Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/e2912e69-4648-3185-b2b2-62d9516dbebe.roa
File:                     e2912e69-4648-3185-b2b2-62d9516dbebe.roa (raw, json)
Hash identifier:          6i7fhy2nhUKbduPP1qRI01yHFL6YihnenGxfVfywPyI=
Subject key identifier:   70:E5:E3:42:8B:B5:4F:08:7A:5A:BE:E8:90:50:58:1F:49:AD:30:F5
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F331D0C5859A0CECF6F605350
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/e2912e69-4648-3185-b2b2-62d9516dbebe.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     834
IP address blocks:        199.235.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:0c:58:59:a0:ce:cf:6f:60:53:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=09a48891-d77d-4fe4-8981-363f9018024e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:a2:cd:aa:e8:ed:22:da:2e:f0:90:38:6c:
                    c7:3f:e2:70:b7:aa:0a:ea:c4:7f:17:1b:2a:1c:3e:
                    5a:1a:0c:6e:6a:dc:11:63:c0:af:24:58:bc:46:1d:
                    8c:ba:06:1a:72:01:93:ef:4b:5c:ea:f7:0d:a9:03:
                    a3:ba:b2:1e:a1:29:47:73:5c:c9:7a:91:93:cf:da:
                    20:01:23:13:06:34:b0:5f:a0:85:c0:19:58:11:6e:
                    49:41:11:9f:28:ce:62:bd:5e:01:20:60:9c:4f:cb:
                    b2:3e:63:c4:f3:f1:be:45:14:c8:d3:d2:ce:19:95:
                    11:be:e4:ba:2e:1d:7d:b0:b8:3f:f4:3d:52:93:2a:
                    68:d7:90:58:fe:bf:a4:6c:27:32:f8:7f:05:a1:92:
                    db:93:3a:4f:8f:fd:9e:b8:1f:ef:65:c5:18:5a:46:
                    92:e3:9e:85:fb:41:43:98:6e:6e:32:02:1d:c9:50:
                    22:2e:9d:d9:a5:c5:e2:52:ac:c6:86:38:8f:92:c7:
                    f2:88:68:e3:7c:c3:57:98:b0:6d:38:1e:aa:68:b0:
                    c5:c0:2b:88:ea:df:d4:4d:da:48:1f:37:49:02:aa:
                    8a:44:cb:ae:67:8c:d8:5d:dd:1e:3f:00:05:0d:2d:
                    67:de:3e:87:03:11:56:84:ae:9d:bf:2b:ac:10:82:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E5:E3:42:8B:B5:4F:08:7A:5A:BE:E8:90:50:58:1F:49:AD:30:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/e2912e69-4648-3185-b2b2-62d9516dbebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:42:66:82:b6:85:73:b3:3c:fa:41:be:aa:5a:e9:c9:fb:
         2d:8c:e3:7f:6a:8d:d3:e0:a7:a6:76:14:c3:3e:2b:1e:7f:6f:
         4e:be:c4:3f:df:a1:74:56:1d:4d:2a:9f:58:b7:15:b5:f1:b7:
         36:88:d0:13:c7:12:ef:7c:2d:12:73:7c:da:41:84:21:35:c1:
         0f:34:6c:d4:56:4b:58:f5:1b:1c:b3:df:cd:4d:b0:2e:97:98:
         6e:ac:2f:35:33:ff:a2:6c:4e:09:84:51:77:9c:6f:7d:eb:7c:
         eb:53:4f:27:2e:6f:f3:fd:b7:f8:e1:85:bf:7d:87:c7:d9:21:
         9c:44:80:2c:af:2b:ae:6b:77:c3:42:de:d6:ca:05:8c:07:20:
         5e:9f:9b:a4:f8:eb:14:5d:83:6e:9f:45:6a:87:fe:2a:0c:c4:
         79:30:c5:4e:97:e2:a9:a8:ff:9c:b0:41:d1:98:ec:44:a2:9d:
         51:25:5f:ac:ce:b9:88:64:42:69:08:34:97:3d:25:e9:2f:f2:
         bb:19:3e:19:7e:3c:9e:24:6a:af:85:21:d9:c6:cd:89:5e:48:
         19:34:bd:a8:b1:b1:4f:8e:4f:ab:fd:a6:04:bc:55:14:9f:43:
         fa:e9:1c:82:69:2f:bb:2b:11:3b:23:69:fe:79:46:e2:42:c9:
         32:9c:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----