Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f170175b-124b-30a1-b8f8-8e64832480cb.roa
File:                     f170175b-124b-30a1-b8f8-8e64832480cb.roa (raw, json)
Hash identifier:          yyPfCJmac9EFRPh/22uG8Tb78BCCd3JXaryFI7uxY1U=
Subject key identifier:   D4:78:50:0D:90:78:E5:8D:5B:3A:F4:CA:AA:E8:21:BA:F9:9D:BC:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C05193F4E2C6359C978E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f170175b-124b-30a1-b8f8-8e64832480cb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33652
IP address blocks:        2001:559:d4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:05:19:3f:4e:2c:63:59:c9:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=710b117d-ab26-4a5a-888f-c39a98fddf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:39:3f:e6:1b:77:87:5c:6c:73:64:2b:b4:
                    e4:dc:ca:a0:04:a4:f9:3d:bd:56:e5:bf:51:85:e9:
                    7f:35:3d:1d:f8:fc:a5:22:98:0c:1b:ff:db:b6:10:
                    33:dc:88:1e:90:64:8e:f8:90:fe:e0:6e:e3:0a:7d:
                    ad:d8:55:21:09:43:6d:a6:81:d7:e2:49:33:e8:10:
                    b6:df:5a:e6:6a:fb:35:29:12:12:da:6a:dc:3f:79:
                    1b:f4:66:9f:c9:f0:b7:c9:2c:e7:a2:d8:af:a9:62:
                    e8:49:87:4d:1a:36:9d:d0:62:4e:e0:9d:24:54:06:
                    4d:c4:41:f6:6d:56:7f:49:bd:ff:bb:4b:59:ac:65:
                    3c:f8:58:6c:3f:2d:00:3e:a3:26:bc:c6:aa:f5:6d:
                    fa:c4:cf:18:a8:e7:05:f3:6f:03:49:34:f4:53:50:
                    85:86:23:df:37:35:6b:61:fd:5b:da:74:f4:dd:53:
                    2d:a7:9e:dd:7c:76:bd:b1:e2:e7:2b:35:33:cb:cb:
                    31:80:cf:0b:ce:1a:d8:11:1e:a3:61:78:65:1e:ea:
                    37:a6:8e:ad:9e:7a:42:60:97:52:b0:55:ab:81:48:
                    6b:f0:30:9b:07:2a:09:cc:24:b8:6f:f1:da:35:27:
                    eb:86:b9:aa:cd:1a:a4:7a:2c:a5:4c:2a:ca:f4:11:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:50:0D:90:78:E5:8D:5B:3A:F4:CA:AA:E8:21:BA:F9:9D:BC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f170175b-124b-30a1-b8f8-8e64832480cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:d4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:b8:e4:c4:91:54:c8:2b:ef:1d:40:a4:fa:ec:be:ae:4f:61:
         77:67:4c:50:b3:72:54:37:79:50:fa:6b:7d:b8:3e:77:23:fc:
         16:ab:ee:f3:24:34:01:ea:23:4b:43:a3:00:11:67:74:e4:84:
         03:40:c3:78:5e:a8:36:85:5c:fe:84:fc:df:08:ee:6f:69:1f:
         76:66:0d:bc:58:27:42:15:5f:6b:93:03:72:8e:9c:f0:03:ac:
         2f:d5:85:fb:c7:22:78:fa:66:d2:1c:90:19:1c:01:7e:f1:02:
         ee:fe:45:ac:61:2c:15:04:17:8a:ad:66:de:fb:6f:09:a4:94:
         15:6f:35:30:4f:f2:28:15:bc:1c:ee:41:ce:e4:b1:c6:12:c8:
         3c:d9:28:79:5c:67:3d:31:e9:4c:41:05:71:15:30:25:f5:73:
         75:48:29:80:8f:8c:53:a8:15:ab:33:62:6d:d8:69:6e:ef:c2:
         8c:27:02:74:8e:f2:15:9b:9f:d0:65:28:ab:ef:e8:4b:22:41:
         51:dd:f9:3d:fd:f8:89:60:22:0b:e8:58:b5:93:aa:1c:08:d4:
         bf:53:0d:0d:71:6d:3f:09:0b:91:a0:c9:8c:ec:a8:7c:d7:c3:
         2e:33:4c:c5:2c:9d:b5:57:b3:40:e5:b9:1c:21:20:23:67:6e:
         85:4a:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:26 2025 by rpki-client