Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a6f9f81e-4d2b-3b83-b0e6-57127229eb3d.roa
File:                     a6f9f81e-4d2b-3b83-b0e6-57127229eb3d.roa (raw, json)
Hash identifier:          N26rCftQqgyUfnxeu7B1LI4MDXvLeM/XlTrCWcsNd8E=
Subject key identifier:   0A:67:F3:5C:8B:B1:D4:2F:5A:A3:E6:A2:41:64:60:BC:EA:A6:64:B5
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F119CDA04348DA05B66501380
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a6f9f81e-4d2b-3b83-b0e6-57127229eb3d.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:da:04:34:8d:a0:5b:66:50:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=e438dd75-430c-435c-b264-9d5a9cecac54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:66:71:b9:89:49:a9:03:5b:fe:d8:b6:e3:
                    16:eb:22:4c:71:32:03:bd:c9:dc:76:cb:12:02:c6:
                    eb:69:d1:53:f3:8e:fe:f3:ed:09:19:6f:d7:b9:40:
                    06:6c:f0:7a:07:ce:08:60:6e:56:72:6c:7b:a2:2f:
                    1f:c5:bb:b5:31:06:0b:03:a2:98:28:58:25:82:75:
                    40:38:86:3a:36:23:5a:eb:a7:d8:fa:cd:79:36:68:
                    fe:16:13:43:b0:a8:22:bc:28:a5:79:77:3d:05:cf:
                    83:07:4e:2a:4e:ec:fa:3a:13:9d:a0:5f:d7:db:47:
                    50:16:b6:0c:0e:b6:e4:c6:7b:f2:23:68:82:a5:ce:
                    78:4d:b2:52:c3:ce:6b:43:53:c0:ed:4b:6e:92:6b:
                    0a:1c:f8:bb:af:35:46:55:07:5d:fe:ee:04:55:47:
                    68:49:4b:0a:49:10:1e:7b:f7:af:e5:96:b6:64:3c:
                    8f:fe:68:d8:ff:c1:8a:23:0d:57:42:51:62:ce:34:
                    47:82:59:d2:ac:33:2b:08:89:cf:9f:5d:70:b2:38:
                    be:2c:b3:bb:6e:44:87:79:b7:76:8f:67:4b:dd:a2:
                    05:54:17:8e:fd:79:3e:4d:ca:9b:f6:80:5e:f7:ff:
                    32:54:06:57:c7:0a:23:12:71:00:6c:7c:95:45:20:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:F3:5C:8B:B1:D4:2F:5A:A3:E6:A2:41:64:60:BC:EA:A6:64:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/a6f9f81e-4d2b-3b83-b0e6-57127229eb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:18:49:71:4a:c3:40:e7:46:a8:c8:13:77:ea:af:63:17:85:
         24:af:9b:52:62:1d:cc:e4:9f:fb:d2:cc:fa:3c:6e:07:fa:e8:
         04:85:e8:1b:bd:34:f0:ca:45:71:3c:e0:0f:b3:57:9d:c0:ee:
         71:70:0a:c6:fc:1a:2f:8b:d0:d4:21:1e:39:7d:de:4b:92:f6:
         da:a7:61:c2:33:8a:5b:62:a0:d9:ad:2e:45:52:ee:e6:a1:01:
         85:ae:9f:b4:6b:6f:46:9c:e0:d7:bb:83:4a:df:f1:c3:29:c3:
         df:65:61:0c:a9:2b:c1:ff:94:ed:9a:fd:df:fc:8c:20:05:4c:
         db:d2:72:da:fc:bf:23:6e:c6:3b:0b:40:29:2d:70:87:b0:01:
         03:84:f7:be:9b:10:09:06:73:df:10:4e:29:f2:1f:3a:f8:94:
         02:94:98:46:17:d8:a0:04:2e:64:a6:fc:a9:37:63:1a:65:d5:
         53:3c:ce:9c:50:15:62:b9:33:f6:91:c9:61:ec:03:41:05:22:
         1c:03:ac:66:1e:91:cf:d5:c1:cb:7f:1e:20:6e:47:1e:70:12:
         2b:91:f4:19:cb:22:d7:a4:b2:3e:1b:af:c4:d5:39:51:77:77:
         f7:a9:37:c6:84:6f:20:54:88:bd:86:ec:97:1f:80:02:1d:96:
         0d:47:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----