Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a238ce3a-2d12-32fc-ae73-54b1a567a651.roa
File:                     a238ce3a-2d12-32fc-ae73-54b1a567a651.roa (raw, json)
Hash identifier:          /efOvX2qrIJXU6u+tdzTgq6psXQUgREOjfoLQgX18Mg=
Subject key identifier:   8F:D6:68:48:19:00:9E:7A:50:00:BC:76:84:34:8D:C6:34:28:47:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CD62EAB681EED736E4B90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a238ce3a-2d12-32fc-ae73-54b1a567a651.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     394993
IP address blocks:        50.230.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:d6:2e:ab:68:1e:ed:73:6e:4b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=6df3e091-9c22-4b1e-b630-c62642895be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:f5:d4:c8:52:95:1b:54:75:17:d1:6c:38:
                    34:b3:75:17:ef:21:64:59:c0:0b:1a:68:a0:9a:11:
                    4e:28:15:50:bc:52:16:81:36:72:7b:52:c5:4b:32:
                    c3:73:d6:20:85:a4:dc:5e:ed:06:66:3f:97:82:ed:
                    ca:d9:7c:88:7c:37:a9:10:d8:92:cb:15:d1:71:89:
                    7f:c9:f5:c4:7d:29:74:54:24:0a:59:b8:4e:b3:68:
                    a0:06:51:f2:31:10:0b:b0:df:37:f3:ab:46:20:b0:
                    10:13:78:da:94:b4:ba:51:75:4d:27:3b:d7:10:43:
                    7c:1c:9b:80:12:df:fb:80:3f:9b:2f:5b:8b:fa:fc:
                    0d:38:63:0c:a6:c6:05:b7:3a:8a:ff:e5:77:a8:95:
                    95:9e:48:81:43:5a:b4:23:53:59:92:2d:c4:bf:2f:
                    4f:2a:83:93:09:70:2d:d4:03:a9:84:aa:d8:df:00:
                    e7:bc:ce:2b:64:74:3f:f9:eb:8f:da:05:c2:98:f5:
                    8e:c7:03:ff:45:45:a2:5e:c6:24:fb:49:79:c0:bd:
                    82:e8:ef:27:de:33:c8:5c:30:7f:d8:af:2a:c8:a4:
                    7e:60:82:20:37:43:8c:85:c4:ae:9e:04:25:fd:5e:
                    fe:7c:0c:55:c1:ee:00:e3:94:54:dd:3d:e5:a9:01:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D6:68:48:19:00:9E:7A:50:00:BC:76:84:34:8D:C6:34:28:47:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a238ce3a-2d12-32fc-ae73-54b1a567a651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.230.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:c2:b1:5b:19:34:4f:50:50:27:bc:8e:e9:f5:80:e9:d4:
         a7:59:a2:3d:57:0e:99:b9:6f:2a:61:97:c7:e0:dc:a7:6d:f1:
         e8:d3:6e:a0:c2:58:54:e8:c7:8a:cb:26:29:67:bd:75:e2:4a:
         af:fd:17:40:44:25:fb:bf:32:f9:10:a6:dd:81:2f:63:d1:c2:
         1d:b2:ce:ea:6d:84:fc:00:15:e9:45:2a:40:34:39:ed:2e:dd:
         d3:1e:a9:bb:49:c6:53:4d:5c:eb:e8:55:36:e7:de:2c:39:e1:
         7e:a1:7f:8d:21:8d:1b:bf:44:8c:44:35:ff:aa:1f:d1:33:c6:
         5f:b0:3b:5a:7e:c1:46:1f:5e:43:46:cc:bc:32:48:d6:01:37:
         9d:6c:8b:ae:74:d9:cb:08:7d:de:9f:62:07:bc:f2:df:60:27:
         95:36:3e:c9:26:94:24:83:3f:24:8c:53:fc:df:10:4c:5c:76:
         f9:09:60:9c:38:56:05:ad:d2:2e:e3:7d:ef:d0:32:32:d4:27:
         01:81:43:9a:34:19:24:42:00:46:50:12:96:16:de:c5:8f:2b:
         84:6d:62:10:b0:7f:0d:e6:bb:58:3e:17:4b:0d:01:23:c4:16:
         d0:32:24:28:90:a1:ef:13:2f:40:8f:40:e8:a4:62:ca:bc:c4:
         e6:72:68:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebNYuq2ge7XNuS5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NmRmM2UwOTEtOWMyMi00YjFlLWI2MzAtYzYyNjQyODk1YmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOP11MhSlRtUdRfRbDg0s3UX7yFkWcALGmig
mhFOKBVQvFIWgTZye1LFSzLDc9YghaTcXu0GZj+Xgu3K2XyIfDepENiSyxXRcYl/
yfXEfSl0VCQKWbhOs2igBlHyMRALsN8386tGILAQE3jalLS6UXVNJzvXEEN8HJuA
Et/7gD+bL1uL+vwNOGMMpsYFtzqK/+V3qJWVnkiBQ1q0I1NZki3Evy9PKoOTCXAt
1AOphKrY3wDnvM4rZHQ/+euP2gXCmPWOxwP/RUWiXsYk+0l5wL2C6O8n3jPIXDB/
2K8qyKR+YIIgN0OMhcSungQl/V7+fAxVwe4A45RU3T3lqQHb0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/WaEgZAJ56UAC8doQ0jcY0KEfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTIzOGNlM2EtMmQxMi0z
MmZjLWFlNzMtNTRiMWE1NjdhNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMuaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKzwrFbGTRPUFAnvI7p9YDp1KdZoj1XDpm5byphl8fg3Kdt8ejTbqDC
WFTox4rLJilnvXXiSq/9F0BEJfu/MvkQpt2BL2PRwh2yzupthPwAFelFKkA0Oe0u
3dMeqbtJxlNNXOvoVTbn3iw54X6hf40hjRu/RIxENf+qH9Ezxl+wO1p+wUYfXkNG
zLwySNYBN51si6502csIfd6fYge88t9gJ5U2PskmlCSDPySMU/zfEExcdvkJYJw4
VgWt0i7jfe/QMjLUJwGBQ5o0GSRCAEZQEpYW3sWPK4RtYhCwfw3mu1g+F0sNASPE
FtAyJCiQoe8TL0CPQOikYsq8xOZyaP8=
-----END CERTIFICATE-----