Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/82f1527e-1831-346e-8c1b-d3bb65080cf0.roa
File:                     82f1527e-1831-346e-8c1b-d3bb65080cf0.roa (raw, json)
Hash identifier:          4ujaBv9MmTuW0VX3YEL5WFJeXuwRjd04AmKSZOw/8ng=
Subject key identifier:   B0:36:1C:55:50:56:73:7F:80:4A:80:3D:89:83:E6:BD:F9:53:B2:47
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F331D0C32F22F54719333AD00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/82f1527e-1831-346e-8c1b-d3bb65080cf0.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     834
IP address blocks:        199.235.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:0c:32:f2:2f:54:71:93:33:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=b7287766-2ae2-4373-9be9-96e1fb22d98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:e7:0c:f6:b7:2c:17:32:47:26:8e:44:cf:
                    7e:7a:53:8f:4a:64:18:ac:25:b8:c1:af:82:fa:31:
                    fa:de:dd:10:d6:07:9a:79:91:da:b1:ca:0d:4d:af:
                    e6:24:f2:32:18:59:2a:fc:6a:0e:42:35:76:cb:08:
                    17:31:68:f9:ca:b8:6e:dc:ea:78:95:42:27:87:d2:
                    d5:4b:d5:e3:e8:d1:e7:c0:c9:9d:60:62:db:5d:d0:
                    8a:41:44:a3:9d:a1:09:b6:cc:61:56:eb:56:24:70:
                    f5:32:b5:53:11:69:0c:18:bc:36:3f:72:45:16:44:
                    65:c0:d9:b0:fd:32:dd:f8:53:93:f1:92:c2:5b:0f:
                    63:25:d3:1d:84:43:7d:0a:b4:72:7e:bc:e0:81:82:
                    93:77:1c:fc:85:74:1d:ec:7f:dd:4a:f0:63:a1:eb:
                    21:21:1f:78:b9:bd:ae:33:10:b2:a2:51:76:66:30:
                    a2:a4:a0:fa:6b:36:06:be:0a:27:00:89:d3:1c:f1:
                    8b:1d:73:2b:80:90:4d:7a:ef:b6:27:56:5b:9f:28:
                    b8:59:a2:9e:a5:20:9d:e5:dd:9d:45:b1:86:91:f5:
                    85:87:bc:2a:8b:61:7d:44:b5:9b:55:c5:1e:23:77:
                    52:94:e6:ed:07:15:fb:ff:22:b7:d1:54:ca:b6:83:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:1C:55:50:56:73:7F:80:4A:80:3D:89:83:E6:BD:F9:53:B2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/82f1527e-1831-346e-8c1b-d3bb65080cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:d5:a0:a5:b7:41:0b:52:ea:e5:97:c4:2d:4c:1d:e0:ef:
         34:99:1f:72:97:3c:5e:f6:3b:96:63:be:a9:8b:8c:2f:bf:90:
         61:a7:c3:cf:27:11:45:bd:f4:e2:f8:d7:19:c3:84:45:b9:4b:
         ad:32:41:48:bc:a8:66:a7:6c:29:cd:3c:1e:71:ab:3b:a7:bb:
         5d:e9:97:be:e7:26:6d:10:c3:84:6b:75:48:40:ab:64:93:cc:
         d9:41:da:00:4a:8d:94:52:ff:8c:80:4a:a8:e7:14:15:f8:f2:
         94:a2:71:24:3a:30:14:4c:a8:2c:b7:10:4e:4b:eb:97:d6:7b:
         02:b6:83:61:58:c5:d3:5b:6e:3b:2d:a6:b9:d9:25:c1:ee:d0:
         ef:2e:df:fc:74:b1:54:31:e4:ff:d9:55:5c:62:1b:9e:57:ce:
         db:87:1f:6c:58:c2:24:4b:25:d3:39:fd:25:07:50:b5:f3:ae:
         28:4a:37:cd:8d:a7:e0:7f:5f:33:47:4a:29:bb:b6:9e:c1:fc:
         4d:d0:d8:ff:52:fc:b8:86:b6:80:87:35:20:db:bc:51:98:81:
         88:7c:93:a4:1c:74:b6:f3:e1:8c:3b:6c:3c:96:cd:87:d3:70:
         48:d8:b7:5a:3b:65:6c:d4:59:45:39:4c:5b:6d:d5:d0:ea:34:
         ad:b0:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----