Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2433512-630f-3284-97a5-c0e1ca0a4f00.roa
File:                     e2433512-630f-3284-97a5-c0e1ca0a4f00.roa (raw, json)
Hash identifier:          xVXwQVtgWqy4YXpfNTVfkrCf/oxfMpDd0qau4BrQH88=
Subject key identifier:   17:2F:53:2A:AF:BB:64:AA:82:19:A0:7D:0C:33:98:1D:22:57:C1:AB
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848B05AE3D01B57DCE9BD795200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2433512-630f-3284-97a5-c0e1ca0a4f00.roa
Signing time:             Tue 28 Jan 2025 00:12:17 +0000
ROA not before:           Tue 28 Jan 2025 00:12:17 +0000
ROA not after:            Sun 27 Apr 2025 23:12:17 +0000
asID:                     11798
IP address blocks:        50.114.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:5a:e3:d0:1b:57:dc:e9:bd:79:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 28 00:12:17 2025 GMT
            Not After : Apr 27 23:12:17 2025 GMT
        Subject: CN=802673de-b8db-4761-82d1-0f03fa0a653f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:c8:71:bb:fb:5e:8f:5c:ea:21:60:46:a9:
                    f4:3b:63:5c:12:79:2d:17:3a:0c:fe:9c:56:ef:7c:
                    28:e8:b3:2e:7d:54:35:29:d8:a7:f9:20:38:a4:ac:
                    dc:61:e4:da:b0:9c:26:cf:bc:da:50:b5:37:b3:16:
                    44:44:a6:87:a5:57:17:7d:e5:07:55:28:93:40:54:
                    a1:ba:cf:ab:23:e9:6b:8a:66:d1:c7:1d:29:42:9b:
                    14:ec:1b:48:09:35:32:74:c2:1a:cc:1b:28:15:39:
                    a6:03:d3:91:33:e4:53:58:eb:00:f4:a5:7b:c6:c6:
                    2c:7d:08:52:a3:08:55:95:24:8f:ad:12:ed:07:fa:
                    e8:d2:74:91:96:c1:a9:ff:c2:b2:f2:a6:e5:d7:24:
                    8b:c8:30:db:d7:c4:5a:c2:e1:08:41:94:ec:19:95:
                    29:ac:c8:fb:94:51:80:4b:5e:06:9f:5b:40:99:5d:
                    74:04:f5:34:6d:d5:e5:5f:c1:d0:f7:0b:ad:ff:c5:
                    7d:3d:c7:f8:e8:0f:77:5c:d7:14:57:7e:67:2a:ea:
                    92:d4:08:01:52:23:0a:0b:e2:42:31:14:ce:9f:f5:
                    0e:c8:73:94:48:6a:e8:d4:d8:aa:0e:0b:d8:38:d9:
                    44:73:59:e3:3d:ea:70:17:eb:f6:95:71:96:74:22:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2F:53:2A:AF:BB:64:AA:82:19:A0:7D:0C:33:98:1D:22:57:C1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e2433512-630f-3284-97a5-c0e1ca0a4f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:39:b6:df:11:20:73:32:3e:a7:d3:3d:0d:1d:2a:a4:45:
         e6:ce:1e:d1:57:90:c2:35:aa:02:a0:bc:89:92:20:d3:6b:b4:
         62:b7:4e:fd:b1:d7:30:56:da:e5:e7:a9:4b:dd:25:c7:5e:7a:
         bf:8a:2e:f3:56:14:f5:dc:d5:6a:ba:b9:0d:96:75:02:27:26:
         2a:aa:21:0d:c7:f2:22:b1:08:f2:88:96:ac:9a:85:5d:fc:76:
         02:44:d8:53:36:a9:7f:0b:e4:d1:bf:1e:8c:7d:9a:a3:63:c6:
         99:87:86:91:a0:88:8f:41:5f:38:61:63:d4:30:12:df:e2:4e:
         59:43:e5:a1:2b:f9:2b:2b:42:8a:aa:0b:9d:37:91:25:ef:89:
         87:0d:3b:64:c4:6c:0f:f7:f7:8d:20:52:1e:97:9d:83:95:54:
         75:f9:db:a9:3f:61:77:9c:a9:61:6b:22:12:e0:e7:72:46:e6:
         8e:e2:d5:7d:e8:7e:49:ca:78:c3:11:68:4c:ad:46:5a:cd:1d:
         67:81:46:39:0c:eb:10:00:f7:3f:64:14:65:bb:7a:0b:5f:1e:
         3f:22:2d:ec:b5:c9:50:86:3c:b1:c1:90:b6:96:fb:ea:a8:65:
         95:19:9a:f6:24:f6:da:51:b9:4e:94:43:d3:7b:75:a5:72:59:
         2e:3f:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:48 2025 by rpki-client