Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa
File:                     8a4778b3-1fbe-3ce6-9849-f83537b13285.roa (raw, json)
Hash identifier:          f1anv+DfYjAoTUtKPvoiys/d8ykjmA2p17L0O9jvz+g=
Subject key identifier:   3E:A3:25:F5:74:65:53:B8:E0:A7:21:D0:3A:31:F9:81:9B:38:C1:45
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584823954FAB4E3EC66A989EDF00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     21949
IP address blocks:        50.21.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:4f:ab:4e:3e:c6:6a:98:9e:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=b03c4da5-ccc4-42e3-8803-46d753e29967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:6b:bf:5b:9e:53:ce:99:30:d6:b4:5e:fb:
                    bc:57:0c:08:56:07:f8:8f:ca:dc:21:6c:0c:d0:00:
                    7f:60:56:6e:a2:0a:c4:88:aa:00:b3:0a:33:6f:ed:
                    da:f5:d2:65:03:a7:23:5c:e3:28:00:2d:c9:da:d1:
                    57:82:c7:04:bc:da:26:8e:ff:ba:f8:7e:60:f4:d0:
                    23:b5:95:5e:72:b3:17:45:7d:6c:a0:43:67:40:82:
                    65:f4:44:26:c4:5e:77:3c:24:2e:60:52:6b:2b:1f:
                    ef:ba:a0:b4:45:64:b2:73:92:36:c2:09:9c:ef:1a:
                    3b:6e:8b:4c:ac:57:81:0f:8a:40:a4:45:90:9e:60:
                    0a:ff:7e:3e:59:f7:c1:e2:ea:5d:42:77:d5:50:fb:
                    75:f7:6e:f7:d7:22:ee:a7:b5:38:9b:f3:c9:e8:a3:
                    95:9c:4f:b2:5d:73:47:0e:07:08:bd:88:5c:a2:22:
                    e5:b5:e7:6f:ee:46:86:a7:be:fe:15:99:3f:d2:34:
                    6b:f7:14:79:5b:82:0a:5f:5b:6d:b0:3e:ef:09:69:
                    b7:71:9b:d8:df:4d:4a:b4:13:f5:7c:9a:ed:bd:c7:
                    fd:46:e9:0f:b0:28:f9:4b:48:ae:0b:ca:eb:af:75:
                    16:5d:bf:36:f5:91:05:73:a1:e3:76:f4:9f:fa:ea:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A3:25:F5:74:65:53:B8:E0:A7:21:D0:3A:31:F9:81:9B:38:C1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/8a4778b3-1fbe-3ce6-9849-f83537b13285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.21.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:7a:e1:b0:96:d4:d3:ea:34:88:a7:59:50:20:f3:67:91:
         91:60:2f:c5:ee:ba:d6:c0:d6:bf:ad:20:21:c8:4b:dc:3f:69:
         f9:71:1f:48:0a:f8:1c:d0:ca:ce:f7:c6:84:e0:51:96:6e:01:
         2d:6a:65:ca:cb:72:a9:2a:61:24:6c:9f:86:7f:e8:03:dc:04:
         b2:74:2f:48:e4:6b:e2:22:18:33:19:9d:7e:78:75:ed:be:c4:
         5a:f2:5f:30:14:e5:ce:d8:fa:bb:60:ce:13:ec:bc:8a:b3:8e:
         10:7c:44:75:a7:f9:ad:ed:b7:86:d3:fe:21:e5:34:4e:75:5f:
         76:29:ab:e4:e8:c4:d1:93:06:81:0a:d2:d4:1b:e9:e6:76:fd:
         d1:02:eb:99:1e:5c:27:16:65:df:a9:64:11:61:6e:1a:1c:12:
         65:9e:f4:0f:93:3b:a7:10:8e:84:b1:bb:96:5a:6b:c1:22:9d:
         64:2a:28:f0:04:26:38:d5:d0:94:04:e8:3d:30:ed:05:43:d1:
         64:80:6f:b4:3f:23:3d:87:69:24:96:50:5d:e7:de:60:0f:60:
         fe:5f:ff:37:3c:ee:70:01:6a:13:4f:02:ca:a8:3a:04:36:48:
         00:83:5b:c8:15:bd:8c:41:8e:75:be:db:be:e7:f5:be:39:fd:
         48:08:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:47 2025 by rpki-client