Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/54e48b19-f2c3-3625-94c7-57a2ffa54433.roa
File:                     54e48b19-f2c3-3625-94c7-57a2ffa54433.roa (raw, json)
Hash identifier:          PPCMneUKZF6rHIFv1P6mVwTSUpZXNcil1CrtxBtOK4A=
Subject key identifier:   E1:9C:7E:DC:FA:12:72:85:C9:A2:90:6F:89:7A:86:08:71:D6:61:E7
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F04E63F3DDF0C3BEAAD311240
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/54e48b19-f2c3-3625-94c7-57a2ffa54433.roa
Signing time:             Mon 31 Aug 2026 11:42:36 +0000
ROA not before:           Mon 31 Aug 2026 11:42:36 +0000
ROA not after:            Sun 29 Nov 2026 12:42:36 +0000
asID:                     834
IP address blocks:        199.235.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:04:e6:3f:3d:df:0c:3b:ea:ad:31:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Aug 31 11:42:36 2026 GMT
            Not After : Nov 29 12:42:36 2026 GMT
        Subject: CN=8671d8e2-d936-4705-9f54-ce137adaf145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:e1:b2:1b:65:c4:88:4c:05:06:73:c9:e4:
                    14:9a:98:e4:94:11:bd:05:ab:53:0b:57:7f:9c:2a:
                    c9:22:7f:47:a6:18:cc:67:d6:37:f1:2f:38:04:5e:
                    25:54:fc:cd:1f:28:e7:7c:11:1d:f6:8e:67:85:c9:
                    37:3d:4a:88:37:a1:1e:ec:ff:c4:68:e9:d7:b9:98:
                    4b:fe:dc:7e:4c:5a:38:b4:48:8b:36:49:8e:d7:20:
                    7d:03:02:05:bf:f9:eb:da:bc:34:7f:a7:74:b4:0f:
                    7d:9f:72:0b:3d:c7:ab:77:77:06:5f:2b:1b:70:f0:
                    d7:23:cb:7d:dd:dc:62:6c:54:ed:f2:8c:b1:ac:62:
                    75:4d:bd:80:59:d4:2a:9d:a9:64:bf:f5:5b:85:85:
                    2f:b0:18:66:24:43:49:88:c4:70:be:d3:45:6f:17:
                    1c:e0:64:cf:c8:fe:f1:11:fb:38:9f:c8:06:7a:07:
                    33:6a:40:f7:ae:ec:07:6a:89:bc:9e:37:db:ee:d9:
                    57:4f:86:0e:42:76:d0:14:76:09:0f:bf:03:5e:91:
                    c5:d4:06:c1:ba:8b:99:9f:ba:5b:53:27:cc:6b:71:
                    89:9d:e9:3e:24:85:db:0b:dc:b5:f1:d1:d1:22:e9:
                    bc:14:f2:97:2d:ef:25:da:b1:95:91:68:54:56:8b:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9C:7E:DC:FA:12:72:85:C9:A2:90:6F:89:7A:86:08:71:D6:61:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/54e48b19-f2c3-3625-94c7-57a2ffa54433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:fd:af:97:b7:52:98:a9:72:c9:2e:af:0b:27:c8:61:b9:
         96:81:30:2b:b6:f9:1f:92:52:8c:0f:57:fc:a7:63:fe:31:7d:
         06:cc:f0:97:74:8a:83:6f:94:a8:56:7d:16:22:8d:06:4e:87:
         ec:76:d5:9d:72:aa:52:dd:24:71:0c:36:01:7f:09:5a:bc:bb:
         8f:f6:18:29:30:20:f1:07:88:06:cf:73:a4:fb:cd:b2:7e:21:
         9a:54:65:42:47:ec:cd:99:3a:5c:de:02:e7:84:cf:80:89:e6:
         dc:30:73:56:ae:48:00:12:bc:1f:eb:bf:9b:5b:39:5e:88:b5:
         9f:2d:b6:d8:1e:4a:62:d8:f6:86:15:42:d9:7a:7a:58:e0:13:
         ba:12:b0:23:ea:ab:84:76:c5:f5:f6:17:6b:16:e3:1e:ca:be:
         e2:00:e6:c4:1d:dd:28:5c:a5:c9:c5:e7:54:d5:9a:68:51:2f:
         42:a7:3e:4f:36:25:07:68:f2:ae:6b:f5:d5:80:e2:b0:ba:74:
         43:19:06:29:58:20:48:98:35:90:31:0b:bf:74:5e:24:4c:75:
         67:e6:dd:70:05:2e:12:cb:0e:42:59:f9:3b:d6:60:e1:ac:bf:
         35:a3:9b:50:0f:2a:f5:9a:d4:ae:70:87:fa:27:7f:77:5b:1e:
         9f:3b:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----