Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7d6654-1da2-3d5f-a1c4-68e69955c055.roa
File:                     2f7d6654-1da2-3d5f-a1c4-68e69955c055.roa (raw, json)
Hash identifier:          Yz0tAGRlAfREGEXDF86HlyQW4lG/EBIcwp6vLaAtCb0=
Subject key identifier:   5B:DD:6B:20:50:1C:C9:6E:2B:8E:73:84:71:65:5F:B0:3C:F8:85:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BCF01CF06F34E815AF6D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7d6654-1da2-3d5f-a1c4-68e69955c055.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7725
IP address blocks:        2001:559:c3a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:cf:01:cf:06:f3:4e:81:5a:f6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=27c9e66c-5a56-47cd-933c-3b992b332f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:7e:61:25:98:99:0d:76:3f:33:3e:2b:3a:
                    dc:af:98:ce:38:47:da:3a:89:9a:03:83:3e:09:81:
                    5c:66:26:12:10:e6:86:c8:e6:c9:59:20:f4:4c:27:
                    8f:8d:29:eb:e7:12:eb:d0:9d:3e:d3:ec:37:80:07:
                    a8:43:7b:90:93:9c:ad:c1:44:d4:04:d9:38:8e:e8:
                    dc:e3:ce:ef:20:7d:d4:dd:82:e5:8b:6d:fd:08:2d:
                    85:fa:ec:3f:12:b5:1d:20:b7:21:ec:62:93:04:ba:
                    90:81:81:f2:7b:75:93:54:4d:91:d8:86:a6:84:52:
                    54:3a:d3:02:c5:8e:1e:b6:6d:ae:1f:ce:f5:77:e7:
                    ba:26:57:97:02:bf:5e:83:14:19:65:59:08:fb:96:
                    6e:e6:fb:d0:da:e7:73:d4:53:d4:ed:59:86:2b:50:
                    a8:d0:1e:67:1d:8a:d3:02:27:ba:bc:73:09:fb:e9:
                    58:78:7b:18:75:13:68:4f:e9:ab:e6:2e:31:5f:9b:
                    e0:e8:5d:e5:b4:ed:b3:9f:52:8c:a9:a7:be:d4:68:
                    b0:82:3a:80:54:34:b0:00:c0:5d:7a:6f:70:70:63:
                    93:ec:93:3c:4c:c2:79:15:66:ee:67:31:13:5c:88:
                    0b:30:de:90:83:98:31:db:16:f8:07:04:9f:e0:64:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:6B:20:50:1C:C9:6E:2B:8E:73:84:71:65:5F:B0:3C:F8:85:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f7d6654-1da2-3d5f-a1c4-68e69955c055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:fb:71:bc:3a:ea:8a:2e:dd:83:3f:c1:89:39:f6:74:3d:
         d8:eb:28:54:72:47:d6:ef:76:68:d5:13:b3:17:02:d1:13:bb:
         ad:f9:3d:0e:39:ef:86:f4:37:8e:98:6f:11:58:7e:51:7c:62:
         8e:6d:9d:f9:9d:97:62:bd:6c:6f:e7:39:08:53:23:32:20:12:
         5e:64:14:44:32:eb:a7:e7:0d:d5:94:31:a6:61:ba:65:fc:ef:
         b5:00:15:ab:41:6d:d6:88:ac:4c:1f:7a:35:a7:1f:4e:60:70:
         c6:2a:b0:51:32:ba:ae:86:37:3e:dd:b8:56:5d:b0:d9:7c:d3:
         e0:06:7c:aa:c9:a8:60:65:78:ef:32:52:a7:7a:94:92:1a:29:
         37:1f:20:70:e9:f7:91:03:32:04:fa:da:e3:11:47:cc:af:47:
         1b:7b:61:ba:0b:d9:63:71:f9:18:a9:72:e5:b3:a1:f7:cb:da:
         ab:9f:61:47:8d:c6:5a:50:32:63:63:3e:c8:f9:f4:76:20:3f:
         a6:2d:d7:29:96:a1:3f:1e:f7:78:8f:3f:fc:1f:1b:6b:a0:ad:
         b3:57:b3:60:55:96:c7:66:e6:19:ad:79:4a:80:cd:b8:06:fb:
         1a:9c:ed:e5:f0:0c:d6:2e:3c:81:4a:c6:58:5c:17:ab:31:82:
         7d:5f:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:16 2025 by rpki-client