Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa
File:                     c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa (raw, json)
Hash identifier:          41muV7DjmxZykf1NZoQ2aXZJrfMc+8+7sbpwSjVHyN0=
Subject key identifier:   47:96:2F:FD:D0:53:2A:BA:8F:A9:81:3D:75:48:D1:64:26:15:2D:FA
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F432858488815EAB1138467AD6D00EA00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     19637
IP address blocks:        192.19.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:ea:b1:13:84:67:ad:6d:00:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=32c32777-2a5a-4b3b-8c73-326bf57a2555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:09:8a:a0:7c:61:4f:13:9e:f1:46:ad:26:
                    8a:8d:a8:73:fa:ee:5e:9f:53:7b:0e:82:e5:34:11:
                    54:5b:f1:5a:2e:9a:e6:7f:cd:e5:b2:bf:08:cc:02:
                    75:20:27:71:57:58:ed:0c:00:eb:73:8c:99:fa:19:
                    e5:19:1a:9e:a1:6e:b0:88:bd:0d:d7:4e:61:7c:45:
                    5e:e0:72:85:f1:a9:c7:75:60:d8:17:fc:a1:58:97:
                    27:49:51:80:f5:20:1e:e7:23:dc:5d:73:40:1a:3b:
                    29:bf:d2:3d:01:c4:94:b5:fa:d7:32:e2:26:87:6a:
                    fe:55:63:94:82:a9:d1:7a:97:d9:d0:75:2d:cf:d4:
                    29:7f:d0:7d:c7:f7:fd:69:f3:6f:3c:2a:37:bf:3e:
                    43:d0:15:15:9e:9b:b5:bb:bb:3a:3d:a7:34:0e:cb:
                    59:a6:7e:b4:84:74:61:aa:70:4a:b7:61:d3:a8:0a:
                    c3:72:5e:17:2d:22:1d:8d:7e:7d:ff:2a:4e:10:81:
                    ad:d7:be:6f:bc:c1:5f:22:6b:1d:69:04:9c:c3:d4:
                    45:44:20:dd:5a:a5:3c:f5:a7:d7:6f:bd:4f:b6:f2:
                    27:5d:89:42:81:9f:99:7b:eb:1c:15:22:5a:c4:92:
                    6f:d5:6b:01:8d:21:3a:0e:03:98:d2:9f:eb:65:bf:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:2F:FD:D0:53:2A:BA:8F:A9:81:3D:75:48:D1:64:26:15:2D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c322ae6e-38c4-35eb-bb0d-fd4417d6bdb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:26:2d:f1:47:f5:c7:49:a1:b3:94:54:9a:88:76:2a:a6:c8:
         a2:17:6a:13:0f:2a:8b:e8:ac:5b:b4:b5:a8:34:2d:d1:e0:ea:
         67:3d:aa:7c:54:2b:d8:e5:c7:18:23:7d:d9:64:6c:b4:ba:d9:
         a3:32:da:5b:00:95:ca:5a:7e:42:b7:bd:48:ec:93:11:5a:32:
         85:c3:1e:71:98:55:9f:2b:98:3c:39:4f:79:82:2b:65:8b:cc:
         1c:cb:0c:2a:2a:69:53:18:68:19:c4:0c:8a:65:9a:1c:5b:fa:
         1d:b4:a3:73:c5:8b:18:cb:73:04:de:d6:43:f9:c1:91:26:33:
         4d:f8:2a:a9:3d:82:00:23:ff:b0:d7:17:d9:43:e3:07:05:e5:
         c1:98:18:77:ed:97:a4:4c:8e:0d:e7:e7:ab:7d:d2:6a:3f:9f:
         19:ec:20:b6:77:8e:b0:4d:31:68:09:ff:e3:00:42:1a:37:11:
         93:fe:bb:4f:fa:ad:05:42:d7:6b:ec:d7:f0:04:76:71:53:33:
         59:3f:22:34:11:6a:b5:03:80:14:b0:5b:8b:e5:7a:58:0a:b5:
         c9:d2:83:48:95:97:e1:6c:50:ca:a3:63:b8:24:dc:fe:8c:72:
         74:ac:df:66:36:1c:48:96:74:31:21:1b:42:07:f7:bd:82:96:
         7d:b7:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:49:24 2025 by rpki-client