Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa
File:                     46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa (raw, json)
Hash identifier:          pnBFoLx8hB49B+WvM1piQZc1V9/MSM0XWxPtmzymnJg=
Subject key identifier:   48:68:20:E0:86:B6:F2:E6:FF:E9:DB:78:75:D5:26:A5:B6:31:F7:E4
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858485E35B11C9E18F986AAF0FA00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     29802
IP address blocks:        144.168.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b1:1c:9e:18:f9:86:aa:f0:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=e033e0f2-a43e-46bd-b2f9-b52b217b49b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:50:46:38:4f:07:a6:62:98:8b:1d:b5:38:
                    03:62:12:69:14:3b:60:93:9f:38:36:3a:21:57:b8:
                    29:7d:19:9d:4d:78:26:82:7f:55:5b:7e:e2:eb:c2:
                    a9:28:fd:85:ad:9d:e9:25:1d:99:78:41:f0:84:8c:
                    21:64:13:14:b9:4d:9d:a8:f2:9e:f8:13:33:85:47:
                    6b:03:09:5b:46:48:b9:f2:07:26:a8:38:c3:6c:02:
                    dd:d6:af:7a:e4:b0:4b:d5:78:70:a3:86:68:ce:20:
                    fe:1b:4b:b4:67:85:a2:cd:ba:16:6f:f7:bc:58:47:
                    5a:6a:2c:cc:04:fb:f8:5c:76:19:e3:74:c8:36:47:
                    1e:78:aa:41:de:f7:8b:2c:5b:fd:44:5b:62:1b:6e:
                    cb:8d:69:e7:1e:01:93:9d:9d:88:b7:0b:65:7a:36:
                    a5:0e:18:6e:f5:97:37:46:8f:7d:1c:a2:b8:60:e3:
                    67:74:05:72:9d:50:d9:e6:ab:fa:2d:14:0f:88:3d:
                    5a:6f:d9:49:5c:d3:58:84:d2:f9:08:80:7a:7d:b0:
                    b0:46:53:1b:72:7f:29:9c:26:5c:73:09:8d:1c:0c:
                    f7:4e:bc:82:01:a7:0e:b4:e1:40:97:1b:07:07:64:
                    5e:15:3c:3e:c4:85:4c:1a:de:c5:53:9e:2f:b1:bd:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:68:20:E0:86:B6:F2:E6:FF:E9:DB:78:75:D5:26:A5:B6:31:F7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/46b93f3d-a639-3dae-8125-e4ac0fcdf738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:9d:15:03:c5:55:25:66:9b:07:0b:60:4b:3e:98:49:80:
         83:a1:d6:43:9b:5b:88:44:47:91:25:24:28:bd:a4:da:67:4b:
         a7:0d:2b:a8:4a:8b:b1:fd:d7:bc:f4:4a:bc:e6:68:bb:07:40:
         7f:d3:93:08:52:c1:e8:a3:e9:17:3a:08:2c:f3:19:dc:fc:e0:
         63:02:59:28:b4:da:48:ac:e2:94:56:2d:ef:10:c0:a1:41:72:
         1d:4e:a4:40:25:0a:81:02:9b:72:31:77:80:e9:fc:e9:c8:3b:
         08:73:df:36:4e:d8:39:07:de:7b:02:c6:b8:81:62:70:0a:a5:
         b3:bf:82:1f:ce:db:15:47:ec:aa:41:c6:34:64:4e:77:e1:92:
         93:ba:1c:85:c1:74:df:f9:a5:ad:8b:c4:da:93:dc:2a:65:76:
         95:ac:e3:ac:d4:7e:66:cc:a4:ae:03:57:69:cb:ab:77:55:33:
         f7:af:3d:23:98:65:6d:08:7e:6f:13:85:93:a5:83:43:4c:1c:
         69:c3:f5:99:8a:25:dc:cf:9a:8e:0d:2e:8e:23:7d:98:9a:7a:
         e5:40:2b:1f:a8:9d:b5:5e:12:e5:05:34:23:5d:9d:6e:63:c3:
         e3:00:03:f2:c6:f5:0c:b2:94:04:79:e9:8b:68:15:c3:03:89:
         ec:16:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:05 2025 by rpki-client