Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d8490547-03a3-3138-80dc-7797f756fcc7.roa
File:                     d8490547-03a3-3138-80dc-7797f756fcc7.roa (raw, json)
Hash identifier:          a5E2sCciag2I5DzxZsmvauvo4ymhzlLRlrSJJQhPHQU=
Subject key identifier:   FF:55:48:06:7B:D1:8B:85:BE:E1:7F:76:F0:B4:F4:DC:B3:BC:09:61
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F119CDA49988C256ECC6A6F00
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d8490547-03a3-3138-80dc-7797f756fcc7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:da:49:98:8c:25:6e:cc:6a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=16a9c961-fd3b-40c4-83db-ea9c47517de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8f:62:e5:ae:d4:d2:99:65:2c:d6:96:2a:fa:
                    dc:74:d8:36:6c:a1:d7:f6:75:44:68:a1:8a:38:94:
                    c1:56:b4:84:0a:11:32:19:a8:34:10:2b:71:99:00:
                    03:27:51:fb:de:4c:62:9d:19:f1:5c:89:28:e5:96:
                    df:7b:fd:b5:92:08:22:40:a6:f9:f2:f9:e3:5b:36:
                    44:0a:a4:13:dc:51:dc:2a:f0:4a:66:c9:03:d2:02:
                    8c:df:2b:86:a0:f1:f1:76:d1:ab:4f:c4:00:ea:d6:
                    cb:95:b2:f0:a0:1f:21:01:57:97:c9:46:36:c7:82:
                    c0:2f:27:6d:1d:31:19:3d:30:ff:52:04:27:94:27:
                    3a:9d:64:fd:3e:44:72:bc:1c:27:fb:1a:09:31:ed:
                    94:29:fa:ca:b0:0a:7f:c1:03:0e:a7:f9:e0:1c:ad:
                    26:43:e2:36:2b:68:a3:d5:f2:36:4a:c5:5f:df:15:
                    fa:0c:59:bb:fd:3e:6f:f3:87:35:15:1c:3a:c8:4a:
                    d4:4b:81:5b:17:c4:10:c6:cf:a9:79:89:7c:fc:f9:
                    1a:c9:e9:e9:4d:46:a6:10:a6:5c:af:d5:9a:e3:a0:
                    94:e9:69:40:56:85:4f:6b:e5:8d:b9:ff:d6:5d:61:
                    41:1a:ec:30:02:10:b3:5d:26:4b:65:b9:a3:05:5f:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:48:06:7B:D1:8B:85:BE:E1:7F:76:F0:B4:F4:DC:B3:BC:09:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d8490547-03a3-3138-80dc-7797f756fcc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:b4:aa:2a:44:b1:16:94:e9:0f:a2:1f:f1:f7:05:57:dc:
         23:7d:c4:23:a1:00:50:bb:f7:95:bc:25:9a:0c:6f:3b:2d:27:
         97:e6:e2:60:ce:a0:bd:51:34:29:ae:5b:dd:13:a5:c7:dc:a3:
         fd:8d:6f:a8:f6:86:f7:ca:bc:57:d8:be:05:b8:18:23:50:0f:
         e9:99:78:23:9f:22:9e:77:04:e3:88:66:c7:b4:d1:f1:d2:57:
         1b:5c:41:79:66:59:3f:d1:b3:0b:f8:03:24:e8:98:ae:89:a8:
         04:38:24:a2:30:d6:56:c0:04:1c:89:9f:7a:8e:57:98:5e:be:
         76:d6:12:69:06:93:8c:15:51:58:24:76:a2:ba:56:7d:f6:71:
         28:4c:f0:e2:03:a8:5f:51:93:67:4e:57:f1:9f:b8:b1:00:f6:
         57:21:7e:76:8b:c9:d1:8e:78:50:09:36:f7:70:75:19:c3:05:
         cc:67:55:11:94:8c:0d:2e:d7:4e:eb:dd:88:a3:a3:e9:c0:4e:
         79:fa:5a:05:57:b7:36:1d:ef:6a:11:0c:7f:a1:df:da:9a:42:
         17:82:b1:5d:cb:1c:7e:f1:be:58:c9:74:4c:f4:76:c8:e5:78:
         22:81:8d:2f:d3:36:b0:db:05:37:cb:e8:81:fc:84:61:79:36:
         19:ba:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----