Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f754fc14-15ef-3c2a-87f2-31c9c3524bad.roa
File:                     f754fc14-15ef-3c2a-87f2-31c9c3524bad.roa (raw, json)
Hash identifier:          ZjtgCGZFn/NzW/Y/ycT+bGhKx7eGQjp2Cova7F0VhHA=
Subject key identifier:   94:BF:E0:A9:A7:2C:A4:C0:34:C6:21:B2:D8:E3:F0:B2:E1:3E:BA:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D1001DCA41C1D4846EA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f754fc14-15ef-3c2a-87f2-31c9c3524bad.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        2001:559:5e6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:10:01:dc:a4:1c:1d:48:46:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=236a4c4b-5328-4e30-b9e8-6e94dcaea3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:1e:bf:e5:0a:38:a7:df:68:4c:8d:c8:93:
                    63:ea:81:6c:7a:c3:98:c1:65:11:56:d6:c9:5a:e9:
                    48:d5:b5:4c:f8:61:3a:39:d0:48:14:ba:91:c2:17:
                    4f:4d:1e:7a:4c:31:0e:8f:44:25:01:70:71:7c:cb:
                    42:4b:f9:8d:32:71:cc:db:16:c1:53:54:40:1c:9b:
                    d5:cf:3a:35:44:3d:0c:44:d5:45:d1:1c:fa:fa:bd:
                    1a:95:da:f6:28:de:af:99:8a:e9:63:cf:3a:65:04:
                    1c:85:c1:5a:e4:15:6d:bd:6f:a5:c9:e2:79:5f:fb:
                    dd:81:a9:cc:ab:37:98:9e:30:91:73:f6:f2:24:e6:
                    8f:75:2f:88:4d:36:a2:20:a8:18:58:30:2a:6c:0d:
                    f5:2c:29:5a:04:33:18:24:79:34:88:f2:d6:41:ae:
                    02:40:db:d3:ff:37:55:45:7c:bb:f1:45:9d:08:f2:
                    53:4a:d2:af:0f:30:b5:99:04:20:83:c5:be:b6:57:
                    e1:b7:8d:e4:8b:1a:66:c6:9c:fa:8c:1c:e5:7b:a9:
                    a2:b1:5b:75:c2:ea:04:47:fa:80:de:42:0e:d9:8b:
                    bc:63:8e:ca:9f:63:fb:7c:00:d8:d8:67:77:22:99:
                    92:c3:88:dc:e6:c7:50:b4:da:2a:ab:c6:45:d5:3f:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:E0:A9:A7:2C:A4:C0:34:C6:21:B2:D8:E3:F0:B2:E1:3E:BA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f754fc14-15ef-3c2a-87f2-31c9c3524bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:15:1f:6c:49:80:a7:fd:28:18:cb:a9:7e:c8:9c:20:21:
         fc:dc:91:58:fd:c1:8d:4d:49:a0:6c:05:c4:56:b6:d9:45:52:
         21:9d:94:23:12:10:80:f6:07:89:c4:fa:e6:f0:06:61:68:a1:
         ce:fb:19:f1:cf:71:bf:c8:f5:e5:e0:18:f9:7b:ac:e2:c4:37:
         3a:58:a3:8b:bd:76:c6:52:4b:8c:79:bf:03:88:64:4e:72:79:
         f8:7e:25:ce:7d:37:56:2e:be:60:30:95:c5:2e:15:8a:d6:a8:
         47:d3:37:4f:6f:28:a4:c5:c6:42:46:97:56:a5:0b:b7:73:84:
         c5:e5:4e:4a:75:d2:ac:61:cc:e0:d1:61:b6:f0:69:fc:23:33:
         84:bb:92:ce:4c:3e:ae:83:66:76:3b:8e:89:8b:f9:44:28:8f:
         e3:3b:af:23:d6:c7:b9:5e:37:23:a4:83:bd:79:1b:4a:33:ac:
         96:e6:09:8f:fd:d8:33:07:6e:49:51:b4:be:07:19:d5:b5:0c:
         38:5c:b4:25:ad:b3:13:ea:f0:80:aa:e6:f4:48:4b:91:f0:5b:
         a4:0b:9e:dd:1a:02:81:b3:be:89:b3:00:85:c8:d3:94:f3:dd:
         b0:50:ce:37:0d:fd:90:fe:8c:53:32:fc:18:6f:a2:a5:a6:48:
         d3:63:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----