Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09ae1026-1117-361e-9250-7dd9588b832d.roa
File:                     09ae1026-1117-361e-9250-7dd9588b832d.roa (raw, json)
Hash identifier:          UYldMFnf96lj7v1GT9OnPSduSb0P7ZZyL5u6jvQBWOk=
Subject key identifier:   81:67:58:EF:16:3A:9A:C4:4C:74:88:E4:EF:E2:1A:51:5D:EA:45:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D59BA946C3A3BB0968780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09ae1026-1117-361e-9250-7dd9588b832d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33490
IP address blocks:        2001:559:c2b9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:59:ba:94:6c:3a:3b:b0:96:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=56a823ff-49c1-4e57-b589-3f9ed4eda405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:6e:88:e5:54:d7:75:c7:12:57:37:91:d1:
                    1d:5a:ba:22:88:f5:ee:70:c3:4e:f1:9d:81:cd:27:
                    29:01:1f:4b:3c:b8:09:e5:d3:1d:57:c9:7c:7d:78:
                    4b:3e:33:72:b3:9d:61:19:c1:9f:3b:35:e0:43:92:
                    b4:ad:f9:f2:b0:0f:99:2f:b1:c7:50:cb:ec:91:39:
                    80:8d:bb:56:20:40:5d:52:26:05:57:dd:a2:85:b8:
                    67:d3:55:ab:f7:13:1b:90:53:b8:44:f3:68:e0:26:
                    ce:2e:03:07:09:13:d7:b6:5e:26:6b:9a:e4:6c:71:
                    86:f6:65:e7:2f:22:2e:d0:41:a2:b5:0a:e5:c4:fb:
                    12:df:0e:6a:13:74:c2:e1:b1:b3:26:41:a8:65:d4:
                    9e:21:b8:d8:a7:fd:c2:57:16:e9:b9:a5:49:31:83:
                    48:db:d3:04:cc:33:71:70:d1:c6:d8:09:b0:52:62:
                    70:9e:ce:a7:cf:68:00:71:08:1b:1e:13:db:5a:84:
                    e7:50:62:9d:4f:e9:7e:10:7f:f1:86:f8:f4:7e:d0:
                    4d:bb:18:47:a9:32:91:f0:ba:ad:81:ee:ee:61:31:
                    d9:05:2e:5b:4d:43:d9:8c:9d:3e:ce:dc:a7:b7:32:
                    a5:5e:7d:4b:40:db:62:ce:5e:e4:c7:25:22:d0:48:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:67:58:EF:16:3A:9A:C4:4C:74:88:E4:EF:E2:1A:51:5D:EA:45:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09ae1026-1117-361e-9250-7dd9588b832d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c2b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:bd:07:a5:86:c9:df:30:65:fe:ef:e3:3e:64:fb:b4:e9:
         8e:7f:8e:e5:cb:75:7e:a9:25:71:c0:8c:1e:cf:51:48:63:c7:
         c3:28:57:77:cc:ba:87:6a:ad:7a:10:3c:1b:e7:04:2b:46:14:
         54:c0:37:4c:6d:e8:d4:fb:b8:f5:57:07:cd:e2:f9:97:3c:d5:
         8e:49:75:30:24:9d:23:bd:aa:1e:03:72:e7:73:f5:61:22:f5:
         f2:fc:4c:0e:53:dd:48:71:c5:e0:99:cc:aa:91:61:4c:e9:d6:
         99:23:ea:e4:58:ed:82:da:d8:55:4a:45:75:b0:15:23:7e:a4:
         c8:c8:7c:48:13:de:d3:c5:ca:16:7f:88:6e:5c:4f:31:22:62:
         3b:5e:40:bd:d5:01:7f:d5:9a:42:ff:0c:2a:9d:b6:26:ed:b9:
         47:27:b7:f9:1a:42:0b:12:8b:ea:28:45:6d:d9:06:96:71:08:
         14:a3:ab:8f:f5:02:e1:77:78:60:05:df:dd:2c:87:c3:64:83:
         27:b0:03:29:1e:06:df:ca:45:92:41:24:a8:f6:bd:d7:25:18:
         f9:64:9b:83:64:ac:fb:d0:57:b7:3b:b3:9c:8a:15:51:29:e4:
         7b:df:c9:70:25:06:67:54:e5:31:8c:24:fd:e2:b7:1b:c1:d3:
         b5:cd:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:28:25 2025 by rpki-client