Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dd95dad-b959-356b-880b-402223ee861e.roa
File:                     0dd95dad-b959-356b-880b-402223ee861e.roa (raw, json)
Hash identifier:          oSbXuqil+eqeWtqybQTDHI95WtcFqRQC8/I3H3h8Pvs=
Subject key identifier:   EF:60:70:0A:11:64:A2:EE:D6:51:33:DF:BF:36:60:89:37:6D:45:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA61D5B270CC367A748EE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dd95dad-b959-356b-880b-402223ee861e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33489
IP address blocks:        50.194.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:1d:5b:27:0c:c3:67:a7:48:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=6eb3685a-36c6-4d3c-9192-aa8f2c87cff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:9a:2a:89:a1:fb:7c:df:02:87:43:4c:86:
                    0b:f4:01:25:02:7a:39:00:11:4e:6f:31:fb:04:24:
                    10:5f:9d:f8:ed:09:31:56:b8:91:b8:4c:aa:b7:23:
                    74:38:38:84:c9:4f:7e:97:1f:e6:72:8e:54:3f:0d:
                    e6:ac:1c:2c:42:0a:f9:50:fd:f3:f2:42:28:18:1a:
                    c3:fc:73:ea:be:70:d9:27:4c:ed:06:5e:1f:83:a9:
                    e3:f6:18:4a:4b:9a:ae:e5:fd:b2:8d:87:9d:05:cc:
                    11:26:5a:6d:7d:b5:9d:4b:12:9b:91:cb:ce:41:54:
                    75:84:ed:9e:78:43:fe:13:bf:fd:09:01:40:12:62:
                    ba:80:2f:cd:60:ee:a2:d1:1d:7a:c5:28:0d:39:b4:
                    3f:a5:b3:f2:85:f4:52:2e:6a:95:e4:ae:29:57:73:
                    c2:79:ab:70:ed:b5:98:e1:3a:45:ea:7c:56:51:21:
                    cd:d7:70:c0:6a:22:49:75:cc:4f:1f:88:44:67:b4:
                    70:b3:55:df:07:f6:2f:5e:b3:9e:f1:f8:33:48:bb:
                    3a:2d:db:d2:f6:22:53:bf:0e:35:cf:9a:05:55:0a:
                    c1:5b:70:5f:ac:13:56:cd:78:3a:1b:ec:d6:06:0e:
                    c3:82:e8:66:a4:77:b4:ed:ed:ba:1c:66:b1:d7:b3:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:70:0A:11:64:A2:EE:D6:51:33:DF:BF:36:60:89:37:6D:45:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dd95dad-b959-356b-880b-402223ee861e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.194.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:9b:24:a7:8a:38:1a:5e:9e:01:dd:f0:75:ee:a2:64:ac:ef:
         64:39:7c:24:f0:33:47:8b:79:7a:0e:bc:3e:53:f5:ea:33:be:
         d1:2a:ff:ae:89:c4:32:45:d9:2f:97:89:18:95:bd:0d:a8:f2:
         95:92:93:f1:6e:f0:bc:9d:89:75:0c:18:9d:0d:94:6f:4e:9d:
         e1:9d:d4:83:ef:6b:5d:27:27:98:21:3f:bf:76:89:27:95:3c:
         d0:81:40:80:e6:20:74:5e:a0:30:fd:64:50:8e:59:4f:b5:e2:
         bc:40:19:bb:fc:0f:5d:fe:e8:49:f0:c4:31:18:e3:1d:1e:f7:
         1b:dc:79:44:f8:b9:a7:33:70:fa:4c:84:6b:8c:b0:5f:e5:a5:
         a7:f2:a3:59:78:a1:a5:36:46:36:f4:4a:7c:02:97:1f:37:11:
         d6:06:61:bb:85:44:3e:ba:5a:ae:8e:e7:e2:d0:5c:6d:55:ff:
         c5:cc:41:4a:15:42:82:fc:40:0f:93:47:f4:fb:a2:24:5d:d9:
         06:28:d8:43:95:03:ce:51:8f:b4:45:98:1e:d4:31:7d:34:ec:
         40:c9:76:23:22:4f:36:c8:a9:3a:60:d0:67:3a:58:43:b5:8a:
         e4:99:83:da:de:7e:e2:9f:5f:40:b8:7a:42:fc:0e:58:e5:99:
         64:f0:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----