Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a752b4f-4d29-36fb-80ce-36d190b0a0f0.roa
File:                     2a752b4f-4d29-36fb-80ce-36d190b0a0f0.roa (raw, json)
Hash identifier:          SDF+jzvl9QITVddYlHn4GScYoqL0OfU/RBUqWOm99Bs=
Subject key identifier:   C4:A7:A1:E9:DD:D6:D1:97:59:32:9C:D9:BC:43:A6:0A:50:64:7D:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E0FD3FA6A52065EAAF940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a752b4f-4d29-36fb-80ce-36d190b0a0f0.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        2001:559:86c1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:0f:d3:fa:6a:52:06:5e:aa:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=8ac246df-56fe-4c3a-a8fe-97aa7203208c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:80:85:14:1d:79:09:08:61:85:db:95:1f:
                    14:b0:68:5f:38:3a:1d:5b:f2:9c:50:6c:ab:54:f3:
                    b6:00:1b:ce:d0:dd:6f:c6:54:08:5b:82:24:2b:0a:
                    46:b8:05:f5:1f:4b:a2:a7:14:f0:c2:7b:b1:e4:a2:
                    1d:22:2c:78:a3:77:fa:8a:4a:d8:61:58:69:1b:e7:
                    30:2a:7f:7f:b6:c5:a9:13:66:3c:cc:86:2e:a5:fb:
                    ad:d7:39:5f:f4:50:47:6c:74:4c:f5:57:9b:22:20:
                    94:1c:a6:b7:74:f8:de:9b:dc:ea:5a:46:90:4e:4c:
                    be:66:d7:fe:85:66:11:37:bf:aa:5a:76:4a:ad:0b:
                    fa:6c:d7:64:2b:7d:b0:e1:c9:22:67:ab:fc:bb:bd:
                    14:ca:c6:b1:04:32:1e:43:ab:13:d9:89:e6:86:99:
                    a5:d3:fc:33:50:c2:82:63:64:a2:37:4d:65:74:3c:
                    94:bb:89:3b:59:fc:5d:ad:54:bf:89:eb:86:76:68:
                    2a:27:7d:1c:af:0a:87:c9:a9:11:05:47:2a:c7:4b:
                    98:44:2f:e5:d3:ad:0a:29:3c:d3:99:99:b3:ec:cf:
                    58:5e:c5:90:34:8e:8e:22:36:01:fa:7d:55:da:b0:
                    28:f9:a6:0a:55:71:86:cc:98:11:dc:42:21:66:a6:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A7:A1:E9:DD:D6:D1:97:59:32:9C:D9:BC:43:A6:0A:50:64:7D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a752b4f-4d29-36fb-80ce-36d190b0a0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:1e:5f:bc:c2:71:79:e7:8d:a9:cb:b5:fd:3e:77:fd:f6:
         78:5d:ec:35:b8:ba:64:14:53:ae:3f:69:3b:b3:82:52:06:e6:
         aa:3c:c2:8a:7e:e3:07:59:79:b9:2e:1a:55:26:58:6e:a4:12:
         d9:d8:1e:3c:9b:75:7b:44:1d:a8:53:c6:c6:7a:39:87:3e:2d:
         ae:5e:26:1a:16:a5:fc:e3:de:e8:8e:f7:d3:81:dc:57:2e:2f:
         16:42:9f:b8:b9:dc:5c:2d:ee:8f:ec:ec:71:27:6f:44:78:e6:
         5d:a6:db:03:2b:00:32:eb:d6:14:44:17:9a:50:bf:9c:81:6d:
         fd:1e:fd:f7:38:da:87:13:a0:f6:f6:81:0e:92:f4:f4:fb:89:
         fb:12:ff:fd:68:25:28:a4:6e:78:66:de:b0:fb:58:46:b8:52:
         c5:11:b8:5e:c6:08:1d:f6:58:21:11:60:eb:75:57:0e:92:68:
         29:89:96:4f:5e:08:49:c9:a1:e6:45:a2:8b:0d:34:7e:eb:32:
         82:cd:50:68:8c:48:d1:d4:cb:2b:0a:eb:6a:9d:4e:7f:97:9d:
         d1:74:3c:ea:4a:d8:4c:89:cc:93:f4:c3:e7:92:92:2f:a4:e9:
         b7:48:0e:4b:f8:1d:a3:1c:80:ad:10:92:7b:45:09:b0:3b:9f:
         32:6a:bb:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebg/T+mpSBl6q+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
OGFjMjQ2ZGYtNTZmZS00YzNhLWE4ZmUtOTdhYTcyMDMyMDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06qAhRQdeQkIYYXblR8UsGhfODodW/KcUGyr
VPO2ABvO0N1vxlQIW4IkKwpGuAX1H0uipxTwwnux5KIdIix4o3f6ikrYYVhpG+cw
Kn9/tsWpE2Y8zIYupfut1zlf9FBHbHRM9VebIiCUHKa3dPjem9zqWkaQTky+Ztf+
hWYRN7+qWnZKrQv6bNdkK32w4ckiZ6v8u70UysaxBDIeQ6sT2Ynmhpml0/wzUMKC
Y2SiN01ldDyUu4k7WfxdrVS/ieuGdmgqJ30crwqHyakRBUcqx0uYRC/l060KKTzT
mZmz7M9YXsWQNI6OIjYB+n1V2rAo+aYKVXGGzJgR3EIhZqZktQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMSnoend1tGXWTKc2bxDpgpQZH1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE3NTJiNGYtNGQyOS0z
NmZiLTgwY2UtMzZkMTkwYjBhMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHd/Hl+8wnF5542py7X9Pnf99nhd7DW4umQUU64/aTuzglIG5qo8
wop+4wdZebkuGlUmWG6kEtnYHjybdXtEHahTxsZ6OYc+La5eJhoWpfzj3uiO99OB
3FcuLxZCn7i53Fwt7o/s7HEnb0R45l2m2wMrADLr1hREF5pQv5yBbf0e/fc42ocT
oPb2gQ6S9PT7ifsS//1oJSikbnhm3rD7WEa4UsURuF7GCB32WCERYOt1Vw6SaCmJ
lk9eCEnJoeZFoosNNH7rMoLNUGiMSNHUyysK62qdTn+XndF0POpK2EyJzJP0w+eS
ki+k6bdIDkv4HaMcgK0QkntFCbA7nzJquzo=
-----END CERTIFICATE-----