7:3e:af:2e:7a:82:7f:7a:2a:
         04:2f:a5:6d:e1:fa:15:19:b0:61:ff:d7:80:82:16:42:00:a4:
         0f:f0:a0:af:c9:f7:1a:7e:c4:dd:55:48:a0:2d:c0:cf:81:f7:
         de:1a:1f:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebiwE+9BZBJSk/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NGY5MGVjMzEtM2EwZS00YjQxLThlNWEtODU3ZmY0NmI1YTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO45kCC4CKCbG09rDBC09W0VqTg8VTElGIcN
qlQwEUrY6D6awQs83Nr9Wn35nzq1rfpDCNgPBSNh2rX1zIG4hbmD+q81jF0TjH7E
zNTxGqSJUgwbAQvI3kC60sLOUhPal+fendXM+jk4btwob0mm3prROZmCXlBesnPz
qo/rYrS3lqva141sbtu4WNieJ7BTbJZfeYrZPP5KJ5mzrZIst+wxPsspzQ8sgUHP
djloWfpOkyP/igjQ9zhSyI4EcEp9eZho/xVtqFH7MaUwEH3sHtripjpCleKwWt9P
CAftzcAKmrLu3cn912H/qSvXdjnzLjkgtSPoQDvB4V6lPOdHrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMgtR7x1sCNFYWIgYCcoBEFANIABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRlOGM3ZTctYTllNS0z
NWYwLTk5ZjgtYjE5M2FiMDg2YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYee
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIC+bp+3SJx+SHwcXD7Fq/brPqqe2UEJjvfY4kCd8cPUBFHNDTu9
BfaZYoBI+TSkqnd/lkwG7qYLpmWu4R632rvbWQEhI2QjIu/MC3vJrOj7bvyakTNG
wv0/rcKcIly6maD3oyQD8GVJParadg6GHs3nzPKcoAz1Rsz0bQtiBhI8GTxoWUuP
TWxuLoNFPq3TxKlnHm+7e0UZdL5rF3sw7un/xW54OuAeKzqeL8JAIW49e0AHlXo0
qf0BJ1IPaujZ7SXfQeg7nuLZqKAEcxvyBNc+ry56gn96KgQvpW3h+hUZsGH/14CC
FkIApA/woK/J9xp+xN1VSKAtwM+B994aH64=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:59 2025 by rpki-client