Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/913c986c-f8de-33b9-823e-0c9082484843.roa
File:                     913c986c-f8de-33b9-823e-0c9082484843.roa (raw, json)
Hash identifier:          LbKI2pwhRdxnaiDWAnZcNdhy8cZsdYHq+m/OUn8uou8=
Subject key identifier:   4D:53:D1:46:C0:07:68:63:1A:88:32:A2:B4:A4:95:E9:DC:1D:C5:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA607FC3E8038EDBD0DEB50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/913c986c-f8de-33b9-823e-0c9082484843.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7725
IP address blocks:        50.254.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:07:fc:3e:80:38:ed:bd:0d:eb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=15a34a5f-25ae-41ed-97cd-8fdadd8ca16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:ca:a4:61:3c:b8:58:c6:56:9a:e8:4f:ac:
                    38:39:5a:86:fd:b1:dc:ca:0c:24:91:33:ed:3b:14:
                    ba:09:c4:07:0b:9f:e5:3b:6b:6b:37:70:26:cb:64:
                    00:05:c9:b3:e0:c9:eb:03:2f:c2:59:87:fd:12:60:
                    ea:45:8d:ee:30:98:e9:59:95:66:99:16:f6:35:7c:
                    89:c1:92:ab:58:17:e7:57:ef:20:d7:5b:05:8b:dc:
                    e0:bf:69:b2:05:fc:a0:aa:47:29:cd:43:7f:89:95:
                    ef:5d:f8:b9:1c:ba:dd:f6:00:83:7d:f0:d7:b7:d6:
                    8a:55:c1:4c:cf:c3:0f:12:3e:bc:3f:f0:ba:f7:38:
                    52:87:b3:f8:7b:9f:3f:b0:9d:77:d2:98:28:d7:3d:
                    b1:17:aa:2a:7f:49:3d:fa:df:dc:e2:8d:b8:ef:d4:
                    5d:69:bb:4f:a5:a7:68:7f:8d:e4:84:bc:09:9f:9b:
                    1c:57:f2:e1:28:0a:1f:b1:b5:91:e5:ea:f6:ae:c5:
                    2f:d2:d6:c8:7c:fd:cc:b2:e4:8f:36:15:63:10:52:
                    98:f6:d8:64:da:c7:17:89:49:54:31:74:39:f3:98:
                    16:fe:ef:68:20:38:e9:fc:cb:8a:ea:af:57:de:35:
                    31:c9:67:c8:4a:3e:c0:40:21:fc:58:cd:da:de:c9:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:D1:46:C0:07:68:63:1A:88:32:A2:B4:A4:95:E9:DC:1D:C5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/913c986c-f8de-33b9-823e-0c9082484843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.254.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:60:39:c2:a0:da:6d:7c:0a:99:a0:27:3f:02:61:6d:ae:52:
         6c:d0:d5:30:66:e9:08:33:3f:fe:e8:74:84:58:9c:ed:63:92:
         0a:89:36:e6:18:f2:cb:81:7f:6e:68:63:8e:94:e3:98:0b:e0:
         72:22:88:24:d6:12:fd:7a:54:23:20:36:19:a9:83:d0:08:dd:
         73:66:ae:47:66:77:c4:c8:8c:c5:ea:97:84:93:b5:94:72:fa:
         e0:57:19:21:1c:4f:f1:d1:85:b3:b4:fa:51:49:ec:8e:c8:7d:
         16:30:ae:59:d6:b6:f8:7b:bf:eb:b2:df:d4:31:ce:9a:67:be:
         b8:48:58:ab:27:78:a0:91:41:47:62:72:6b:87:a6:30:0b:b2:
         b0:b0:da:c4:75:d0:de:f0:12:96:c3:fa:09:fd:56:18:d5:49:
         be:82:ae:fe:8d:cf:2c:7c:7c:9b:40:57:6d:4d:97:49:44:65:
         46:96:1d:09:73:42:ca:7d:63:29:3e:b2:6d:3c:a4:5e:eb:fa:
         ad:b9:d1:a6:00:35:d4:64:a8:27:94:6d:c0:ff:cb:1e:15:f7:
         dc:f6:28:4f:2c:9b:35:19:dd:a0:92:79:79:7d:e0:61:4a:62:
         01:01:79:50:e3:c0:0d:bd:06:f7:66:f7:e1:4f:b3:35:f8:c9:
         c0:b4:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----