Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0094cba-f45c-3dc7-9fec-49415188c056.roa
File:                     e0094cba-f45c-3dc7-9fec-49415188c056.roa (raw, json)
Hash identifier:          EiCHpZU41koPl3tSfk2tWYK4vd9Szs5IIrQHhT4Tj9E=
Subject key identifier:   1E:6F:74:99:71:E0:BB:33:12:B1:68:B6:B4:7E:B5:A9:9A:E4:47:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BD5DC9A4E59E550300980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0094cba-f45c-3dc7-9fec-49415188c056.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     20214
IP address blocks:        2001:559:821d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:d5:dc:9a:4e:59:e5:50:30:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=05be3517-9475-4cc0-9fe2-93bb14c8ad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:25:81:6b:a8:3f:e0:6e:4e:26:b5:f7:6b:
                    7e:b0:b9:5f:85:6c:3b:92:2d:aa:41:20:af:0f:83:
                    74:ac:ca:65:d6:24:7a:70:8e:6e:71:93:8d:ec:8c:
                    b2:e5:9b:dd:45:f6:95:9e:d4:ab:de:bd:6d:69:dd:
                    22:43:35:53:c2:6a:a5:fa:42:89:ba:90:46:ee:ff:
                    8b:8e:05:dc:af:0b:43:41:d7:66:a8:a8:29:da:5f:
                    bd:60:8a:77:13:19:a0:0a:e1:dc:b7:84:e0:b7:c6:
                    72:d7:92:4e:f5:7f:91:57:d9:88:33:4f:46:59:0f:
                    36:14:ba:42:f6:e5:63:a3:a4:00:41:db:5d:85:07:
                    3d:a6:a3:24:71:2b:0b:dc:57:72:fe:6b:01:8b:97:
                    6d:5d:0a:5b:0c:fa:0d:be:64:b7:d7:af:c3:02:f7:
                    87:19:b3:6b:97:d3:55:a7:61:02:41:56:81:c8:e5:
                    28:0a:74:bc:58:f7:00:d2:51:f9:68:36:d0:4b:ef:
                    c5:75:ac:69:b9:16:48:9f:8e:8b:2c:77:fb:cc:16:
                    c3:e1:16:18:e9:6e:79:72:bb:08:ee:96:9b:79:32:
                    51:c1:a4:e1:66:bf:db:db:be:22:4e:c3:34:98:2c:
                    28:eb:b0:b0:80:01:81:35:59:67:b7:75:cb:db:f5:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:74:99:71:E0:BB:33:12:B1:68:B6:B4:7E:B5:A9:9A:E4:47:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0094cba-f45c-3dc7-9fec-49415188c056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:821d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:62:e4:17:34:ef:44:e8:d5:75:44:94:b4:ae:94:1b:25:
         44:b1:b0:c9:f6:e0:25:82:b3:8b:2b:6e:f8:8a:1e:15:34:e4:
         a7:6e:09:46:b2:cf:fd:9a:92:1a:7d:f9:22:0b:fc:1b:92:d2:
         04:45:9c:1c:b1:f5:56:a9:48:83:da:a9:b7:a3:b2:66:5b:28:
         ce:a1:cb:68:56:f1:3b:e6:ea:b7:ea:6f:b6:63:c2:c5:b3:a0:
         d6:61:79:dc:2b:4a:d1:59:b3:f7:69:6a:7b:68:8b:a0:94:9e:
         ad:26:e5:60:af:7a:4e:d4:92:92:81:bd:dc:17:67:46:67:c2:
         6d:e2:c5:55:ea:3e:a9:b5:e8:fe:15:ef:30:bd:c6:2f:45:5c:
         4b:b3:b7:d0:77:af:2b:0b:43:a6:69:f0:2a:bc:06:1d:83:7a:
         c2:dd:77:14:54:ad:d4:77:ef:c2:56:53:33:e2:43:1f:22:e6:
         a3:aa:f1:26:8c:76:4d:6c:78:64:56:f6:fa:9a:f5:5e:37:3a:
         8f:40:b1:01:33:30:e4:66:13:1d:b8:21:45:da:ae:e2:2a:61:
         0f:1f:0b:52:2d:f9:54:62:a7:0f:a7:01:9c:da:e7:27:77:58:
         f2:0e:a8:9c:fd:3c:4a:c0:be:66:44:44:82:71:63:e3:59:c8:
         65:ab:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:43 2025 by rpki-client