Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c69d7e2-e0b1-3edf-9690-e158f181156d.roa
File:                     1c69d7e2-e0b1-3edf-9690-e158f181156d.roa (raw, json)
Hash identifier:          ytIILobr82SK8zrAJU9H0Pdnsi76tB8KFYMhDHMhJVY=
Subject key identifier:   B6:73:2F:43:16:F0:FA:4D:FC:ED:D9:C0:91:F9:5C:7D:68:C8:A9:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D9436D38C4B1AACEAEF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c69d7e2-e0b1-3edf-9690-e158f181156d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33667
IP address blocks:        2001:559:5a2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:94:36:d3:8c:4b:1a:ac:ea:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=2111eb67-9edb-453c-aa9a-4c2d056092b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:15:e7:da:7b:de:71:b8:19:c0:37:67:6b:
                    85:12:4f:bc:a0:fd:22:fb:94:92:63:a4:73:18:66:
                    89:25:d5:1d:a1:df:1a:66:50:6c:c5:6d:30:dd:f9:
                    f2:ea:54:7e:4f:a7:e6:77:d7:5a:2a:d5:00:b5:be:
                    3b:11:98:3c:d6:c0:33:f8:84:b6:78:98:a6:10:e4:
                    e1:37:c7:70:1b:d5:6b:98:fe:04:38:25:a1:c0:41:
                    81:38:e3:78:75:a7:7b:a0:85:37:67:53:6c:c3:20:
                    38:02:2a:c8:23:f2:c1:b7:48:6f:7f:bb:57:ba:90:
                    72:6c:f0:97:91:3a:3b:ba:8f:b4:fe:39:f8:42:c4:
                    fa:74:86:6f:f8:25:e2:7a:a1:9b:7b:b4:e3:79:23:
                    41:c4:88:5e:94:fc:af:b3:20:70:f6:20:22:95:ec:
                    89:c8:27:1f:c3:31:39:ad:f5:0c:9e:88:70:07:7d:
                    68:af:d9:3b:b3:97:d1:f3:38:86:53:76:0d:a1:5e:
                    a2:d4:e3:e4:7e:d6:a9:ce:66:3e:9c:84:39:1b:00:
                    dc:e1:bb:50:fb:99:b7:a2:5e:5e:46:0d:c1:83:2c:
                    a4:d7:df:f4:e4:c8:da:f8:f0:d0:89:18:86:46:99:
                    c6:77:f2:ff:3b:a9:fe:c6:2e:0f:23:12:3e:0e:0e:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:2F:43:16:F0:FA:4D:FC:ED:D9:C0:91:F9:5C:7D:68:C8:A9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c69d7e2-e0b1-3edf-9690-e158f181156d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:31:0c:e8:8b:a3:f9:0e:14:49:2e:83:3b:e6:43:92:56:c2:
         64:73:90:f5:b5:b0:c0:08:19:9d:36:50:ce:ef:bb:9c:8d:89:
         6b:9d:76:8e:f6:50:07:f8:24:0e:69:bb:5e:de:c6:0e:6b:3a:
         9c:c9:d9:34:a0:ca:06:21:57:7a:b4:ea:6d:d7:f9:4e:63:93:
         58:21:05:50:1d:7e:24:7e:47:a5:f0:93:fc:79:5e:18:83:8d:
         ff:c3:9b:25:87:55:5e:45:19:a6:89:49:a4:e0:60:1e:77:14:
         ff:ec:69:7f:72:70:36:19:36:82:be:ef:8b:7f:e9:c2:c3:86:
         2c:2a:b4:42:89:d1:01:67:22:fd:c3:05:4d:66:e2:20:6d:08:
         c8:05:fe:84:3d:43:28:1b:59:11:e0:4b:c3:db:d2:79:8e:dc:
         a8:47:b9:eb:84:35:e9:46:6f:c4:c6:f8:36:12:d3:6b:08:4d:
         9a:d7:05:79:46:8c:3a:7c:e7:aa:13:2c:a8:a0:6d:fe:98:ca:
         2d:6b:4d:bc:62:96:86:5a:95:3d:f5:27:aa:16:16:23:ff:22:
         15:8d:5f:bf:06:66:78:a6:80:60:0b:13:82:e4:3f:33:61:1c:
         8e:9b:be:50:3d:bf:ec:2d:62:17:56:04:b4:c2:a5:cb:8a:5b:
         be:60:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----