Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fe12f23-8eb0-3a44-bcc8-22cbba09eaad.roa
File:                     9fe12f23-8eb0-3a44-bcc8-22cbba09eaad.roa (raw, json)
Hash identifier:          vsPruv3yx9ozjs4BqeeaQOKcJvi3PDNa7Vv0wtXQn4g=
Subject key identifier:   6A:26:E8:55:F1:2E:59:1B:35:8C:9C:C5:FB:D3:52:97:3E:23:B3:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA5B7A605F643EB541EE7C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fe12f23-8eb0-3a44-bcc8-22cbba09eaad.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     396210
IP address blocks:        50.226.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:b7:a6:05:f6:43:eb:54:1e:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=63be00f2-320c-4980-bf55-99ce12fd9729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:b0:13:82:3e:d3:fe:a7:c8:5a:27:c7:52:
                    eb:45:1d:2f:f9:47:33:63:57:a1:9c:c6:a8:e2:29:
                    c0:4d:f3:f3:90:55:43:ec:fc:2c:77:98:bb:97:e1:
                    fa:ca:77:f1:4e:8c:55:62:70:54:9b:23:c4:0b:45:
                    93:24:09:0d:c7:41:d3:a8:a6:85:3a:cf:2d:10:1d:
                    f2:93:72:c2:68:f9:e1:d0:b3:49:d3:69:26:5a:60:
                    e3:a2:e5:f7:88:94:7e:a5:ad:4f:87:3c:75:05:bc:
                    ab:32:20:20:63:79:ae:93:65:6b:4d:92:69:ba:9a:
                    b0:72:ad:0c:6d:3e:a7:a1:ee:73:b9:be:0d:cc:fa:
                    87:52:26:a8:41:59:0a:6c:bb:9c:1f:fc:8f:f2:c9:
                    82:76:4b:55:8b:b3:86:7f:14:ba:c4:a2:23:08:34:
                    99:8c:dc:5a:48:4d:df:72:a1:3f:17:66:6b:1c:4b:
                    38:e1:1d:76:32:38:a0:f4:0d:76:11:ac:34:9d:98:
                    3d:18:14:7c:82:96:d3:68:2a:a1:0f:87:3b:01:03:
                    f6:45:23:e9:2d:ec:50:03:f4:a7:c0:cb:13:05:fd:
                    29:76:b3:d7:9a:0f:67:21:da:e0:74:1c:79:1a:c0:
                    f6:51:a2:aa:4c:0f:41:f1:06:66:ff:91:85:03:68:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:26:E8:55:F1:2E:59:1B:35:8C:9C:C5:FB:D3:52:97:3E:23:B3:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9fe12f23-8eb0-3a44-bcc8-22cbba09eaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.226.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:70:6f:bb:89:e3:bb:6c:1a:9c:30:a7:44:e3:e2:a1:f2:a1:
         38:30:9e:3a:b4:79:37:db:75:69:43:89:0d:cb:2c:ac:88:8a:
         9f:96:64:29:03:17:48:f5:c2:1b:1c:fa:bb:7c:2e:df:df:1e:
         69:fd:5b:e4:af:65:e3:a6:00:9b:43:d7:ce:7f:1f:36:84:92:
         fd:83:fe:be:f1:72:21:ed:e1:cf:d7:ce:74:16:58:6e:c8:cb:
         81:03:f7:b2:8a:ad:5d:8a:a4:0a:c9:34:00:e2:30:8e:e3:8f:
         cf:df:42:43:7b:28:e9:ad:38:8d:03:9f:55:4b:05:d9:b5:f2:
         ba:ef:eb:2e:63:5f:ca:56:b1:36:a8:90:ad:47:62:91:2e:e3:
         e3:e0:4b:08:a7:5f:ab:95:61:5d:ee:75:21:52:38:79:64:2c:
         12:19:95:b9:ae:0e:fe:44:d5:26:87:6f:92:72:f9:b5:73:b1:
         de:d8:a4:00:e1:04:2f:e5:28:c5:f2:02:a2:eb:df:5e:a2:2e:
         f6:67:71:d8:94:2b:50:19:3e:ce:ee:ed:70:91:e0:11:2c:6f:
         da:3a:51:cb:80:27:13:91:95:d0:f7:78:77:82:ad:3a:de:ba:
         a5:c1:b9:01:21:60:68:78:0c:13:18:fe:b9:c9:72:36:f5:0d:
         62:7d:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----