Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bd261ad-9854-3464-be0c-e0866d46b893.roa
File:                     3bd261ad-9854-3464-be0c-e0866d46b893.roa (raw, json)
Hash identifier:          HRQ27NurwVrH1uEfK5s96t5C7bhbN1G7y9JW8NvmRlY=
Subject key identifier:   AA:6B:D6:88:D7:5E:97:08:07:68:07:45:C0:B6:8C:E9:D4:B2:A2:DD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F632506A3E9200B9E7BFE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bd261ad-9854-3464-be0c-e0866d46b893.roa
Signing time:             Wed 05 Feb 2025 11:08:48 +0000
ROA not before:           Wed 05 Feb 2025 11:08:48 +0000
ROA not after:            Tue 06 May 2025 10:08:48 +0000
asID:                     30036
IP address blocks:        50.82.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f6:32:50:6a:3e:92:00:b9:e7:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:08:48 2025 GMT
            Not After : May  6 10:08:48 2025 GMT
        Subject: CN=c3175b26-0263-4ed6-a0b6-a849a6e803c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:e1:f3:a1:15:82:3b:05:0d:29:cd:32:07:
                    ae:ad:72:9e:3f:bc:8b:89:17:fb:b6:be:e9:09:45:
                    e5:62:f7:89:a0:b4:04:0a:fa:1e:7f:ce:26:47:34:
                    f1:e5:cc:08:46:e4:1c:da:a0:39:63:7e:38:ad:06:
                    ab:83:fa:71:08:a0:7c:03:fc:9b:e2:77:fc:75:a1:
                    c9:85:18:d3:6b:53:47:c9:6d:ba:84:81:dd:4b:c3:
                    ca:fe:d7:ac:60:26:e6:7c:75:d0:e1:a7:80:34:31:
                    6f:1c:41:28:24:45:f4:99:44:b1:1b:81:8e:5d:7e:
                    9b:ea:b3:00:cf:41:89:73:a9:4f:79:c1:c9:bf:25:
                    6d:5b:3c:87:e9:a6:68:18:a0:c1:d7:a0:af:93:bd:
                    9a:f0:10:67:05:f0:29:c8:4b:8d:fb:ce:49:82:49:
                    b4:6e:9b:1f:10:1c:0c:8d:92:f1:64:b8:ac:be:7e:
                    32:6b:06:5a:0b:b7:08:09:d3:ac:23:56:26:59:7d:
                    9f:a5:b5:4e:35:f1:f5:df:d5:84:1b:5b:1e:77:51:
                    fc:4c:2b:6a:a6:a9:2d:7d:63:f4:14:38:55:aa:a1:
                    ed:c9:57:dc:50:c7:40:6a:d1:6f:c5:d6:45:f8:df:
                    80:62:ad:33:98:79:ef:ca:b0:53:67:15:3f:e6:9d:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:D6:88:D7:5E:97:08:07:68:07:45:C0:B6:8C:E9:D4:B2:A2:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3bd261ad-9854-3464-be0c-e0866d46b893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:aa:77:d7:11:e1:ca:fd:76:c5:2f:9c:ff:d0:e0:06:0f:
         54:26:d7:c8:d7:ba:15:d0:41:ab:e9:e4:51:11:5d:ab:12:c9:
         f5:65:87:33:81:47:f8:eb:58:cf:1d:ff:7d:2c:6f:66:0b:ba:
         fc:73:77:56:d9:cb:6f:ee:19:66:1f:28:2b:76:ea:fc:16:8c:
         95:11:7a:ab:0d:8b:0a:a7:ca:52:2c:a6:12:63:aa:e7:9b:82:
         f0:fe:de:d9:2b:97:fb:fd:97:f3:3a:c0:29:ab:f4:aa:00:08:
         f7:71:34:44:8f:5e:16:be:5c:42:81:1a:c7:33:0a:d7:5b:bc:
         74:c4:c6:c6:9b:88:55:0d:52:e3:53:4b:5a:8a:2c:ce:cc:76:
         01:01:1c:67:d7:a3:9b:89:87:f5:72:b5:af:d0:56:d1:db:16:
         49:71:14:9e:32:9d:ac:23:a0:9c:e7:c2:9f:7a:d0:e9:c1:70:
         94:60:77:38:2e:4d:f3:50:36:59:79:3f:65:25:a6:3f:34:88:
         49:a7:60:c9:83:29:c3:e8:b9:94:86:bf:14:cd:b3:66:f6:c5:
         f5:ac:ca:f8:36:21:8e:2c:b7:0e:2c:a5:c5:5e:19:01:36:2f:
         1b:75:9a:ba:51:0a:0f:5c:32:54:26:b4:85:ed:27:b9:1a:8c:
         2c:5e:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:26 2025 by rpki-client