Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/c1f9d5e9-7c43-3176-8746-7d0390d0c4bb.roa
File:                     c1f9d5e9-7c43-3176-8746-7d0390d0c4bb.roa (raw, json)
Hash identifier:          G5DevPVX1smtw28vboW2rueg1P6cnWe50Z7RZg9DWBk=
Subject key identifier:   4A:81:4A:73:86:3C:CF:1B:75:2A:CA:7F:71:3F:D9:B8:ED:8A:0A:3B
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F1037A7D80B2CDDB10E759151
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/c1f9d5e9-7c43-3176-8746-7d0390d0c4bb.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        199.235.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a7:d8:0b:2c:dd:b1:0e:75:91:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=f277af4d-492d-4947-af98-4bc7f7405c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:ec:02:01:a8:28:8a:37:d2:db:74:7d:c8:
                    e7:a5:44:f7:3d:a5:78:cb:09:51:7e:a7:f6:70:a9:
                    10:5e:6b:e8:b8:5b:b3:c9:80:cd:03:e3:56:5a:e9:
                    95:e7:e4:0f:b4:c5:3b:e6:cc:70:87:64:13:f6:f2:
                    eb:d1:7f:98:4e:b3:bc:3d:99:e7:bb:fb:22:58:b8:
                    9b:70:38:e1:05:82:3b:2e:9d:29:b4:2d:8d:8e:72:
                    a0:16:a3:ef:e0:b1:83:24:ce:78:97:aa:2f:28:bd:
                    2d:69:ef:8d:98:1a:03:21:43:84:a8:88:f8:b4:31:
                    75:8b:a1:61:00:ef:32:62:02:97:32:ec:70:78:c9:
                    bf:d4:11:6d:b5:47:5c:1b:54:67:a8:b7:e4:75:2e:
                    0a:42:67:a8:a1:7b:ca:fd:0a:21:7e:71:e6:42:e4:
                    e1:6d:e1:9c:a1:1d:34:3a:97:3f:84:5f:fb:65:c2:
                    74:c3:1f:f1:56:0c:07:e4:1c:95:04:6c:27:ef:dc:
                    f7:39:a4:a0:ff:03:db:57:78:b0:c0:e2:dd:bc:41:
                    14:87:49:20:66:f6:ba:1b:f3:25:55:f6:f0:6d:0a:
                    dd:bc:68:22:f8:ee:9f:93:a8:3b:a4:bc:06:b3:35:
                    0a:4e:78:c6:76:ad:58:20:07:57:c2:90:04:5c:97:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:81:4A:73:86:3C:CF:1B:75:2A:CA:7F:71:3F:D9:B8:ED:8A:0A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/c1f9d5e9-7c43-3176-8746-7d0390d0c4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:2d:8b:06:b1:d5:53:02:2a:98:d6:81:a1:39:ff:52:ce:
         a9:51:28:9c:f6:97:8c:01:16:65:e2:13:ab:e9:46:e8:f3:1f:
         f5:74:4a:d4:94:6d:a0:66:1b:78:fa:e9:2d:2f:3a:d0:fe:48:
         7c:30:0e:0e:16:d0:c8:2f:77:0a:d9:fe:e2:36:c3:bb:83:62:
         49:88:94:ee:57:23:2b:f5:ec:50:57:54:de:2a:3c:11:db:4b:
         98:2b:bf:41:2f:d0:5b:67:03:27:3b:af:3c:fd:ee:86:98:ba:
         f9:71:6a:55:bf:88:54:ae:bb:20:ae:07:6d:dd:10:1d:63:57:
         4c:3b:f4:6f:07:cd:2a:b0:42:9b:ae:39:a7:1c:be:dd:7a:11:
         7a:52:9a:3a:6f:30:22:f8:74:6a:b6:15:55:40:97:c4:36:b6:
         6f:29:03:11:64:df:43:55:a5:92:90:b0:cc:06:52:35:e0:8f:
         85:89:1c:01:72:2b:95:a4:51:c8:27:4d:4d:a0:81:83:06:87:
         3f:9f:82:80:65:54:f3:83:63:ea:8d:b5:de:1b:0c:98:11:20:
         b9:7f:81:29:0a:f8:e0:de:73:8b:31:03:84:b0:82:43:e3:ff:
         4d:bb:0a:a5:b0:c0:b5:91:44:3f:03:bf:d0:d0:6c:08:03:4e:
         7b:11:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----