Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/f59bafb8-a42c-3f18-97f8-110b406d5631.roa
File:                     f59bafb8-a42c-3f18-97f8-110b406d5631.roa (raw, json)
Hash identifier:          5SdfSgdgDzxDGaHlCwnKuwliL54Ki2Hg3XGTb+Y72+w=
Subject key identifier:   03:56:A0:16:75:08:37:1B:80:71:80:19:4D:93:19:A7:CB:35:13:B4
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F1037A8C9D2BFDEFDCA3930D0
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/f59bafb8-a42c-3f18-97f8-110b406d5631.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        199.235.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a8:c9:d2:bf:de:fd:ca:39:30:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=76db9e95-c22d-4089-b011-d115014c63c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:0d:1f:95:7e:8d:5c:e9:aa:96:c7:29:ae:
                    87:9b:be:6e:1d:a4:c8:dd:2d:71:de:85:31:8e:cd:
                    b0:94:a7:cc:38:5c:12:36:15:f4:69:fd:15:2b:0f:
                    53:dc:8a:35:24:04:02:32:d5:94:30:78:30:26:af:
                    58:83:11:18:7b:16:cb:73:bb:7c:9e:c4:82:a2:4c:
                    64:f2:fe:6e:0f:cd:5c:eb:1e:f4:55:0b:a7:9a:1e:
                    66:ba:6a:6f:12:8e:66:5e:f7:eb:46:f5:a4:f8:e4:
                    d5:eb:a1:5f:a5:2a:81:c2:6c:93:2b:cd:b3:18:6b:
                    b3:0e:72:2e:22:68:bb:25:69:d6:2e:55:d1:99:88:
                    a4:d8:c9:cd:f4:3f:c2:25:71:e0:5f:b9:91:87:84:
                    e2:73:4b:23:14:e0:71:ef:a7:f8:d7:89:e7:39:b7:
                    6a:b6:88:2e:40:51:a9:6a:91:49:55:69:f3:a5:e5:
                    34:52:0d:e2:99:c7:a6:d9:d8:bc:6b:8d:66:c1:eb:
                    7a:0e:ee:37:0a:64:4c:a4:d3:22:de:a9:c2:e4:0d:
                    aa:05:4c:16:26:c9:ec:a0:d4:13:c7:de:71:28:45:
                    81:5d:12:a2:d9:30:a1:c0:e5:50:d5:3d:9b:5b:7a:
                    0f:62:31:13:72:8f:db:f0:23:f7:9d:e5:31:81:ad:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:56:A0:16:75:08:37:1B:80:71:80:19:4D:93:19:A7:CB:35:13:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/f59bafb8-a42c-3f18-97f8-110b406d5631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:3a:8e:48:a9:73:e6:2c:09:69:2c:6a:74:da:9a:8e:2b:
         52:2a:52:39:c5:f7:02:88:36:5d:e9:91:c3:4f:52:20:87:9d:
         77:57:f0:38:52:74:68:d1:61:7f:de:15:55:10:3a:37:8a:4a:
         3e:f4:30:a3:c1:68:7b:ef:a5:83:9f:96:fa:c1:83:86:33:90:
         fb:61:21:44:5a:3a:11:26:af:08:48:ce:08:d3:65:82:90:13:
         5e:e8:a6:4c:d6:95:a9:e6:bd:38:d1:49:d8:f4:39:44:bb:d8:
         3c:69:7b:f8:c1:f2:e4:9e:1f:3e:b9:30:34:9e:5e:35:4b:f4:
         8d:3f:51:9b:b4:97:82:dd:72:cf:73:f3:f4:bc:c3:91:dd:82:
         34:db:3c:54:50:7c:e0:ec:6a:06:fe:99:46:d5:44:b2:bb:c1:
         d8:aa:8a:62:46:45:2e:53:65:3e:63:92:5b:61:14:92:c4:a7:
         7a:75:60:ea:0c:ee:4b:a8:2f:df:92:14:d1:f0:81:f8:44:b4:
         28:53:6d:07:96:de:37:3d:8f:8f:0f:06:32:80:77:3b:69:db:
         21:32:54:23:73:9e:d8:b8:c2:28:2e:3e:35:a6:3b:d3:c1:34:
         47:fb:a9:ab:0e:43:5d:da:05:e4:d9:1c:6c:0a:23:65:8c:93:
         58:3d:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----