Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48065d50-08d4-36f4-aff2-7d8465d91bfa.roa
File:                     48065d50-08d4-36f4-aff2-7d8465d91bfa.roa (raw, json)
Hash identifier:          FGrum7oYBPJ6XDnBI7gn/8yftvri9WvXBKCK7PYWo3g=
Subject key identifier:   24:DC:C3:AE:E4:B2:B3:49:3D:CC:FB:2A:5A:7C:8F:CD:C7:92:37:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA501895EAD7D3B6E56EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48065d50-08d4-36f4-aff2-7d8465d91bfa.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33667
IP address blocks:        50.234.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:01:89:5e:ad:7d:3b:6e:56:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=8bd189fe-a62b-4cb4-9b16-e1129da0a04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:0d:e5:0b:73:ad:74:e3:6e:4c:36:da:8b:
                    d6:ce:ed:05:76:81:0d:61:dc:4b:07:82:2a:76:8f:
                    ea:67:25:51:4a:cd:2a:d8:9a:f9:36:4c:fe:4b:a2:
                    bb:cc:01:f3:41:26:f9:ac:d3:74:b3:a9:78:fa:54:
                    3f:13:22:51:84:18:bd:43:77:3d:94:df:bb:45:b8:
                    6a:f2:4c:3a:01:6c:72:0f:ad:b6:c7:b0:fc:e0:88:
                    91:df:e7:9e:f0:bb:0b:bc:d8:c5:94:72:89:bd:ba:
                    3d:fa:95:52:72:68:7a:72:8b:dd:d0:31:9a:a5:63:
                    87:8b:57:e8:7d:e0:24:40:74:5a:38:58:1c:37:d8:
                    cb:62:8c:e5:69:f2:ba:64:45:64:7a:01:38:ee:3e:
                    2e:1b:b6:e2:37:ab:c4:ae:c6:c6:ff:26:34:c7:ca:
                    7c:14:28:fe:cf:06:72:eb:52:0a:31:47:1b:f1:c5:
                    36:33:89:41:05:58:b4:db:4c:e2:64:29:c7:f7:ff:
                    55:3b:95:28:e4:c5:1a:a7:ae:9a:33:62:8b:54:3f:
                    2a:7b:4d:d5:b1:cb:f5:fe:91:48:87:9c:e6:e2:0c:
                    0b:c6:2c:2c:e2:35:c5:a0:c3:f4:f4:27:2f:f4:3f:
                    b2:6c:ff:56:72:72:d4:d8:d1:fb:a0:84:2a:bf:8a:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:C3:AE:E4:B2:B3:49:3D:CC:FB:2A:5A:7C:8F:CD:C7:92:37:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48065d50-08d4-36f4-aff2-7d8465d91bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.234.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:25:23:1d:f6:6b:45:d5:b5:85:07:bb:18:2e:4d:5d:3a:d5:
         ab:35:c2:77:0a:25:93:68:2a:15:a7:8c:e0:73:9e:64:01:51:
         4e:ea:93:1a:0e:af:d9:81:95:ba:75:f8:92:34:bc:6b:a2:27:
         17:ac:f2:2f:56:3a:0d:b0:ea:8b:a8:b9:09:d0:c8:49:ac:9a:
         f0:39:62:8e:23:dc:e8:28:73:af:53:4a:02:5a:92:c2:eb:b4:
         c9:fb:76:0d:fa:26:05:8a:e9:2d:e9:a1:f0:8a:1d:6a:b6:08:
         93:c5:32:22:d8:d6:a9:34:75:e6:c7:32:9b:14:1a:97:44:3c:
         99:d1:d6:b2:b9:4d:58:16:0e:de:65:92:82:89:04:48:37:05:
         75:51:c7:a7:29:1b:d8:1d:a7:6e:c3:e7:d9:ea:16:70:11:9e:
         6f:54:41:e9:d9:5b:11:24:e6:7c:c3:fd:e9:1d:0b:54:c3:c3:
         37:2b:80:11:35:e7:79:3a:0a:b8:3a:a1:54:d4:6a:27:81:b9:
         e5:7d:66:a0:f0:56:82:87:5e:b0:4c:6a:a1:5d:9b:32:10:9f:
         46:98:88:88:b2:52:54:2c:ed:cf:80:fd:69:f6:e0:8b:cf:97:
         43:87:c9:d1:36:5f:19:e5:10:c6:5a:e7:6b:9f:35:fc:c2:d2:
         6d:75:07:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pQGJXq19O25W7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OGJkMTg5ZmUtYTYyYi00Y2I0LTliMTYtZTExMjlkYTBhMDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MN5QtzrXTjbkw22ovWzu0FdoENYdxLB4Iq
do/qZyVRSs0q2Jr5Nkz+S6K7zAHzQSb5rNN0s6l4+lQ/EyJRhBi9Q3c9lN+7Rbhq
8kw6AWxyD622x7D84IiR3+ee8LsLvNjFlHKJvbo9+pVScmh6covd0DGapWOHi1fo
feAkQHRaOFgcN9jLYozlafK6ZEVkegE47j4uG7biN6vErsbG/yY0x8p8FCj+zwZy
61IKMUcb8cU2M4lBBVi020ziZCnH9/9VO5Uo5MUap66aM2KLVD8qe03Vscv1/pFI
h5zm4gwLxiws4jXFoMP09Ccv9D+ybP9WcnLU2NH7oIQqv4rkXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTcw67ksrNJPcz7Klp8j83HkjdiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDgwNjVkNTAtMDhkNC0z
NmY0LWFmZjItN2Q4NDY1ZDkxYmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4lIx32a0XVtYUHuxguTV061as1wncKJZNoKhWnjOBznmQBUU7qkxoO
r9mBlbp1+JI0vGuiJxes8i9WOg2w6ououQnQyEmsmvA5Yo4j3Ogoc69TSgJaksLr
tMn7dg36JgWK6S3pofCKHWq2CJPFMiLY1qk0debHMpsUGpdEPJnR1rK5TVgWDt5l
koKJBEg3BXVRx6cpG9gdp27D59nqFnARnm9UQenZWxEk5nzD/ekdC1TDwzcrgBE1
53k6Crg6oVTUaieBueV9ZqDwVoKHXrBMaqFdmzIQn0aYiIiyUlQs7c+A/Wn24IvP
l0OHydE2XxnlEMZa52ufNfzC0m11B/c=
-----END CERTIFICATE-----