Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/37a60974-ee7e-3d2d-8536-e12c060d0f51.roa
File:                     37a60974-ee7e-3d2d-8536-e12c060d0f51.roa (raw, json)
Hash identifier:          PDesUMRi7w3ND4h0UaIEBIseFMRQzNaJHhVgCJ1n7d8=
Subject key identifier:   4A:96:6E:36:A5:D5:69:BE:A3:EE:A8:F1:55:1D:AC:24:5E:12:51:49
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF4C9377CF5CAE8BB1F80
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/37a60974-ee7e-3d2d-8536-e12c060d0f51.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f4:c9:37:7c:f5:ca:e8:bb:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=51878412-1247-4a11-9196-8f848418157b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:cd:32:ff:a9:4e:19:a7:05:0f:33:b4:d6:
                    15:d9:cd:91:d1:14:5b:b7:b5:a8:11:c0:1b:1c:43:
                    ac:cd:c3:a5:ac:4f:63:0e:a3:3a:84:1a:06:aa:78:
                    5f:37:4d:ed:47:18:87:84:96:fd:3c:f2:21:f8:59:
                    98:b8:bd:4e:5e:88:18:c6:b2:93:02:fc:81:0d:fd:
                    8b:7a:7b:bb:fb:05:a9:2a:2b:9b:7d:ce:5d:db:a7:
                    d7:46:ae:dc:d8:ce:66:51:5d:0d:6e:3c:3d:5b:c2:
                    36:e4:52:a1:13:84:7c:7a:11:da:11:71:9c:19:7c:
                    e0:6c:89:f8:c7:6a:01:44:53:a9:af:12:8f:1d:db:
                    4c:bc:74:f2:2f:3c:06:9a:7b:5e:07:a4:e5:5a:d7:
                    17:d1:b7:38:6a:fb:88:c9:a8:b1:36:7a:75:0c:79:
                    41:e3:5a:53:16:23:1e:1d:00:ee:1c:b4:63:1b:7b:
                    96:44:29:aa:39:83:5f:d4:92:fc:97:3e:07:4d:0f:
                    a4:bf:ac:60:91:46:31:e1:15:11:57:49:6a:a7:40:
                    b4:c0:3e:5d:b7:ba:5b:bd:a0:b0:4b:7c:7d:f4:f6:
                    27:ca:aa:c8:ca:5e:1d:fa:62:35:a9:e7:dc:25:66:
                    f6:fd:b7:9f:74:91:3f:39:fa:5c:6f:cd:9d:6e:dc:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:96:6E:36:A5:D5:69:BE:A3:EE:A8:F1:55:1D:AC:24:5E:12:51:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/37a60974-ee7e-3d2d-8536-e12c060d0f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:6c:ca:7a:98:78:f3:d4:13:8a:ef:dd:c1:fa:f0:e1:66:
         f4:37:f6:cd:ab:eb:2c:fb:63:50:75:54:e3:7a:01:63:3d:3a:
         7c:80:43:6b:26:f8:da:f0:da:90:d8:c5:d3:a2:08:29:85:24:
         1c:09:57:32:2b:5f:af:d4:81:45:0b:0d:1d:a5:ef:c9:65:42:
         99:f2:4d:55:1e:3e:1d:46:56:26:ad:be:ff:4e:ea:50:f3:b6:
         7d:12:b6:45:e4:40:6e:5e:66:ee:d5:63:2a:da:8e:2f:5f:3c:
         6a:aa:95:73:2d:51:cb:f4:61:95:f2:b8:91:df:40:96:ad:c5:
         b2:49:50:f3:9c:2f:3e:9f:34:cb:ae:4f:e6:32:d1:f9:73:8e:
         9b:78:e3:7d:84:a4:63:30:77:07:e5:eb:a1:32:48:ae:71:f0:
         75:95:b8:58:f8:e2:95:b7:b5:f9:83:a8:e0:ab:0d:1c:1b:23:
         fe:fd:ad:eb:d9:05:61:23:3b:a8:c0:37:94:c5:de:4c:47:31:
         c8:6d:a4:bb:01:bc:d7:5f:b5:0a:6b:95:7c:10:8f:82:e2:3e:
         aa:53:18:f0:45:e4:33:b6:ea:7a:f1:6b:8b:db:79:5b:db:0b:
         36:68:b5:5d:85:b3:86:ea:7d:33:f0:9e:c3:b0:f3:7b:f4:9d:
         5f:48:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----