Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b69e0506-65de-389a-a3ec-fb7d14965c1f.roa
File:                     b69e0506-65de-389a-a3ec-fb7d14965c1f.roa (raw, json)
Hash identifier:          Pnbp1ToR6+LKXfmLWN4ST4C/e31+Ox0IcRT5QwMwdeU=
Subject key identifier:   F5:8D:82:F7:61:88:D5:C7:00:80:37:67:FA:CB:2B:FA:B3:05:27:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B78B851FD7FA2AD720928E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b69e0506-65de-389a-a3ec-fb7d14965c1f.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     33491
IP address blocks:        2001:559:7017::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:85:1f:d7:fa:2a:d7:20:92:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=f9f00a67-24cc-40e7-b84b-d93b588e9a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:ab:8c:38:39:c5:22:16:99:42:56:7b:4a:
                    90:77:38:7e:9a:cc:34:c3:64:7c:86:01:c9:25:98:
                    c3:3b:1b:3d:e3:80:29:8f:77:d9:b5:d9:f0:90:ce:
                    7b:3c:d8:ff:e7:d6:23:a5:c1:a4:9b:41:3e:40:69:
                    6b:4c:d8:cc:9e:6f:b5:1f:89:1e:7a:d6:55:59:cf:
                    e3:13:91:d2:32:9e:87:37:17:6f:5e:a9:00:95:8d:
                    14:64:03:d9:c2:35:27:40:2f:55:12:d6:2a:91:27:
                    dc:84:53:dc:00:b8:65:11:30:42:0e:5f:9a:34:a1:
                    36:9c:63:06:f7:d9:68:69:dd:12:8f:fe:c0:cd:d3:
                    84:08:7d:4a:b0:88:3f:b3:0b:6b:be:e0:10:93:4f:
                    b6:f5:01:e0:fd:9d:2d:82:34:cb:dc:c2:33:93:d4:
                    55:ed:53:1d:85:cb:d7:04:43:b6:3e:01:57:40:d0:
                    00:50:3a:80:45:9c:40:c7:94:7b:14:d6:30:a2:b9:
                    eb:71:dc:0a:13:6e:4c:19:2f:da:53:65:c1:d1:bf:
                    c2:ea:cf:de:75:ff:f7:b3:f4:43:f5:bd:31:44:ff:
                    68:fd:c9:c2:27:7a:62:a8:fa:2f:b4:cc:0f:b5:19:
                    50:15:28:c7:b9:d9:7c:15:33:da:cf:b7:b7:ef:e6:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8D:82:F7:61:88:D5:C7:00:80:37:67:FA:CB:2B:FA:B3:05:27:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b69e0506-65de-389a-a3ec-fb7d14965c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7017::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f7:3c:51:33:ba:2c:75:0e:07:d6:bb:79:a9:35:c6:ad:ab:
         5d:62:39:97:e9:df:20:a6:fa:17:a1:09:d2:87:44:fd:8f:f3:
         ce:32:4b:3d:87:4c:91:2a:ae:9a:40:d5:63:cc:c4:9c:33:84:
         f4:a6:2d:86:22:f2:61:c5:6d:8f:70:a5:87:13:91:e1:ac:2c:
         e0:fb:b1:94:32:1b:3a:3a:9a:46:a3:49:8a:1d:81:bc:28:e9:
         00:a1:42:6a:af:5e:a1:d8:a5:88:92:7c:c1:a2:9b:0e:0f:4c:
         04:1e:f5:21:e6:1c:56:18:f3:f3:25:e9:17:00:70:35:a7:17:
         6d:0a:02:a1:73:0c:71:5d:ed:1b:74:2b:5c:51:70:73:70:e2:
         a7:87:c8:c0:c6:bd:fc:d0:f0:02:0c:f5:6f:f2:ec:74:c8:73:
         50:4e:d2:82:f0:84:c3:42:da:96:2d:cf:28:09:43:12:70:3d:
         96:f8:58:2f:2f:bf:10:75:4b:aa:2a:a1:69:09:5a:8c:d0:ac:
         6a:d0:49:cf:1c:fe:16:d8:6d:4b:03:aa:89:54:6c:fb:db:76:
         29:03:cf:e5:dd:01:e6:22:94:e7:07:98:4b:e0:0e:cc:e7:bb:
         18:a4:28:cc:09:88:c3:9b:35:ee:5f:ce:11:56:84:91:7a:d6:
         f4:fa:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----