Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dda3ba0-1bdb-334f-97f4-40128e180c33.roa
File:                     4dda3ba0-1bdb-334f-97f4-40128e180c33.roa (raw, json)
Hash identifier:          INJgaOQqrh9HnoitsOPdnYGfSu2Qlt1pc34xq1YbDlU=
Subject key identifier:   C5:9A:CE:B4:7B:00:5A:33:6A:87:70:A6:B8:C9:8C:F1:6B:52:72:B5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F154F6ADAF25C0053C3BC4C8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dda3ba0-1bdb-334f-97f4-40128e180c33.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        50.96.88.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:54:f6:ad:af:25:c0:05:3c:3b:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=42a5e85a-f3d6-4f5b-ac6b-f57b7147e942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:8d:fe:f8:c7:22:51:61:69:b3:2c:66:9c:
                    0f:84:da:7b:27:8c:3a:b5:f0:95:33:86:52:61:22:
                    32:c4:66:ab:9f:2a:97:ab:e9:ed:3f:67:78:a6:e3:
                    05:6d:4f:09:eb:d0:5c:6b:16:08:43:dc:70:11:44:
                    8e:d8:80:56:27:ce:8c:72:17:34:44:30:83:61:27:
                    6a:5e:e7:ef:83:b7:50:4d:ab:2d:60:f4:30:a0:d0:
                    a0:45:19:1f:b9:9d:61:1f:7b:6c:35:6f:d1:bc:cb:
                    5f:e4:90:f3:5c:7e:91:8b:39:f5:a5:2d:7d:64:02:
                    49:91:7a:8b:6b:ec:4d:ad:2b:7e:87:49:fe:67:3b:
                    67:6c:9f:b8:71:ef:32:0f:c2:70:3d:15:fc:a3:82:
                    08:c0:a1:f0:0a:45:86:cf:67:a3:d8:4f:2f:45:e2:
                    31:0d:d9:ea:37:c3:01:17:2d:6a:07:cf:7e:6b:94:
                    fb:6a:1a:14:dc:07:50:47:3c:d1:b6:70:00:91:81:
                    ef:23:fb:ea:3b:66:99:22:77:c6:a5:f6:7a:37:37:
                    fd:fc:04:bf:97:4f:b9:75:d6:2d:35:87:74:f9:c1:
                    ac:5d:30:3d:c0:09:ed:3d:e3:b1:53:f7:05:7a:0b:
                    43:01:c1:85:9b:4e:69:2e:e3:f7:37:ad:3e:bb:4a:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:CE:B4:7B:00:5A:33:6A:87:70:A6:B8:C9:8C:F1:6B:52:72:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dda3ba0-1bdb-334f-97f4-40128e180c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:0f:f4:05:f8:0d:f5:44:81:30:24:95:4d:aa:46:a9:4e:
         d6:24:50:72:e5:4f:1c:2a:5f:54:3e:a0:11:80:25:c4:23:1b:
         7d:2a:72:3e:e0:10:12:a9:91:07:50:14:b8:8f:a0:34:04:47:
         74:2a:df:2b:dc:9e:e7:46:9a:5b:0a:c2:f8:d8:19:54:5b:4d:
         dc:ac:28:49:1b:2f:3e:a9:1e:ba:83:82:a9:e1:cb:34:9e:8b:
         27:75:2b:12:0e:e7:4d:86:e1:2d:9b:0a:ff:d3:17:8e:e4:f4:
         d4:7f:2e:11:1e:ee:97:15:be:66:a6:d2:a5:a2:96:8e:3f:fb:
         68:17:69:8d:5d:fa:9c:a3:78:de:cd:db:8c:39:d3:b8:d5:77:
         15:bc:a5:93:6b:bf:4d:42:e8:c5:b2:2b:1f:50:6c:4d:7f:68:
         1e:40:0e:b6:99:fb:d3:3b:2f:75:99:9d:fa:16:bf:bb:df:59:
         0e:bd:50:f6:bb:82:a6:37:1d:2a:f0:39:b2:c9:45:76:6d:37:
         6b:5c:ca:40:83:02:fb:5b:6c:1a:8f:e0:9f:83:a6:d2:a2:23:
         88:02:90:6d:3d:8c:e0:58:dc:4a:63:1c:eb:65:18:3b:83:dc:
         e0:49:99:56:33:96:cb:2a:ed:8d:5f:69:7c:9d:87:4f:52:94:
         8e:ee:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:55 2025 by rpki-client