Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/710f2894-dbed-3b99-9816-aa4a70b805c4.roa
File:                     710f2894-dbed-3b99-9816-aa4a70b805c4.roa (raw, json)
Hash identifier:          5LxesuczrVVBpRcfSF2357Y/t9lc7Pxpuy6VBmuuXEc=
Subject key identifier:   FA:29:F6:00:44:E9:A0:6B:C6:7A:0A:7B:53:0C:92:D8:19:09:17:F2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB577448454116D64617900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/710f2894-dbed-3b99-9816-aa4a70b805c4.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        50.96.152.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:77:44:84:54:11:6d:64:61:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=bbdfda32-3c06-437b-a58f-b844d0ea3b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:d9:fd:0e:a3:70:61:ac:34:21:eb:22:46:
                    dc:be:81:27:61:ec:f9:07:5e:bf:c0:2e:a1:01:1a:
                    93:43:eb:6d:b1:39:94:82:75:f7:bd:42:1b:d9:15:
                    cf:1b:1f:17:c1:00:f2:24:ce:f6:d8:f3:db:c0:e7:
                    71:09:7a:30:98:60:d3:a3:f0:89:6e:4a:a4:78:13:
                    d3:a0:ad:12:8a:0c:75:18:5c:45:6f:32:aa:60:43:
                    e3:8d:20:35:3e:7a:47:5b:2e:6f:0c:9c:81:fc:dd:
                    63:88:f3:f6:50:11:5b:b1:64:e6:55:53:84:e3:92:
                    85:a5:3b:6b:a1:f4:1c:56:f5:b4:42:95:80:6a:83:
                    08:75:a9:33:1c:3e:9c:94:68:14:c7:eb:ff:20:1c:
                    02:50:fa:d7:2e:5f:cd:ae:52:ea:6f:8e:91:02:87:
                    de:5c:ee:e7:06:56:eb:0f:4f:5f:26:77:99:8a:ac:
                    78:f6:8f:27:8a:7b:26:f3:14:5d:2a:be:a5:96:c7:
                    0c:47:e0:11:0f:d4:93:38:82:b1:27:87:c6:bb:70:
                    e0:fb:2f:52:2a:50:5c:53:85:5a:b3:f3:93:14:53:
                    af:02:ce:e9:09:e7:f2:af:46:57:32:fa:52:f5:b5:
                    32:14:1c:ca:ea:61:a3:64:25:1b:51:29:04:24:b6:
                    e4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:F6:00:44:E9:A0:6B:C6:7A:0A:7B:53:0C:92:D8:19:09:17:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/710f2894-dbed-3b99-9816-aa4a70b805c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:da:52:72:16:75:be:d2:b8:d1:d7:e6:ae:a1:cb:98:e8:
         18:05:3c:bf:f8:53:c5:7e:79:ca:b4:1a:4c:8e:4d:9e:81:ae:
         69:c4:78:3b:b5:59:08:0b:6c:ca:b6:2b:fc:f1:d3:2a:d4:54:
         3b:01:d7:45:7d:c5:92:d3:cf:b2:4e:a5:c9:2e:4b:da:54:f0:
         34:b9:b7:34:e8:fb:7c:34:97:a2:4a:5e:0c:8f:7e:bc:6f:6b:
         03:69:81:6b:98:2a:56:d8:dc:62:a7:4c:e0:c1:ba:96:30:49:
         04:79:03:52:cd:26:9f:bb:85:0d:4a:04:ce:3c:ff:3d:f7:17:
         3c:2f:23:57:6c:a3:9c:dc:1b:03:d6:5f:7f:59:28:22:83:bb:
         75:11:5f:65:73:c1:75:92:ce:79:00:e5:c7:92:f8:66:6d:55:
         4d:a6:eb:31:e1:05:af:ca:70:17:8e:8a:a4:38:25:03:c8:bb:
         ed:19:c6:40:e2:cb:a3:4b:f5:f9:12:c4:79:85:d7:fd:ce:d0:
         0f:26:7f:06:02:71:f6:85:3f:7a:c0:84:85:2a:84:48:ea:fa:
         fc:55:3c:58:18:21:75:c0:9b:7a:a8:f2:a6:d5:42:7b:bb:c0:
         ed:a1:bc:32:36:94:5a:90:b3:85:cd:47:a1:df:fa:ef:06:ce:
         8c:de:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:43:04 2025 by rpki-client