Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4febefcb-d254-3d70-98be-f2b571e1bb2c.roa
File:                     4febefcb-d254-3d70-98be-f2b571e1bb2c.roa (raw, json)
Hash identifier:          Ah5IHAlLMbf7vKXQYxzl2iHGuBN+Sh5jlbhMa9B0ZGs=
Subject key identifier:   97:57:7F:2C:BB:F2:65:3E:50:02:C8:53:70:FE:00:09:8B:33:01:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F6C6E46FDD2E8F6D706780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4febefcb-d254-3d70-98be-f2b571e1bb2c.roa
Signing time:             Wed 05 Feb 2025 11:09:58 +0000
ROA not before:           Wed 05 Feb 2025 11:09:58 +0000
ROA not after:            Tue 06 May 2025 10:09:58 +0000
asID:                     30036
IP address blocks:        50.82.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f6:c6:e4:6f:dd:2e:8f:6d:70:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:09:58 2025 GMT
            Not After : May  6 10:09:58 2025 GMT
        Subject: CN=97712997-1adf-4eaa-a5cc-2f6a59b42c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:24:8f:3d:03:5b:c3:aa:22:a8:e7:96:4b:
                    56:9a:bd:6d:93:3a:ac:76:ad:c6:57:7c:3a:85:38:
                    90:64:ab:ca:8a:ec:51:d3:02:2e:1c:49:fc:26:65:
                    4a:e7:3b:0f:d6:5f:9c:de:70:76:68:a5:a8:82:d1:
                    55:9a:18:70:db:fe:c5:46:a8:0f:e1:ea:3f:c7:12:
                    32:29:b6:f9:67:44:64:ba:6e:9b:fa:24:b7:36:dd:
                    eb:3b:5f:45:63:7a:95:ac:6f:d2:14:6f:2d:db:c8:
                    37:d6:dd:9b:8b:3d:57:a8:eb:80:4a:98:ec:e1:2d:
                    e0:9a:84:e8:a8:29:f2:34:57:58:33:b9:ca:6c:f0:
                    16:4f:d9:0f:91:e6:79:e9:48:ab:d2:85:f4:1a:58:
                    62:6d:44:fe:94:f2:2c:a3:f3:f0:af:f7:9f:e3:64:
                    6e:38:17:42:c4:5e:ed:d7:8e:be:f1:d6:11:c7:25:
                    09:13:90:be:94:55:bd:83:06:0c:18:df:cb:bb:8a:
                    94:f8:a6:cd:1e:ff:76:f0:cf:79:02:5e:9f:7d:b5:
                    01:f7:4f:55:27:5e:a0:77:9a:e5:8c:56:95:86:0e:
                    46:4f:f8:23:86:69:e5:6b:ad:e5:03:90:44:d5:d5:
                    99:7a:02:3f:aa:49:54:ed:f7:11:3d:5e:c3:3a:09:
                    50:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:57:7F:2C:BB:F2:65:3E:50:02:C8:53:70:FE:00:09:8B:33:01:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4febefcb-d254-3d70-98be-f2b571e1bb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.82.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:61:df:c2:dc:c1:99:0b:dc:ac:16:dd:06:43:59:8d:78:
         2a:e9:2a:04:4e:55:25:ca:2a:a0:4d:e8:5b:bf:7c:36:e7:ba:
         11:b6:85:fb:a4:e1:73:de:c5:cf:a2:e1:f3:2c:ef:a4:38:f2:
         bf:2d:9c:2a:00:45:c8:02:e5:60:51:ea:91:27:ae:b8:71:b5:
         bf:f7:bb:dc:f8:c3:ae:79:c6:d6:5c:e3:f3:ba:47:7a:bc:0e:
         1a:d2:f5:5f:7e:8f:c2:3d:26:c5:dd:f5:28:f7:bc:57:68:a3:
         9e:ce:71:35:3c:d3:18:fc:1c:68:20:a4:d1:47:b4:4d:83:8a:
         bb:8e:2a:79:25:1c:d7:e5:7c:f0:20:1d:99:c1:99:ea:30:b1:
         6c:5d:18:fe:ed:e4:f3:dd:e3:ca:17:46:71:2c:33:2e:a4:ff:
         e5:c9:c4:3b:9f:62:0d:e4:39:e4:06:a6:f5:8c:7d:7f:cb:07:
         6c:b2:26:2b:d6:f9:68:3a:7e:d5:2a:59:58:42:3b:77:76:c4:
         d6:e5:33:ac:8c:e3:96:8c:08:5f:b9:c1:93:ba:62:44:bb:31:
         ef:84:ad:d2:01:89:1b:88:e2:56:3b:0c:4e:8f:30:e5:f6:99:
         8d:be:23:a6:8b:af:c3:23:f2:0a:03:7a:3a:3c:0a:31:15:21:
         c1:10:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:19 2025 by rpki-client