Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cc2b465-c312-38e4-8e7d-9d106bd1c62e.roa
File:                     5cc2b465-c312-38e4-8e7d-9d106bd1c62e.roa (raw, json)
Hash identifier:          Zb4G7d+wbLVPkveKhjHvb3htcjxVVLaDdtu+LiI9q8Y=
Subject key identifier:   A4:D2:E9:30:02:AD:1D:05:17:D6:2C:00:8B:95:05:CC:86:8E:88:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CD6A08A4695D26F5F9880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cc2b465-c312-38e4-8e7d-9d106bd1c62e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     395680
IP address blocks:        50.234.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:d6:a0:8a:46:95:d2:6f:5f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=2414447b-473f-4e4f-b2c9-fc715f8945b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:9d:8f:93:bf:18:b3:39:eb:41:73:dd:87:
                    e7:9c:f9:f3:95:3c:aa:ec:a6:91:72:87:18:7b:ad:
                    7f:a5:bc:2e:0a:ea:5e:5d:a4:64:47:80:18:2b:ef:
                    b3:3f:5f:7e:1d:36:81:82:15:8b:02:51:36:44:71:
                    b0:07:98:30:ab:9a:6c:2a:eb:57:6b:d8:23:ba:25:
                    38:2a:5e:03:60:98:e8:00:c8:a7:af:fc:fa:a6:d8:
                    a1:02:04:fc:c7:34:74:d8:d7:51:fe:33:3f:43:40:
                    69:1d:07:dc:2d:73:78:6e:65:64:50:9f:ed:22:fc:
                    5e:ab:7e:97:2c:bd:03:5d:f3:4c:71:a2:5f:22:8e:
                    6b:64:20:8c:67:a3:67:9c:0f:46:71:36:f6:eb:2d:
                    10:23:b4:37:96:85:60:38:02:30:32:7e:26:71:9d:
                    5c:66:5f:67:0c:97:06:c9:41:92:6f:4c:0b:bb:ca:
                    28:14:ae:c6:de:3c:71:75:13:e1:8e:d3:70:7a:1a:
                    37:b0:29:eb:06:81:fa:08:0c:3c:29:b8:0e:18:91:
                    ba:d5:6f:6f:96:31:3e:43:4e:73:40:4b:98:ff:4c:
                    ae:65:c2:02:ae:cb:54:95:35:cb:d6:ae:0a:bc:d2:
                    b0:16:46:4c:67:5a:9e:b3:70:cb:1f:d2:75:ae:fa:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:E9:30:02:AD:1D:05:17:D6:2C:00:8B:95:05:CC:86:8E:88:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cc2b465-c312-38e4-8e7d-9d106bd1c62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.234.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c6:b8:24:b0:66:39:e6:82:6d:10:5b:11:0a:51:6c:ed:05:
         97:7e:30:cf:63:1f:34:19:a4:f0:a0:c4:8d:91:50:96:2d:d9:
         e2:77:be:89:57:32:34:43:04:7d:0a:a3:85:d6:66:78:52:76:
         ec:ef:6c:9e:76:a1:7c:0d:bb:01:f0:e7:f5:60:06:a6:c9:1b:
         95:cd:e7:13:ed:12:37:97:9d:5c:f7:7a:ba:db:61:2f:b7:00:
         0f:ff:5c:78:0b:ad:26:92:a8:1c:2c:5d:ed:48:4f:dc:fa:79:
         83:c8:d3:bf:50:d8:25:0e:fb:5e:0b:ed:86:eb:63:b1:80:93:
         a4:a3:3a:29:e6:26:49:63:5b:85:b4:84:16:54:37:eb:df:bd:
         66:65:c3:54:be:1f:7d:58:ac:76:96:18:94:00:dd:0b:e3:f5:
         4a:99:ce:31:7c:a5:a5:75:6a:25:89:1b:e3:f3:38:1d:16:77:
         c8:63:d6:f9:03:4f:59:d2:50:b0:ad:49:f5:55:9c:c9:de:ee:
         ca:34:0e:3e:30:07:bb:40:20:35:10:83:5e:31:c3:67:32:1d:
         af:28:da:3b:69:68:23:42:ae:f2:13:75:16:59:a8:0e:60:c7:
         5a:c1:be:1a:27:de:86:4b:ec:81:db:39:df:be:e6:73:c9:32:
         ee:72:05:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebNagikaV0m9fmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjQxNDQ0N2ItNDczZi00ZTRmLWIyYzktZmM3MTVmODk0NWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqudj5O/GLM560Fz3YfnnPnzlTyq7KaRcocY
e61/pbwuCupeXaRkR4AYK++zP19+HTaBghWLAlE2RHGwB5gwq5psKutXa9gjuiU4
Kl4DYJjoAMinr/z6ptihAgT8xzR02NdR/jM/Q0BpHQfcLXN4bmVkUJ/tIvxeq36X
LL0DXfNMcaJfIo5rZCCMZ6NnnA9GcTb26y0QI7Q3loVgOAIwMn4mcZ1cZl9nDJcG
yUGSb0wLu8ooFK7G3jxxdRPhjtNweho3sCnrBoH6CAw8KbgOGJG61W9vljE+Q05z
QEuY/0yuZcICrstUlTXL1q4KvNKwFkZMZ1qes3DLH9J1rvqrPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTS6TACrR0FF9YsAIuVBcyGjoivMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNjMmI0NjUtYzMxMi0z
OGU0LThlN2QtOWQxMDZiZDFjNjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuqJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELGuCSwZjnmgm0QWxEKUWztBZd+MM9jHzQZpPCgxI2RUJYt2eJ3volX
MjRDBH0Ko4XWZnhSduzvbJ52oXwNuwHw5/VgBqbJG5XN5xPtEjeXnVz3errbYS+3
AA//XHgLrSaSqBwsXe1IT9z6eYPI079Q2CUO+14L7YbrY7GAk6SjOinmJkljW4W0
hBZUN+vfvWZlw1S+H31YrHaWGJQA3Qvj9UqZzjF8paV1aiWJG+PzOB0Wd8hj1vkD
T1nSULCtSfVVnMne7so0Dj4wB7tAIDUQg14xw2cyHa8o2jtpaCNCrvITdRZZqA5g
x1rBvhon3oZL7IHbOd++5nPJMu5yBe8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:03:11 2025 by rpki-client