Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa
File:                     95881e9f-f38d-3be4-ab28-5acabe54e2be.roa (raw, json)
Hash identifier:          Uae7vHSkPY7/bYokIe0P9SnjJKi6sHytSFEsOlLuDoA=
Subject key identifier:   AC:A0:F4:AA:88:FB:50:5A:10:D1:E6:F4:AF:88:65:AC:E7:A0:D0:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5F9FACA7A32379393C2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7016
IP address blocks:        50.199.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:f9:fa:ca:7a:32:37:93:93:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=56d5592d-120b-48fd-90ae-72863c228d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:24:45:0e:1a:97:27:9f:36:65:b7:3e:b0:
                    84:21:fe:36:64:a3:25:21:56:bd:e9:a5:06:a4:3d:
                    48:52:4a:55:5f:87:c8:64:e2:23:97:ac:4f:ab:2d:
                    a9:dc:00:f5:58:cd:62:56:d6:f9:14:3e:71:17:ce:
                    e4:16:06:e9:1b:9a:9a:08:c1:5d:74:fe:97:a5:47:
                    61:2c:1a:03:31:80:f0:56:53:72:d2:bd:2a:1b:e6:
                    02:14:5c:25:37:ee:f5:69:b4:50:0d:07:d6:49:de:
                    bc:76:04:00:62:2a:28:40:ba:59:49:71:e9:cc:e3:
                    b8:81:61:de:ef:ec:ab:17:0c:4c:1e:f4:d3:ac:0f:
                    44:2b:6c:a5:51:15:b2:5f:3b:8e:80:45:f6:21:78:
                    d9:9e:e7:de:89:5e:b4:ce:e6:e8:13:65:8a:25:8a:
                    31:a3:16:ec:13:0b:69:d5:32:c9:96:ec:8a:1d:5c:
                    fa:bd:72:bc:aa:fd:5c:cf:4c:db:e9:d6:d1:f4:40:
                    ee:00:d5:1a:a6:79:a3:cb:f4:30:ed:a6:df:bc:21:
                    d4:20:98:cc:b4:74:82:aa:ba:ac:c5:e2:dc:d5:71:
                    40:ff:82:70:26:69:ff:e0:94:a0:27:d1:38:e0:45:
                    5d:31:1f:93:8f:66:01:aa:a1:b2:b1:eb:23:34:3f:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:F4:AA:88:FB:50:5A:10:D1:E6:F4:AF:88:65:AC:E7:A0:D0:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95881e9f-f38d-3be4-ab28-5acabe54e2be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.199.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:90:e9:4c:37:9c:d0:a1:a0:ee:d5:f6:e3:1e:09:6d:d6:
         0e:fe:19:0a:cc:3f:91:d8:a9:14:77:f2:d3:5c:6e:3f:34:7a:
         42:2b:60:5a:0a:57:6d:22:0c:f1:61:a6:a0:de:79:00:d2:aa:
         c8:84:6e:38:5f:78:07:5d:4d:bc:b0:cc:00:e0:17:9c:26:00:
         73:17:f3:31:22:b2:f7:2b:9c:97:4c:45:b2:ab:b7:2b:a2:3a:
         ef:2e:91:e2:34:2b:be:c8:94:27:f6:41:9a:37:a3:40:c4:6f:
         d9:3f:09:15:91:31:e3:76:77:e0:5d:7b:94:fd:f5:ca:88:56:
         6d:ba:1f:2f:f0:04:2b:a0:96:c7:5f:8b:b1:f3:88:f6:3a:02:
         02:5c:7e:de:7a:c0:22:ce:c6:db:e7:24:8a:d0:62:71:be:1b:
         c7:8d:1d:e7:60:06:84:ad:17:2a:2f:87:89:12:5c:34:b7:70:
         66:99:9f:3b:26:a0:4a:f1:75:cd:93:54:0e:38:8e:b6:1b:bf:
         4b:32:cb:59:57:1f:29:10:90:37:37:87:d8:71:dc:eb:f4:d8:
         32:ea:95:af:5f:4d:4f:b8:c4:b0:be:d0:ce:d0:23:35:07:36:
         8f:0b:b7:76:7f:0e:d2:6b:9c:cd:de:e4:95:75:d8:c7:a1:47:
         2d:4a:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:58:15 2025 by rpki-client on console.sobornost.net