Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/937d75d0-1012-3527-9538-4986f3145c51.roa
File:                     937d75d0-1012-3527-9538-4986f3145c51.roa (raw, json)
Hash identifier:          MOvUOwP1e1OvMZVj83LlBEqHUP2AG46K4GG1KsBM2N4=
Subject key identifier:   81:87:5F:E0:89:E4:CF:56:35:F1:F7:99:44:FE:2E:93:3D:74:7B:15
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F119CDADF3192E5911599C1E0
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/937d75d0-1012-3527-9538-4986f3145c51.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:da:df:31:92:e5:91:15:99:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1f9b1486-dfe1-4cff-a5fc-7f4049b7ddd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:f1:d8:53:0e:39:83:54:13:7d:98:30:c2:
                    7c:fb:12:a1:c5:55:7b:2e:a0:0e:82:bd:96:9c:5b:
                    22:a9:36:d7:46:bc:85:90:6e:9a:dd:3c:3c:96:c1:
                    26:9d:57:a5:1b:64:64:14:18:36:e5:7a:1a:db:c7:
                    c3:66:c8:73:9a:1c:62:3d:75:c3:4a:de:ac:c7:0f:
                    99:f2:e5:25:0c:10:0b:00:32:47:f9:31:96:8d:b8:
                    ea:ca:23:ec:17:3b:f5:d7:f4:12:6c:bb:4c:44:d3:
                    94:06:04:2f:c9:9f:a8:44:1d:fa:9b:a1:e6:05:6f:
                    49:a7:e1:63:75:38:72:93:74:e0:75:d2:1a:cc:36:
                    d5:e3:44:55:04:81:31:80:d3:13:43:7c:c0:bc:b7:
                    c4:9b:b5:5d:24:69:f0:46:95:04:c8:b6:5f:35:ab:
                    88:69:91:fb:a7:9f:10:91:ea:1c:da:d6:d8:57:8a:
                    5f:50:d3:b0:0b:5e:3f:a3:5f:39:30:43:6c:bf:c3:
                    eb:46:31:6b:b9:b5:29:50:a7:f1:8d:af:59:b5:59:
                    31:f0:7e:93:cd:71:0a:9d:5f:99:78:d1:c5:61:92:
                    6e:3b:72:81:96:b3:a8:8d:a9:b5:6f:9d:f6:42:8d:
                    0c:5b:6d:57:cc:24:92:4a:b7:3f:f5:de:0a:59:1d:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:87:5F:E0:89:E4:CF:56:35:F1:F7:99:44:FE:2E:93:3D:74:7B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/937d75d0-1012-3527-9538-4986f3145c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:bf:e1:67:b7:32:08:6c:41:90:d9:cc:59:17:b3:ef:3e:
         cd:3f:11:bf:e4:4d:38:b6:47:56:fa:e3:87:d4:d8:d4:5e:b4:
         93:50:71:8e:a0:60:ab:f4:97:67:aa:3a:c5:20:52:23:1f:10:
         71:d9:47:e7:0d:3d:7d:d9:1d:22:89:04:10:21:8b:c3:14:a8:
         10:15:ac:86:15:c9:65:20:62:9a:be:f5:a8:a3:4b:ab:12:80:
         33:79:d1:c6:92:a0:fb:7e:a5:12:36:67:47:5c:89:bd:28:97:
         4b:a3:1c:4f:cf:c6:10:78:82:b9:36:46:37:c0:ed:d1:97:a2:
         f2:16:cc:35:81:58:f6:e8:c3:16:d5:10:a0:29:52:ac:79:4a:
         49:1a:68:9b:13:a0:4d:ff:10:87:87:53:4b:fd:a7:4a:7f:74:
         a8:8d:d0:8b:1a:44:0c:07:20:27:74:26:1d:07:4c:9f:21:d0:
         67:22:a4:3d:11:cd:5e:17:c9:dc:2e:18:05:37:25:39:53:fa:
         81:73:cd:27:8f:fa:46:0a:39:a5:b0:fb:78:cc:40:c6:e5:89:
         d7:0a:b2:26:e0:6e:7e:dc:bb:b3:96:57:99:d8:d6:ee:c0:59:
         e1:db:78:1f:a6:ad:68:46:92:39:32:e2:04:c6:73:a0:f4:c2:
         6c:3c:07:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnNrfMZLlkRWZweAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWY5YjE0ODYtZGZlMS00Y2ZmLWE1ZmMtN2Y0MDQ5YjdkZGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUPx2FMOOYNUE32YMMJ8+xKhxVV7LqAOgr2W
nFsiqTbXRryFkG6a3Tw8lsEmnVelG2RkFBg25Xoa28fDZshzmhxiPXXDSt6sxw+Z
8uUlDBALADJH+TGWjbjqyiPsFzv11/QSbLtMRNOUBgQvyZ+oRB36m6HmBW9Jp+Fj
dThyk3TgddIazDbV40RVBIExgNMTQ3zAvLfEm7VdJGnwRpUEyLZfNauIaZH7p58Q
keoc2tbYV4pfUNOwC14/o185MENsv8PrRjFrubUpUKfxja9ZtVkx8H6TzXEKnV+Z
eNHFYZJuO3KBlrOojam1b532Qo0MW21XzCSSSrc/9d4KWR1XqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGHX+CJ5M9WNfH3mUT+LpM9dHsVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvOTM3ZDc1ZDAtMTAxMi0z
NTI3LTk1MzgtNDk4NmYzMTQ1YzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+sEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA71v+FntzIIbEGQ2cxZF7PvPs0/Eb/kTTi2R1b644fU2NRetJNQcY6g
YKv0l2eqOsUgUiMfEHHZR+cNPX3ZHSKJBBAhi8MUqBAVrIYVyWUgYpq+9aijS6sS
gDN50caSoPt+pRI2Z0dcib0ol0ujHE/PxhB4grk2RjfA7dGXovIWzDWBWPbowxbV
EKApUqx5SkkaaJsToE3/EIeHU0v9p0p/dKiN0IsaRAwHICd0Jh0HTJ8h0GcipD0R
zV4XydwuGAU3JTlT+oFzzSeP+kYKOaWw+3jMQMblidcKsibgbn7cu7OWV5nY1u7A
WeHbeB+mrWhGkjky4gTGc6D0wmw8BwI=
-----END CERTIFICATE-----