Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3513b776-f08c-3994-9155-92db45861180.roa
File:                     3513b776-f08c-3994-9155-92db45861180.roa (raw, json)
Hash identifier:          nDAdClQ3TJwg28W3qtD27bdMkHtmU9fLohfzC33ibbg=
Subject key identifier:   81:57:26:44:6F:B3:92:A3:8B:5D:F0:23:CE:96:5B:B0:74:1F:A7:0F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484D64A85E77062E246E9F1400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3513b776-f08c-3994-9155-92db45861180.roa
Signing time:             Mon 23 Dec 2024 13:26:57 +0000
ROA not before:           Mon 23 Dec 2024 13:26:57 +0000
ROA not after:            Sun 23 Mar 2025 12:26:57 +0000
asID:                     14598
IP address blocks:        50.234.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:64:a8:5e:77:06:2e:24:6e:9f:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 13:26:57 2024 GMT
            Not After : Mar 23 12:26:57 2025 GMT
        Subject: CN=696777fa-101d-46f7-88ee-9b75853253a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:a1:9b:38:bd:6d:15:3a:22:e2:ae:c7:2c:
                    be:98:89:59:ea:08:77:15:3b:2f:7e:27:8c:6c:ba:
                    5e:8e:0a:fd:0a:74:d0:9b:d5:0c:b2:df:25:f4:6d:
                    77:a3:82:0d:db:eb:04:0b:22:0a:66:ee:62:8f:09:
                    20:8f:bf:98:e0:b1:c0:c9:b5:e9:ef:b6:9e:c8:31:
                    15:85:1d:b3:75:12:b9:7e:89:7b:10:ef:60:56:86:
                    ef:8e:ea:30:fb:67:e7:ba:14:68:4b:32:f4:ed:5d:
                    9d:d6:56:63:a1:55:1d:3c:ed:4f:a4:07:a3:7a:46:
                    ec:aa:25:4f:cd:9e:2b:b9:d4:dc:d6:61:49:c7:f4:
                    d8:75:91:89:82:1b:54:48:69:09:c1:ac:70:d0:04:
                    2b:4e:d7:c7:6b:a2:de:2a:26:46:b8:85:9a:1b:54:
                    99:02:68:f9:49:b1:e3:a1:b1:af:8f:48:a9:6c:48:
                    96:8f:25:12:1b:2f:c6:dc:b7:de:89:bc:22:db:87:
                    94:84:36:e7:9c:75:6e:c0:de:74:03:79:db:56:fb:
                    d7:69:c2:59:6b:d4:e7:a3:35:5d:e4:2f:a9:8e:d5:
                    db:06:36:33:f1:11:2f:c2:8d:91:0d:f4:01:81:5b:
                    ba:ef:c7:a9:a4:c8:0d:1d:14:b3:de:6a:10:bb:fc:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:57:26:44:6F:B3:92:A3:8B:5D:F0:23:CE:96:5B:B0:74:1F:A7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3513b776-f08c-3994-9155-92db45861180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.234.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:a7:b8:17:e4:9e:ae:d0:c8:5f:9e:9d:8e:17:8d:dc:34:
         be:c8:05:bc:1e:8a:e4:29:51:50:23:63:68:39:67:d6:e2:8a:
         7f:e0:45:61:3f:fd:ee:84:82:c8:07:42:6f:eb:bc:d6:26:26:
         f1:12:c0:c8:3d:82:e0:61:0c:b4:d1:11:5d:14:c9:6a:ea:3d:
         68:76:43:73:ed:e1:33:2a:d0:d6:18:47:49:3d:16:2c:f9:a0:
         ff:82:93:a7:78:18:86:a9:b2:e3:8b:58:65:26:6e:02:f3:45:
         bd:90:5b:c5:a9:df:67:d9:15:c2:66:50:5e:b7:f6:a5:85:0e:
         e8:1c:cf:1e:a2:68:d7:3c:57:ea:00:d0:0b:69:62:a2:8c:0f:
         03:71:bb:69:e8:43:4d:35:3a:56:74:2f:fc:2c:bd:46:12:af:
         bc:31:46:5d:31:e1:b9:7a:c9:9a:72:62:dc:48:f6:c4:20:ec:
         fa:15:53:34:f4:b5:df:4d:23:d7:66:bd:39:28:75:7b:b7:bb:
         41:98:51:92:3b:ba:cf:5a:1f:4e:cf:fc:a8:d2:d3:7d:d5:3e:
         45:5a:b8:e2:c1:20:7c:80:3e:d8:4e:21:c4:7d:f8:4c:6e:58:
         1f:fb:dd:ac:bf:bd:c5:f5:49:90:42:79:b7:8b:61:54:5e:c9:
         98:a6:ed:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNZKhedwYuJG6fFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzEzMjY1N1oXDTI1MDMyMzEyMjY1N1owLzEtMCsGA1UEAxMk
Njk2Nzc3ZmEtMTAxZC00NmY3LTg4ZWUtOWI3NTg1MzI1M2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3ahmzi9bRU6IuKuxyy+mIlZ6gh3FTsvfieM
bLpejgr9CnTQm9UMst8l9G13o4IN2+sECyIKZu5ijwkgj7+Y4LHAybXp77aeyDEV
hR2zdRK5fol7EO9gVobvjuow+2fnuhRoSzL07V2d1lZjoVUdPO1PpAejekbsqiVP
zZ4rudTc1mFJx/TYdZGJghtUSGkJwaxw0AQrTtfHa6LeKiZGuIWaG1SZAmj5SbHj
obGvj0ipbEiWjyUSGy/G3Lfeibwi24eUhDbnnHVuwN50A3nbVvvXacJZa9TnozVd
5C+pjtXbBjYz8REvwo2RDfQBgVu678eppMgNHRSz3moQu/y71wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFXJkRvs5Kji13wI86WW7B0H6cPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUxM2I3NzYtZjA4Yy0z
OTk0LTkxNTUtOTJkYjQ1ODYxMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdcp7gX5J6u0Mhfnp2OF43cNL7IBbweiuQpUVAjY2g5Z9biin/gRWE/
/e6EgsgHQm/rvNYmJvESwMg9guBhDLTREV0UyWrqPWh2Q3Pt4TMq0NYYR0k9Fiz5
oP+Ck6d4GIapsuOLWGUmbgLzRb2QW8Wp32fZFcJmUF639qWFDugczx6iaNc8V+oA
0AtpYqKMDwNxu2noQ001OlZ0L/wsvUYSr7wxRl0x4bl6yZpyYtxI9sQg7PoVUzT0
td9NI9dmvTkodXu3u0GYUZI7us9aH07P/KjS033VPkVauOLBIHyAPthOIcR9+Exu
WB/73ay/vcX1SZBCebeLYVReyZim7dc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:14 2025 by rpki-client