Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cf33851-c482-3cfe-95b6-d57b4fa4fdd2.roa
File:                     3cf33851-c482-3cfe-95b6-d57b4fa4fdd2.roa (raw, json)
Hash identifier:          CCdDaFjLYJ+k2APUSpuRXukc2fx9LWD8A8zrewU/QJE=
Subject key identifier:   F5:E1:92:D6:97:B7:B6:D8:6B:7E:33:DA:FB:39:52:1A:94:18:87:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848530AF75E59D9798311887600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cf33851-c482-3cfe-95b6-d57b4fa4fdd2.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     7016
IP address blocks:        2001:559:4006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f7:5e:59:d9:79:83:11:88:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=26cb4478-7a95-48d1-b455-3eb8b47b0f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:74:23:f8:89:f7:f7:31:63:bb:a0:72:da:
                    c7:03:fe:04:b2:0f:37:58:55:28:bf:0a:2c:a2:c4:
                    27:1b:f7:f7:1b:72:9c:88:b3:18:70:14:db:fb:b3:
                    e3:11:06:73:e5:07:1f:d5:ea:ee:72:75:e8:da:61:
                    72:2c:48:10:ae:e3:97:94:4b:96:c5:d1:ac:53:9a:
                    c5:3f:fb:b6:c7:af:ab:6d:bc:60:33:34:6f:d7:68:
                    d3:5a:88:b1:4c:2f:90:f8:5b:77:19:28:f7:09:26:
                    03:86:2e:fd:e3:8b:71:ed:38:d9:4e:2f:db:c0:e3:
                    21:c5:15:cb:c7:0b:04:3c:95:3b:6e:31:b2:be:a5:
                    70:af:b6:4b:c8:3e:1b:d1:38:3b:03:c1:9d:e9:55:
                    bf:a8:c8:a6:20:0b:3f:2f:52:88:16:43:2c:8f:7e:
                    40:59:55:fd:93:e8:86:df:f8:a3:90:78:0a:53:40:
                    88:13:e1:fc:5b:34:ad:bb:ef:02:e8:a2:4f:3b:e9:
                    9d:1c:1b:4b:c3:71:e7:28:bc:a9:2c:0d:56:4a:3f:
                    db:fa:01:90:af:33:b7:f8:0a:33:5b:ea:68:c7:4a:
                    8a:06:4b:dc:7d:54:64:5c:a5:dc:09:42:76:69:a6:
                    59:63:55:28:06:b2:da:95:b2:71:3f:8a:92:8d:e5:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E1:92:D6:97:B7:B6:D8:6B:7E:33:DA:FB:39:52:1A:94:18:87:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cf33851-c482-3cfe-95b6-d57b4fa4fdd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:6b:c4:16:59:fc:9f:cf:2b:f0:ab:39:8f:9e:45:67:fa:
         6d:ec:31:a8:38:37:de:b2:e6:09:fb:d2:73:f1:44:d3:89:07:
         ca:9e:fd:6d:73:82:e4:1a:29:74:71:87:28:e9:84:ab:1c:6b:
         3b:17:f6:00:06:bd:d0:13:de:cf:c5:23:16:26:e3:cb:77:11:
         74:f2:b5:03:02:ec:6a:17:3a:56:23:45:a2:b0:ca:19:8d:17:
         ef:c9:d0:2f:f9:62:ad:98:83:bd:c8:ee:fa:e8:ac:59:f9:9c:
         8f:27:d0:3f:06:dc:df:b4:3a:e1:0a:82:1a:ca:22:2c:e5:47:
         b7:f7:f5:36:92:a9:71:5a:e2:bd:f1:3b:70:43:df:8c:07:96:
         9c:db:4c:00:81:07:47:98:f4:5b:0d:38:06:2c:b3:e3:75:48:
         46:95:13:f2:87:c7:49:96:98:b7:06:be:8e:c6:6d:2b:75:68:
         a3:ce:c8:db:e8:db:48:ee:db:70:1d:85:a1:87:8a:44:db:ba:
         c9:73:6b:12:2d:8a:3d:38:93:e9:46:d6:77:8b:53:10:8e:13:
         f7:48:7d:68:6e:d1:35:46:bf:12:cd:7a:6a:1c:c4:e0:09:0c:
         58:d3:c7:f7:ff:d9:ad:e8:f5:ae:1f:51:9e:f9:b2:04:61:f8:
         5e:df:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:46:18 2025 by rpki-client