Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b5cbef2c-c26d-3184-8588-d7a3169bcfeb.roa
File:                     b5cbef2c-c26d-3184-8588-d7a3169bcfeb.roa (raw, json)
Hash identifier:          j5nYDUH00gyLDkOQIcl/xT6IXjfNCQy3KzZH4q01Gvw=
Subject key identifier:   98:36:73:4B:49:A5:1D:FC:9B:04:58:74:24:3E:A2:F8:2F:44:8B:28
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849780F138C939DD34B5FC6FE00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b5cbef2c-c26d-3184-8588-d7a3169bcfeb.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     1239
IP address blocks:        50.7.128.0/22 maxlen: 22
                          50.7.132.0/22 maxlen: 22
                          50.7.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:13:8c:93:9d:d3:4b:5f:c6:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=a12c7993-04c7-47ed-83bd-443affb9fb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:7a:68:fb:0f:63:ed:79:e5:92:2d:da:1a:
                    4a:3d:9c:0f:8d:28:4b:96:ad:30:5f:f5:67:aa:cc:
                    fa:24:9d:28:68:7a:70:c1:43:8a:a9:3e:d3:f0:1f:
                    af:06:1a:e8:4d:c9:98:55:95:9d:37:30:30:33:2c:
                    ca:c9:2e:80:a5:ca:9f:6c:72:bc:ab:20:55:a5:d7:
                    74:7e:b6:86:64:bd:ce:5c:0a:d6:39:8b:83:07:68:
                    9c:f5:b9:aa:76:08:0e:c4:af:1c:48:ce:ea:ab:58:
                    1a:ad:08:c7:b6:9b:ff:be:10:b2:c5:f2:fa:35:55:
                    29:71:fc:73:ef:fd:1f:f4:e2:06:0f:f0:dc:98:64:
                    30:b1:d9:73:8b:e9:74:c8:04:1a:96:74:92:54:94:
                    28:59:17:9c:2c:cd:e5:e6:30:97:b6:d8:93:0c:79:
                    07:de:c3:cd:d1:cd:ba:a8:f1:e5:83:05:e3:f4:6e:
                    49:cf:d4:2c:db:23:5a:17:52:96:5d:3c:7c:05:d4:
                    14:2b:f4:5c:f8:9a:71:79:5f:07:aa:5e:4a:c5:23:
                    76:1d:9f:cb:c6:c8:ca:31:60:63:79:46:66:36:b0:
                    05:91:ff:6c:b0:91:55:86:bd:31:b4:20:fb:e3:f2:
                    af:ba:3d:93:4c:ce:2b:8c:5f:24:d7:09:1f:6b:8c:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:36:73:4B:49:A5:1D:FC:9B:04:58:74:24:3E:A2:F8:2F:44:8B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b5cbef2c-c26d-3184-8588-d7a3169bcfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.128.0-50.7.139.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:d5:dd:29:2e:b6:6c:d7:56:cd:37:86:71:73:7c:51:38:
         20:22:86:74:cc:b2:6e:1f:96:54:b0:c2:0f:58:06:38:1d:46:
         7e:10:69:14:f5:b7:9c:79:fa:da:fe:28:02:61:65:29:d9:64:
         73:ca:3c:58:b2:a3:a7:24:4f:ae:31:e0:4d:de:76:d2:2a:c7:
         d6:44:f3:27:9b:84:7d:52:71:1f:d3:4b:f7:bd:ba:9e:35:86:
         21:e0:90:d6:65:40:e4:c2:ab:fb:7a:c3:d7:ab:b7:01:4b:80:
         04:94:f2:c2:ad:f5:8d:36:42:df:1f:f5:a4:aa:9f:21:ac:3d:
         a7:14:4d:b9:0b:35:01:8b:14:df:7c:67:6d:54:c3:a2:c1:bd:
         63:aa:ab:f3:a6:0e:d1:bf:19:8b:80:a6:03:4c:b5:0b:89:19:
         de:b3:f4:29:7c:64:52:25:3b:11:ab:14:36:81:ed:5f:29:91:
         f8:7c:83:f9:8f:70:44:56:08:bd:77:6a:cc:8c:c7:d4:fe:80:
         4e:1c:ea:47:9e:7c:e6:34:76:a8:c9:62:0b:25:48:19:5b:b0:
         13:4d:c3:10:c5:04:c2:08:d1:40:08:02:12:58:3b:bd:f6:6b:
         74:31:6c:66:b8:05:f7:42:37:a0:e4:ce:d2:36:a4:09:78:61:
         4a:b9:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:10 2025 by rpki-client on console.sobornost.net