Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/64d00f53-fb7e-316c-940d-84ea62ffb328.roa
File:                     64d00f53-fb7e-316c-940d-84ea62ffb328.roa (raw, json)
Hash identifier:          vKfegosHALiq6lv9qlfW5Lv5bEJ+QTwiWfReW4AAzxs=
Subject key identifier:   55:B4:2E:AF:F0:BA:EF:FB:ED:B3:32:CF:F8:9D:CE:11:DB:B5:B7:70
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F43285848143A7B0DB66C4AD17D15EB40
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/64d00f53-fb7e-316c-940d-84ea62ffb328.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     20055
IP address blocks:        50.34.0.0/15 maxlen: 15
                          50.46.0.0/15 maxlen: 15
                          50.125.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:7b:0d:b6:6c:4a:d1:7d:15:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=79a2ac85-df74-4a0d-98eb-6c3b963114f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:60:4a:f1:11:79:31:83:f1:d4:c8:72:30:
                    5f:7c:47:a7:93:52:8f:73:0b:d3:f3:b1:33:2c:a2:
                    1d:cc:9c:5f:04:6a:fc:8e:89:e5:2c:90:0b:56:a2:
                    f2:10:18:fb:ae:c8:f4:cc:88:6b:84:ad:5c:d5:7a:
                    32:cf:26:ad:d8:37:27:66:9d:c8:95:3f:20:4a:c3:
                    c1:57:14:42:8f:e5:67:7b:41:94:66:ce:bb:d4:20:
                    b4:7d:aa:60:65:53:ee:3e:2c:8a:8a:34:63:51:6f:
                    1c:fe:34:86:9a:c5:42:b9:24:24:a6:18:ec:58:65:
                    61:60:f2:dd:9f:31:cd:8b:f0:46:12:1c:e6:cc:e6:
                    fa:1c:21:e0:30:9c:d8:26:5a:a7:b7:25:bd:b8:81:
                    88:c6:25:8b:77:c0:d8:71:73:4a:71:08:34:25:89:
                    8d:55:9e:84:74:48:f2:d1:6f:1b:00:f6:08:df:df:
                    4d:c5:aa:9b:21:20:55:ca:c2:d1:33:97:97:19:9a:
                    cb:5d:84:35:fe:1d:3c:21:c8:e8:de:35:84:80:4c:
                    80:e2:c8:e5:ce:80:0e:bf:dd:1a:b8:88:a1:0a:d1:
                    c2:0e:f7:86:c1:5b:a7:26:e2:ac:93:e8:33:92:01:
                    31:7c:90:cf:4a:70:d4:af:4d:2a:c8:8d:05:36:0a:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B4:2E:AF:F0:BA:EF:FB:ED:B3:32:CF:F8:9D:CE:11:DB:B5:B7:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/64d00f53-fb7e-316c-940d-84ea62ffb328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.34.0.0/15
                  50.46.0.0/15
                  50.125.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e3:f1:0b:24:c5:e1:8d:fb:2a:5c:18:5f:5d:ab:71:b2:25:
         50:bb:bc:c6:90:0a:22:9d:52:cf:c0:17:d0:24:df:63:76:e1:
         29:65:4b:06:a8:dd:2e:6b:b7:28:f1:16:9c:df:45:99:75:46:
         e1:7d:ec:da:81:be:ea:9d:85:4c:b0:3b:6d:3a:96:c4:4e:8e:
         6c:78:1a:a5:c8:3d:f5:c6:05:dc:61:26:e1:7f:d2:3e:f1:6f:
         3b:90:66:ab:9c:c5:73:e8:7e:38:7c:bf:ad:6d:4c:0e:c5:5b:
         31:8c:98:76:21:c6:25:ab:7c:e3:c9:39:99:c3:a7:2f:c2:fd:
         51:e4:d7:34:45:a4:b5:aa:2a:27:4e:42:31:cd:3e:99:08:15:
         79:b1:65:9d:16:31:eb:b2:36:c7:73:ed:54:ce:1e:5b:13:4c:
         8a:7d:63:5e:e5:60:03:df:f7:cc:31:c6:72:29:c4:c2:37:a6:
         5a:46:ae:2b:6e:be:04:55:cb:72:c6:92:c6:a7:29:cf:71:8a:
         c5:d1:a6:ba:10:f8:88:53:84:f9:d1:ab:17:a1:f8:dc:64:63:
         92:da:53:4e:89:34:2d:a6:af:7f:b0:50:91:1f:a2:79:67:66:
         f8:f6:4b:69:76:a3:10:4d:ee:be:42:04:b3:fd:d3:25:a9:c0:
         4e:ed:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:27:06 2025 by rpki-client