Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/997586c5-d3a8-3476-ba33-0313b2bf0040.roa
File:                     997586c5-d3a8-3476-ba33-0313b2bf0040.roa (raw, json)
Hash identifier:          YB3dhNp7DmPSUyzJHGZ0U1SRpbTmfXYC+sQ/OxLVYI4=
Subject key identifier:   14:02:20:66:4B:98:BA:5A:88:F4:99:66:BC:C6:D2:BA:83:5A:5B:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DF3CD4368DFA486D68FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/997586c5-d3a8-3476-ba33-0313b2bf0040.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        50.220.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:f3:cd:43:68:df:a4:86:d6:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=ee20dafc-0a92-4aa4-b132-c9921c00e8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:ba:f6:64:67:41:0f:37:8a:bb:ca:e4:e9:
                    29:e3:78:26:50:2b:39:ff:11:42:da:7a:0a:45:f6:
                    1a:b7:5a:93:1d:03:16:27:d1:39:58:90:af:3b:34:
                    84:ce:48:88:6d:3e:84:ad:74:7e:19:3b:3c:69:ce:
                    5c:0b:77:77:df:3e:09:6c:4c:bb:54:44:0c:a2:70:
                    47:aa:16:4f:3f:c2:de:de:9d:4b:56:ea:de:05:2a:
                    10:73:ec:8a:66:84:b6:40:62:02:98:60:79:66:c4:
                    15:e0:84:46:40:d5:9f:ca:d0:d7:c4:21:b7:9d:c2:
                    a8:37:59:d7:5a:20:9b:14:cf:79:b8:de:68:3c:0b:
                    d6:4d:18:eb:30:11:e9:7c:ba:de:84:26:51:2b:ea:
                    04:3a:4a:78:b4:b0:00:14:a5:11:38:57:e6:1c:ae:
                    c1:7f:42:38:6f:cd:26:ab:06:e1:19:4c:3d:9b:c1:
                    d3:ed:cb:f9:c1:af:d3:07:58:7e:9b:7d:8a:0b:92:
                    30:2d:be:f2:fd:9b:5c:1f:be:c8:84:06:34:56:c3:
                    5d:fd:8d:72:3b:6d:79:7a:19:b0:cc:40:72:59:cf:
                    02:89:e3:c9:49:7f:89:c8:c7:2f:ae:da:25:da:f6:
                    98:6d:21:77:57:56:ba:a5:81:98:02:78:24:69:d4:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:20:66:4B:98:BA:5A:88:F4:99:66:BC:C6:D2:BA:83:5A:5B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/997586c5-d3a8-3476-ba33-0313b2bf0040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:eb:35:7c:58:85:44:07:bf:4b:e0:a4:82:fc:59:02:3d:
         7d:a8:c3:b8:4f:4c:33:b8:91:e2:54:b8:6b:07:96:fc:03:1d:
         41:e4:d4:bc:8c:25:4d:c7:65:4c:4f:6d:67:71:be:a8:b4:01:
         76:97:81:d6:6b:aa:8c:65:30:c5:73:d0:28:b8:c8:8b:c7:44:
         d7:bb:79:ea:a7:2f:69:12:7a:39:dc:75:38:87:cb:16:5f:22:
         73:64:f6:07:e7:f2:7a:b2:e9:5e:a0:5f:15:b2:99:e0:44:06:
         3b:29:20:b0:bd:f5:8f:23:96:b9:b1:23:5a:b5:8c:22:a7:20:
         4f:0e:25:37:91:c2:02:b7:ba:10:73:91:a5:6d:57:1b:2f:b4:
         a5:aa:86:c2:4d:cd:3a:5d:35:5c:e4:11:6a:95:d2:b1:b3:dc:
         3d:87:97:77:0a:2c:0b:a2:cb:65:25:53:64:4e:8c:ee:c3:ed:
         87:98:56:26:96:15:3f:46:9f:7e:35:13:ac:bf:58:e9:a3:d2:
         ef:19:13:98:d4:c9:83:ac:5a:bf:97:e4:bf:1b:91:be:d6:35:
         27:c9:63:91:26:05:29:50:5b:d3:c4:df:96:09:a8:1b:46:17:
         d7:93:b8:49:fe:d0:a8:f1:79:4a:bb:46:50:b2:6b:ad:e5:a5:
         40:b4:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:31:34 2025 by rpki-client