Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/531d4bc7-9a21-34bd-9766-14d008c87250.roa
File:                     531d4bc7-9a21-34bd-9766-14d008c87250.roa (raw, json)
Hash identifier:          QhKC9AuO32Z7qE7sVbq1PRsSwqEuC1164Cvn3t8juAQ=
Subject key identifier:   7D:41:C6:C2:DF:D1:79:A1:5E:E5:EE:63:EF:77:65:5E:8C:06:07:12
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858486695B95EF2864CF0F2C7E900
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/531d4bc7-9a21-34bd-9766-14d008c87250.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     29802
IP address blocks:        199.193.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:b9:5e:f2:86:4c:f0:f2:c7:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=d61cc638-1119-43d1-80a3-bbf7040d3a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:e1:4c:1a:47:d4:65:6b:ff:9f:60:95:81:
                    1e:b8:de:3e:62:d1:2f:4f:b4:b4:60:dc:37:d6:58:
                    f8:b1:6f:fb:f4:2c:59:a5:1f:d1:eb:be:32:30:44:
                    42:82:af:0e:86:a9:ab:7f:c5:ab:39:35:26:b4:c2:
                    76:65:cf:92:02:62:60:bc:50:25:0d:bd:0f:03:28:
                    f2:1c:83:bb:55:7e:3d:30:02:78:04:4d:90:0e:24:
                    76:48:fc:2b:ff:e9:c9:c9:b8:17:86:3d:a0:a9:47:
                    1a:b0:f6:86:62:c1:54:69:75:98:1a:d4:2e:49:57:
                    c0:3f:a9:cc:c1:ad:47:58:21:8c:6d:61:b5:61:8e:
                    2a:77:e7:98:04:59:5b:f0:78:e6:72:cf:53:f6:35:
                    18:82:64:c2:5d:74:cb:04:5a:ef:1d:e9:a4:a2:07:
                    96:20:aa:d8:dc:16:ea:33:29:cc:1c:4b:75:49:f3:
                    ff:1c:1e:2e:f2:ee:8f:8f:83:80:60:ac:fe:02:d6:
                    95:8b:d0:15:d0:45:93:11:c3:90:51:69:f3:18:68:
                    15:bb:2b:c0:53:19:e3:32:93:22:8c:70:87:c3:ee:
                    ea:0a:4b:0c:e8:6f:be:6e:82:8e:b1:fb:ae:d1:86:
                    88:12:7d:d7:f8:3b:c8:94:a9:31:d9:cc:bc:8d:5a:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:C6:C2:DF:D1:79:A1:5E:E5:EE:63:EF:77:65:5E:8C:06:07:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/531d4bc7-9a21-34bd-9766-14d008c87250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:77:db:75:8f:ae:a0:49:7b:42:bc:2a:58:83:c5:1d:e7:
         bd:c2:59:1a:1d:ef:91:d1:34:2f:35:9b:12:16:25:42:e6:23:
         b5:78:f4:f9:d1:ea:6d:6b:20:f2:ff:48:1a:91:7f:7d:04:4e:
         e7:76:26:e0:5a:23:ca:3e:b9:7d:a8:2b:f2:ca:e0:d4:6e:9c:
         69:70:d9:b3:2b:5c:96:d1:88:77:55:59:27:02:18:da:fe:4a:
         9f:f6:c4:ce:e2:63:5a:21:b3:8f:80:6f:12:51:ca:bb:b8:94:
         31:df:7c:ce:da:1a:ee:2b:c0:7c:07:aa:df:b3:57:45:96:72:
         f8:77:a4:65:ec:d5:ed:3a:55:0d:6e:54:6d:7b:d7:bf:f0:6d:
         e7:81:9a:44:4e:95:90:06:58:c2:b0:e4:31:31:56:a2:de:7c:
         45:1a:ba:91:15:a9:5e:8b:9d:be:86:ec:ff:7b:46:4e:bb:2b:
         7c:0a:9e:ca:49:36:a8:15:71:80:35:77:6e:5b:d7:b3:7a:1d:
         c2:61:68:12:16:f8:08:b4:f7:6b:b3:ba:78:c2:ea:7e:76:03:
         8e:ef:50:b8:7d:df:48:18:83:e6:cc:ab:21:c5:b5:ea:21:25:
         ae:20:ca:18:dc:d6:f8:c6:3e:e4:31:77:9a:66:d0:9f:53:85:
         d1:24:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:59 2025 by rpki-client