Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6207a278-121b-30b9-965e-9c78527727e0.roa
File:                     6207a278-121b-30b9-965e-9c78527727e0.roa (raw, json)
Hash identifier:          nYD6ZeNzEKweVEwGbnRjXGVs2gxLQilP+R+ygoFFXHs=
Subject key identifier:   AA:47:31:2F:40:AB:A9:0F:86:93:B2:D5:71:DD:15:99:C0:65:34:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D549F88B225D965C08820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6207a278-121b-30b9-965e-9c78527727e0.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33490
IP address blocks:        50.228.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:54:9f:88:b2:25:d9:65:c0:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=b6d44a60-e39d-4393-9ab0-ca2670d930b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:8d:f3:92:f3:7c:d4:95:e8:3a:45:5b:0f:
                    51:b7:9f:8a:0e:f6:bd:63:e7:c8:71:de:44:37:a7:
                    57:3e:c3:a7:22:c5:2b:b5:b2:3c:85:c4:e7:4a:c5:
                    3d:01:59:b1:fe:53:38:ec:43:9e:fc:3a:d9:35:0e:
                    2e:fb:b2:32:2a:59:43:dc:e3:13:5d:e4:63:91:c6:
                    a3:4b:18:b3:b8:a3:28:52:50:b4:86:c3:d6:b6:85:
                    19:68:3b:75:e5:14:a0:aa:6c:0e:9f:c4:f3:a7:8d:
                    44:c0:71:9b:aa:e6:51:fe:e0:ef:da:8c:e7:3f:db:
                    b1:d3:8a:7b:99:bd:cd:d5:5d:21:03:b3:d9:20:7e:
                    14:18:ca:19:46:92:d5:40:57:ab:4c:50:d3:ad:f6:
                    a9:20:2a:fc:0b:e9:80:ae:48:e9:67:9e:e6:5e:bb:
                    8a:f5:59:3a:8c:08:ca:58:6b:34:10:16:83:04:63:
                    c4:47:e6:14:74:06:11:ee:6f:2e:a4:61:19:51:11:
                    81:c4:c7:32:5e:eb:98:0d:90:a6:78:54:be:e7:05:
                    03:9b:26:f7:38:02:17:b0:e9:38:cc:4d:be:b7:82:
                    03:f7:9f:2f:3f:00:97:8a:da:0f:8b:07:1c:22:37:
                    9d:c1:90:1c:74:b5:30:f2:e3:0f:7c:8f:60:db:0f:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:47:31:2F:40:AB:A9:0F:86:93:B2:D5:71:DD:15:99:C0:65:34:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6207a278-121b-30b9-965e-9c78527727e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.228.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:d3:a1:27:1c:0b:be:b9:6a:4f:55:23:7a:89:4b:33:be:
         0e:a9:b9:ba:09:20:77:20:5d:af:8b:38:73:a3:23:e0:ff:8c:
         8d:13:fa:de:ed:64:33:4b:34:cb:e8:23:25:83:e9:c1:fb:83:
         54:e9:e9:c4:cd:ae:72:74:a9:54:b0:a7:d7:0f:a0:bd:57:05:
         e9:93:db:0c:54:b0:2c:56:11:06:63:c1:49:91:04:92:82:7a:
         07:ab:2a:ff:25:51:55:54:2e:80:15:34:42:ef:1b:0a:2b:1f:
         d6:a0:b1:3e:72:6a:a6:09:75:da:ff:61:53:32:55:80:be:a5:
         5e:47:6d:87:45:6b:95:98:11:cc:57:d6:85:fe:7e:19:03:2d:
         eb:e5:a3:b6:d2:3e:14:0f:ed:70:1d:10:52:83:d6:c9:77:ab:
         67:c0:78:0e:b0:18:73:5e:6d:3b:9d:54:5b:bc:7d:0d:72:73:
         72:92:9e:e8:0f:1e:0d:ab:cf:09:d5:a6:b2:be:72:7e:62:68:
         80:63:17:ae:d8:91:98:dc:4b:00:4c:48:13:bf:03:6e:47:19:
         34:13:a6:fe:4f:0e:fd:26:15:2d:75:e1:20:5d:95:90:e0:d5:
         d6:e2:7c:67:ba:91:d0:95:aa:0d:49:e6:ef:29:f5:97:c0:49:
         a6:ec:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:49:01 2025 by rpki-client