Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa
File:                     cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa (raw, json)
Hash identifier:          Dr/CtvTwnYRNALqg3EbrTJ8hUTw8Ff1Qts9nDtB8ATA=
Subject key identifier:   26:46:20:E9:69:B7:07:E9:C8:76:FB:B5:B4:34:1E:BF:EF:E1:EB:DF
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF506750013732283DF00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f5:06:75:00:13:73:22:83:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=f9fb115b-9fbd-49cd-8ffc-26fa2dbf19de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:a0:26:cb:35:d3:e5:6e:21:ec:cb:d7:4b:
                    ec:ea:82:61:c1:20:3c:7f:bc:9b:ec:f7:c7:c7:89:
                    76:13:69:42:26:b5:eb:ef:39:32:79:d5:82:6b:7c:
                    fa:21:1d:14:07:26:ad:be:25:92:f1:d7:a6:76:44:
                    dd:67:3b:92:84:4f:09:f6:50:7c:92:f8:d2:69:e0:
                    ee:5a:85:b0:d9:52:d1:5e:8e:8b:ba:a8:82:65:44:
                    95:16:b2:94:b2:5b:00:e6:eb:73:30:f7:8a:72:01:
                    dd:5b:11:3a:aa:52:c0:10:fd:71:c1:79:96:e0:27:
                    82:d7:04:eb:8f:f4:e7:bf:1c:a7:78:3b:c9:7b:f5:
                    92:0a:97:3b:0b:85:d1:87:25:0e:40:3c:87:6e:0d:
                    79:8b:7b:83:b9:0c:68:61:6f:06:58:11:b2:d5:ac:
                    34:d6:e5:c3:cb:d8:1b:a1:eb:b6:54:4a:cd:08:dd:
                    af:3b:ae:0c:e1:13:ce:94:91:2b:23:ae:52:9b:9b:
                    e7:d7:a6:5f:5c:3f:72:8c:c9:44:76:9b:16:2f:c0:
                    65:61:7b:e6:7a:3a:64:cc:0f:d5:2f:dd:7b:b5:88:
                    76:50:15:99:d5:64:7b:19:f8:88:e7:15:a9:a3:6d:
                    03:79:74:b0:47:38:22:a1:9d:5c:cb:44:a3:ef:19:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:46:20:E9:69:B7:07:E9:C8:76:FB:B5:B4:34:1E:BF:EF:E1:EB:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/cf42f2f7-8c7e-33f7-aa97-0c65c5b40b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:14:27:1c:1b:ae:f5:fe:1f:34:a7:ad:ec:97:e5:ac:a9:
         a5:5b:f9:af:eb:1f:bb:41:92:46:d7:22:b9:8e:21:0c:ea:42:
         1d:b9:c2:be:e3:0b:38:90:35:fb:c6:e0:94:c8:84:15:f2:ac:
         ac:99:9a:10:d9:fd:11:3b:84:50:04:93:eb:36:7e:1e:fd:56:
         58:46:bb:14:37:97:2f:95:cb:43:d4:de:74:6f:25:ec:96:64:
         98:86:9e:d7:61:1c:03:38:8d:3f:ea:68:fc:be:bd:66:b8:7e:
         54:5a:48:c8:de:2c:7b:76:9b:91:a8:a3:c6:27:00:d0:d7:da:
         93:82:98:70:1f:13:ea:f9:bf:6d:b8:ca:f5:24:7b:30:fe:06:
         0a:e7:30:e5:6e:53:0a:f2:ea:58:58:0b:2e:b9:6d:e8:a0:11:
         da:67:99:de:c8:66:e6:08:da:c8:77:63:21:34:4f:8f:aa:d6:
         fd:26:5c:bf:d4:fa:bb:55:58:99:15:48:d3:1a:ad:b0:93:fb:
         3f:9a:95:44:12:74:bb:10:be:55:eb:7c:6b:75:35:cd:0a:64:
         3b:e6:20:7e:da:5f:28:1a:5a:c6:01:16:45:1d:40:c6:fb:f5:
         3f:e2:5d:fd:f5:27:cf:96:8d:a3:c3:b3:1c:33:ce:36:38:d0:
         91:e2:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----