Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
File:                     2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json)
Hash identifier:          /n7aa8kgiwGgYIHV5pZGQ7//hjKhPEZ11qEAmtDJU+U=
Subject key identifier:   A8:D4:92:50:DE:09:11:8E:28:D1:4E:40:AA:66:13:86:9C:10:95:52
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858485F9ADED28BF4A7393E092A00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     29802
IP address blocks:        162.220.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:de:d2:8b:f4:a7:39:3e:09:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=638d448b-1d6b-4c5c-94b4-23f3c03db5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:84:a5:0d:f5:1b:81:74:a2:2e:de:c1:90:
                    3d:d6:e4:f4:72:00:3b:76:fd:8d:24:ce:ec:33:6f:
                    d1:82:60:b6:cd:13:ad:b3:20:02:de:91:53:5d:26:
                    10:0d:7d:93:dd:6d:a8:21:3e:1d:6e:14:7a:96:cf:
                    55:d3:d9:ea:94:8e:64:47:af:d2:c1:19:94:8c:be:
                    ab:01:36:aa:28:52:a7:fa:49:2a:21:2c:7f:c1:ed:
                    ac:2e:d5:6f:aa:be:c0:23:2a:44:3e:05:41:8e:22:
                    ec:99:b8:0b:bc:d6:93:73:eb:e0:f5:7b:05:e2:87:
                    80:31:4e:d4:bc:ce:1c:5c:d2:ec:42:5c:c8:fe:ca:
                    fd:6d:bc:45:cb:62:1f:2a:44:bb:48:18:f8:02:b4:
                    3b:b9:1b:2e:5c:08:b6:34:d3:68:25:80:1c:c4:7a:
                    f2:c7:ba:a5:37:e3:8a:17:6d:e8:de:2b:da:2d:2a:
                    ec:21:43:12:8b:33:64:89:ca:60:6c:d5:4f:25:cb:
                    59:6f:08:2d:a0:43:cc:3a:9c:74:9b:ef:98:11:30:
                    95:54:6d:11:4d:c3:09:b9:9d:a3:62:7f:5e:fe:94:
                    a6:ed:2c:54:18:15:2f:c9:13:24:4f:f8:ba:4f:39:
                    eb:80:1c:ed:e9:d7:52:ae:b9:e0:b6:0e:f1:56:5f:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D4:92:50:DE:09:11:8E:28:D1:4E:40:AA:66:13:86:9C:10:95:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4e:f4:01:48:f7:9f:03:d3:fc:73:e9:0a:de:e1:75:e5:d6:
         30:00:01:6d:cd:e6:37:28:c3:1f:97:28:30:e5:45:2f:f7:44:
         e9:c9:e3:de:60:73:fb:55:11:86:32:d7:6e:59:0f:3a:6c:05:
         c8:31:af:32:92:d8:e2:8e:6e:ab:fa:05:de:81:47:a5:60:49:
         a6:c4:28:47:d8:2f:09:ff:6b:81:1a:1f:a7:5a:c3:2b:87:01:
         fe:e1:38:a4:89:00:e5:d1:ad:c3:6d:cd:89:c0:ff:fa:e4:cf:
         03:cc:55:b6:4c:1c:30:5a:62:4c:ae:6a:42:82:d9:d0:b3:48:
         c7:fe:80:0a:be:61:ef:0c:ef:99:9b:0d:bb:e7:ba:a5:5a:98:
         ca:18:cc:2b:8a:e6:b0:70:9b:0d:65:60:9e:24:7f:92:80:e1:
         ba:ee:d7:59:20:d4:16:c1:1a:6e:36:17:9d:1d:33:c7:e7:1e:
         8c:f1:4d:d6:6c:fc:2d:d8:52:d6:e9:e6:1f:5e:32:71:80:b8:
         4b:c1:ea:1f:d5:97:19:6e:62:72:1f:eb:29:02:72:09:8c:67:
         3a:9d:f4:67:1c:39:9b:a2:43:91:00:c2:0b:54:65:3d:8b:f6:
         51:fa:9e:1b:b0:6a:36:f4:eb:12:d2:fa:70:f4:37:d6:ad:36:
         4a:c3:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:32:39 2025 by rpki-client