Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa
File:                     aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa (raw, json)
Hash identifier:          FSaRJBkRKRLf28VLvV5vCFYpmmlFgO4fetpQAAV/kEo=
Subject key identifier:   F4:02:D1:88:E2:44:70:50:07:16:92:02:75:74:E7:40:44:32:C8:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848B35B719D5CE57182CA7D80C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     36040
IP address blocks:        50.218.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:71:9d:5c:e5:71:82:ca:7d:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=a9867f86-bc48-44fb-858f-f334022ac327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:94:77:f8:dd:1d:0b:ba:a4:c2:6a:6c:10:
                    c2:fa:db:b3:a2:9c:fa:01:cc:be:dc:de:35:ab:65:
                    ca:7a:3c:23:05:f9:50:04:be:a0:5c:b2:ad:20:46:
                    e7:97:02:22:ba:40:48:57:44:ed:6c:c4:74:c5:2a:
                    40:b2:37:00:ab:dc:15:42:f7:e5:00:40:df:3d:fc:
                    68:60:ce:0f:1b:2e:ec:29:a6:66:65:31:e9:e4:83:
                    58:74:9e:de:c9:20:80:44:ed:b9:70:7f:ac:12:63:
                    7e:69:f5:e3:2e:64:e5:81:0f:7e:3e:3c:5b:d1:d5:
                    ed:41:61:1c:91:5b:70:75:dd:f7:93:e1:54:1d:d5:
                    c3:44:2a:cb:9b:c6:25:da:a4:bd:19:f5:31:45:8a:
                    68:76:43:68:f1:16:7a:83:1e:9d:98:f1:53:ff:0c:
                    67:59:be:d9:4b:5d:f8:b0:6a:00:b1:53:c7:4f:81:
                    8c:ac:16:38:fe:3b:58:d2:33:bc:c2:ce:6a:c2:c1:
                    cb:fc:d5:06:95:d2:9f:61:33:c3:2b:98:aa:e2:8e:
                    b4:6d:1c:8e:bb:6e:31:a0:e4:20:e6:00:f5:22:d0:
                    e7:6c:b1:88:f2:f4:8b:3e:d1:81:7d:91:50:4f:88:
                    b8:d1:92:bd:2f:91:55:a2:30:f1:33:de:02:16:b2:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:02:D1:88:E2:44:70:50:07:16:92:02:75:74:E7:40:44:32:C8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa7e1b93-bcc0-3ff0-84d1-1f0fe786c43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.218.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:88:fb:0d:e1:6f:05:2e:fa:b4:db:04:79:56:0c:15:3a:
         00:8b:64:51:42:a3:ee:20:80:9a:08:82:40:00:d3:b9:b9:bf:
         e5:2c:37:34:06:e6:29:0a:72:3d:8f:6a:f0:e7:35:ce:57:21:
         8f:2d:6d:a5:7f:df:55:cd:73:d9:ad:30:77:0d:aa:da:33:b7:
         f8:f5:c8:9a:ad:47:57:2c:91:df:a3:4c:8c:67:57:0d:91:8a:
         f8:72:34:8c:54:c2:02:ce:d6:88:c4:4d:ad:8f:e7:ae:09:a2:
         ab:8b:eb:e9:bd:83:79:4d:f0:1f:9e:50:70:b2:37:56:85:bc:
         5f:66:68:f0:43:69:6d:6c:4b:f3:e6:90:fd:74:49:30:24:de:
         7e:41:fd:f6:e2:a5:d0:40:bc:96:b3:b5:4c:c9:1a:28:a9:79:
         5a:19:d9:7b:f9:ea:7e:61:c2:5f:e9:8a:56:63:53:79:1c:51:
         52:b9:8b:f0:49:43:3a:8d:89:9b:69:2c:5e:bc:c2:2a:dd:75:
         0e:74:0c:4b:4d:88:3d:44:f4:71:f6:24:1d:f6:df:49:89:10:
         a3:11:71:cc:4d:35:9a:15:40:c5:25:6a:e0:35:98:6c:d1:c5:
         8b:51:96:a3:50:ba:c1:d1:06:4e:a6:fc:e5:d7:3b:27:32:fe:
         5d:08:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:48:35 2025 by rpki-client