Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4a27a86-031a-35b5-872a-ce69ea5df090.roa
File:                     c4a27a86-031a-35b5-872a-ce69ea5df090.roa (raw, json)
Hash identifier:          otahPf/yxcrvoLxEnZZn4cHqoERlRfPULPoVN7b5WYE=
Subject key identifier:   F1:20:EF:0A:73:5F:7D:A4:B8:B4:A0:17:6B:45:A7:EA:E5:D8:CC:C7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213426639908A30276292C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4a27a86-031a-35b5-872a-ce69ea5df090.roa
Signing time:             Sun 09 Mar 2025 10:20:35 +0000
ROA not before:           Sun 09 Mar 2025 10:20:35 +0000
ROA not after:            Sat 07 Jun 2025 10:20:35 +0000
asID:                     577
IP address blocks:        50.100.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:26:63:99:08:a3:02:76:29:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:35 2025 GMT
            Not After : Jun  7 10:20:35 2025 GMT
        Subject: CN=77003655-0fc5-4efe-8cf3-a3c1c58b22df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:47:22:4a:14:64:50:8d:f8:5e:70:2f:fc:
                    3c:ad:4c:ed:89:a0:53:c4:b8:29:30:0d:5a:37:31:
                    87:7d:b3:48:6e:4d:3e:6e:6f:b7:0b:e0:df:a0:06:
                    cf:98:9e:98:5c:f8:b0:e2:62:be:c8:55:ea:c2:25:
                    ed:3d:9d:e3:bf:f8:52:e9:dc:67:6b:cd:36:b3:d2:
                    be:98:a4:89:e8:1c:bc:fd:07:1d:d2:a6:68:4b:f4:
                    a7:95:e4:91:d9:10:72:ce:9e:f5:43:4f:83:d6:2e:
                    cb:98:93:03:0b:bb:6a:32:cd:83:27:70:9c:73:4f:
                    d9:49:b7:03:8f:a3:b8:72:f6:60:67:62:39:8b:2a:
                    91:51:ec:a7:df:37:42:c7:a9:f7:33:be:4c:42:4b:
                    50:40:05:0a:c7:31:5e:67:e8:b5:16:dc:84:eb:e7:
                    41:54:8e:2a:46:91:18:84:2b:ee:f5:71:11:ff:1a:
                    6a:1b:99:b1:53:d8:41:82:b9:94:56:1a:26:fe:ff:
                    57:1e:d1:8f:41:18:d4:76:e3:19:09:83:ff:b6:d5:
                    6f:a2:97:c1:d8:73:78:67:29:2e:69:c0:02:dd:fb:
                    99:27:a8:4a:8e:82:8b:b1:6f:11:aa:24:ec:8e:f9:
                    bb:3f:9a:12:44:ce:da:61:c1:5b:46:ff:af:5f:be:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:EF:0A:73:5F:7D:A4:B8:B4:A0:17:6B:45:A7:EA:E5:D8:CC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4a27a86-031a-35b5-872a-ce69ea5df090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6f:6a:5b:5f:d8:e1:7f:c5:f1:6b:6c:f2:b8:a7:62:eb:4b:
         b5:a2:60:51:01:27:b5:af:6e:47:8f:81:f1:d8:ed:8e:5c:32:
         28:e3:ea:38:7a:03:3d:cc:aa:24:90:3d:e3:68:93:41:f7:ee:
         5e:f7:35:92:a2:9a:4f:f1:02:a7:cb:21:a3:8c:aa:a8:a4:21:
         46:35:d0:f3:9d:d3:bb:8e:ce:2f:66:ff:d0:8c:75:79:96:2e:
         14:2d:e0:de:42:a0:b6:ab:9c:d8:b6:65:fa:2b:4c:e3:fe:32:
         39:3f:dd:50:8c:be:f7:08:57:6c:b5:39:86:5d:a0:7f:f3:92:
         59:cb:b8:ee:18:22:b9:a9:ce:b2:f6:4d:9a:64:4c:38:f4:8f:
         09:05:52:22:ba:e7:95:30:a7:05:51:bd:69:93:a1:01:14:26:
         52:4a:e5:6b:43:e7:f1:e2:c1:bf:13:1f:40:c3:43:f7:dd:86:
         01:b9:c2:bc:00:10:e3:f5:80:65:5a:79:4e:42:30:dc:69:f4:
         bc:ee:eb:c1:e8:fa:5b:c3:1c:89:41:2f:48:94:65:f1:74:c8:
         94:4a:a4:5f:4f:5c:7d:6f:34:92:bf:0a:ec:c6:9a:a5:15:e6:
         47:47:bc:cd:a4:7d:32:48:4a:07:b4:b3:0a:b2:f9:3e:87:f0:
         58:1f:ff:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNCZjmQijAnYpLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzNVoXDTI1MDYwNzEwMjAzNVowLzEtMCsGA1UEAxMk
NzcwMDM2NTUtMGZjNS00ZWZlLThjZjMtYTNjMWM1OGIyMmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1VHIkoUZFCN+F5wL/w8rUztiaBTxLgpMA1a
NzGHfbNIbk0+bm+3C+DfoAbPmJ6YXPiw4mK+yFXqwiXtPZ3jv/hS6dxna802s9K+
mKSJ6By8/Qcd0qZoS/SnleSR2RByzp71Q0+D1i7LmJMDC7tqMs2DJ3Ccc0/ZSbcD
j6O4cvZgZ2I5iyqRUeyn3zdCx6n3M75MQktQQAUKxzFeZ+i1FtyE6+dBVI4qRpEY
hCvu9XER/xpqG5mxU9hBgrmUVhom/v9XHtGPQRjUduMZCYP/ttVvopfB2HN4Zyku
acAC3fuZJ6hKjoKLsW8RqiTsjvm7P5oSRM7aYcFbRv+vX76sxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEg7wpzX32kuLSgF2tFp+rl2MzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzRhMjdhODYtMDMxYS0z
NWI1LTg3MmEtY2U2OWVhNWRmMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHMmSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZvaltf2OF/xfFrbPK4p2LrS7WiYFEBJ7WvbkePgfHY7Y5cMijj6jh6
Az3MqiSQPeNok0H37l73NZKimk/xAqfLIaOMqqikIUY10POd07uOzi9m/9CMdXmW
LhQt4N5CoLarnNi2ZforTOP+Mjk/3VCMvvcIV2y1OYZdoH/zklnLuO4YIrmpzrL2
TZpkTDj0jwkFUiK655UwpwVRvWmToQEUJlJK5WtD5/Hiwb8TH0DDQ/fdhgG5wrwA
EOP1gGVaeU5CMNxp9Lzu68Ho+lvDHIlBL0iUZfF0yJRKpF9PXH1vNJK/CuzGmqUV
5kdHvM2kfTJISge0swqy+T6H8Fgf/3Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:27 2025 by rpki-client