Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9e4e48f-f56b-3f64-9591-6c0787e253ad.roa
File:                     a9e4e48f-f56b-3f64-9591-6c0787e253ad.roa (raw, json)
Hash identifier:          Wv6ztj92l9Se+U9qFoAteaF8J/l9JxjwW5PWY2VBLrk=
Subject key identifier:   D7:BF:27:02:28:37:80:58:36:82:AB:62:F7:45:85:79:BF:FE:35:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143B8A6121F42C6024E5D5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9e4e48f-f56b-3f64-9591-6c0787e253ad.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     33662
IP address blocks:        2001:559:85ac::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3b:8a:61:21:f4:2c:60:24:e5:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=92e7ed12-557f-47be-b5c2-0deb0be02d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:19:9b:f4:80:37:c5:57:28:1b:b1:74:6a:
                    2e:c5:fd:3e:6c:40:8e:aa:d0:e8:92:9f:e4:63:7b:
                    90:ae:78:22:64:c4:8e:7d:06:a6:88:71:b0:3f:8e:
                    11:f1:10:e6:23:e7:8a:7a:a6:98:6c:cf:42:b1:58:
                    ba:c3:3f:15:f4:dd:35:fa:7e:f4:80:7e:ee:5c:d1:
                    e4:e2:73:b1:2f:3b:46:08:d2:93:36:c2:3f:a0:28:
                    b6:cf:52:2b:04:5f:3f:87:2b:7c:56:a6:4b:af:36:
                    c5:56:7c:98:42:5d:c3:6e:00:c3:b9:3b:2a:ad:3b:
                    85:04:96:3e:c9:af:4e:f8:4a:ee:e8:9e:0a:e0:8b:
                    a4:c6:81:5c:05:41:7e:f2:7b:24:ee:b3:68:2b:46:
                    93:6f:ee:b5:a5:30:1f:97:bc:41:72:54:51:e6:61:
                    bb:a4:b7:b2:f7:29:bd:89:a3:fc:39:11:c2:7d:e1:
                    ea:2a:1b:fc:bd:02:ef:7a:6f:a4:3a:30:c6:65:5c:
                    2f:60:94:b6:14:14:34:7e:c9:cc:2a:d5:9a:e7:01:
                    93:16:2f:a5:ac:3c:6d:e6:52:8b:8c:ef:03:47:c2:
                    c6:2e:41:db:c6:b6:0a:8b:96:82:14:10:3b:1c:9b:
                    8a:66:60:94:97:bd:f3:9e:29:14:56:a4:a6:0c:90:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:27:02:28:37:80:58:36:82:AB:62:F7:45:85:79:BF:FE:35:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9e4e48f-f56b-3f64-9591-6c0787e253ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:87:bb:34:28:a7:0e:1d:4c:b6:16:4a:3b:32:21:82:ac:
         26:d4:b7:06:6b:ad:4c:aa:6e:b1:c5:32:21:4e:83:37:a3:b4:
         82:a4:79:a2:bf:cf:59:c0:e1:45:eb:76:d4:eb:2b:3b:1f:88:
         42:7b:8b:5f:55:2e:61:2e:d2:02:dc:3a:07:40:61:ad:df:2a:
         58:5a:dc:0b:74:70:0a:64:04:0d:2d:d3:ea:d5:c1:f1:1f:76:
         57:95:06:85:61:88:db:09:80:63:ed:64:b7:80:d7:61:f8:66:
         d9:3a:71:10:ae:05:38:5b:be:5d:55:cb:f3:e5:6d:91:ec:09:
         ca:39:0e:94:d0:22:56:44:93:3f:2a:92:df:3e:c1:98:02:82:
         0d:21:c0:8a:39:4b:27:41:cf:f9:b1:62:50:9a:ee:66:66:5c:
         08:cb:91:d0:c3:2e:76:9a:36:76:e0:26:cf:a5:b6:f7:13:73:
         24:69:ce:9a:35:12:57:95:91:fe:62:98:13:be:02:59:0d:a1:
         5a:5d:3f:bd:b1:4a:87:15:f1:04:ef:95:8e:13:94:c2:e9:54:
         54:4f:6c:28:9c:2d:b4:50:af:e4:45:73:86:be:23:ef:20:c8:
         27:36:e6:a2:36:98:79:51:1d:f4:e2:e8:bb:4b:78:9f:cf:47:
         30:09:5f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:59 2025 by rpki-client