Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa
File:                     8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa (raw, json)
Hash identifier:          DEi4qriBJOxKVhY1qlXmz40qR3IL3uGQtah6C5Fdr9Q=
Subject key identifier:   C8:A8:E3:BD:4A:0C:E0:A5:2B:EC:95:C3:FD:AB:6C:C2:6C:EE:9A:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA62CDBE3CE003BB613A700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        50.223.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:2c:db:e3:ce:00:3b:b6:13:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=ceac92d6-c10f-40b2-9a8b-be5b3578dd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:ac:46:85:5f:70:a3:39:68:94:56:fd:c8:
                    2a:1a:d0:4c:a4:00:72:4e:e4:96:3e:03:c1:e4:e5:
                    49:b1:40:55:66:84:41:b5:aa:aa:3f:c4:11:79:a4:
                    99:d1:55:ab:7f:05:17:2e:0b:3c:d1:dc:19:b9:33:
                    92:e3:dd:e5:36:16:2d:00:07:df:21:fb:90:9d:8d:
                    17:6f:11:c6:ea:de:d2:c8:fa:61:59:9b:1c:65:95:
                    78:aa:4a:fa:c7:a8:2b:02:da:67:fd:6d:d7:be:04:
                    0d:4f:c6:44:dc:f6:18:cc:07:2e:a5:a2:55:f3:ca:
                    31:fc:f6:2e:60:72:39:b1:5f:db:3b:1a:45:fd:ce:
                    8d:eb:ae:01:4a:bd:1d:ef:1d:99:07:8b:a4:c1:a2:
                    71:49:36:42:d5:f7:c4:bd:3d:e9:d5:98:70:1c:94:
                    d8:87:0e:68:0d:ee:97:4a:89:25:79:a3:56:74:10:
                    99:74:f5:3e:da:51:41:02:aa:49:8e:f1:3d:03:8a:
                    d3:2d:43:c8:25:15:a8:5e:93:e3:b3:50:75:ef:7e:
                    b2:90:0a:a3:a8:54:12:ff:f7:f0:3a:fc:0d:86:05:
                    3a:6e:dd:0f:8a:9f:8f:c0:f5:2d:a7:b5:f4:65:db:
                    63:c2:36:d0:bd:2d:45:15:e0:61:24:b4:e5:ee:84:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:E3:BD:4A:0C:E0:A5:2B:EC:95:C3:FD:AB:6C:C2:6C:EE:9A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c8967-0a2b-3073-ab99-07d2d6d9a6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.223.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:15:ed:ea:98:cc:e2:a7:0a:d8:c8:cb:48:67:fd:43:b5:
         8e:65:64:fc:f9:3e:39:6b:62:6f:b0:6b:7c:96:8c:04:34:09:
         bb:a6:7d:b6:d0:08:f2:64:0e:fb:3b:4c:3f:c0:52:40:90:f0:
         22:df:aa:72:72:7a:20:c4:ef:01:47:7c:83:fc:d7:d4:c2:af:
         18:8d:d4:54:f6:d2:a3:e2:6a:ff:f2:65:4f:a0:1e:10:7c:bb:
         d0:0b:e1:8a:b9:0f:f4:73:b3:94:86:fc:3b:7b:07:1e:d2:2f:
         b6:6e:26:fc:5d:2d:36:10:ff:40:0c:a0:57:a8:3d:27:3f:1b:
         5e:a8:55:c6:cd:99:bd:6a:81:1c:96:3f:51:03:55:5f:15:10:
         77:c0:7c:5a:59:32:3c:6a:17:49:6a:04:97:03:b0:79:70:fc:
         18:5f:dc:ad:e9:30:b2:88:44:a8:5f:27:9c:24:cd:93:e9:24:
         cc:37:5f:e6:f2:3a:3d:84:4a:c1:35:af:39:c1:e3:9c:fc:c0:
         c6:1f:12:1b:b2:45:3d:44:c4:72:26:87:85:37:fa:85:53:0b:
         41:18:8e:64:0e:77:98:b7:37:6f:8c:63:aa:c8:9d:ad:c6:f4:
         be:74:66:5d:87:da:46:2f:fc:45:f0:7d:ef:0f:0b:60:f3:8a:
         b0:e7:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:55:47 2025 by rpki-client on console.sobornost.net