Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ea4e2d8-0139-340a-9bd4-5aef5a76a1f4.roa
File:                     4ea4e2d8-0139-340a-9bd4-5aef5a76a1f4.roa (raw, json)
Hash identifier:          d0js0YKbmlRGDiwFAgrUtSBOKqdlWW6nxpi/cTHE/84=
Subject key identifier:   5F:7A:68:7C:CE:08:15:97:98:E7:DC:7A:4A:CA:0D:27:8B:26:AA:52
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DB441048100C60DAFD4A4B400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ea4e2d8-0139-340a-9bd4-5aef5a76a1f4.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 18 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        50.96.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:41:04:81:00:c6:0d:af:d4:a4:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2028 GMT
        Subject: CN=a213daca-649b-48ed-b7b2-9edd1d3d6c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:5d:c7:e7:7b:b5:8e:ec:3b:42:24:42:a6:
                    dc:bb:d2:0c:97:73:c4:e7:36:d2:4a:d0:1a:10:64:
                    db:46:c8:89:21:a2:78:0e:8e:e5:2e:1e:84:0e:45:
                    88:3a:88:23:78:c2:30:57:e1:b0:ca:68:77:63:6c:
                    a2:63:71:57:ce:ca:23:1c:dd:f3:b4:03:ce:e4:37:
                    4c:c2:6a:8b:2f:96:6f:da:28:c5:08:b5:3d:0a:a6:
                    7f:f2:d2:2e:a7:91:f8:c9:ae:e5:21:4e:55:1e:58:
                    85:9d:ae:62:81:54:48:0e:9b:cc:38:c0:e5:c9:ca:
                    69:49:f9:46:b7:11:41:d2:9e:ab:19:e9:1a:41:e8:
                    92:a3:43:dd:24:e1:e3:d6:b9:4e:fb:b4:27:8c:98:
                    9c:1b:a3:1e:d7:03:ac:db:1c:2d:8f:5a:e7:94:e8:
                    46:1c:dc:7e:c6:9e:28:f4:8e:44:7b:c8:6e:ef:e1:
                    d2:b9:48:c7:94:53:df:79:29:a7:35:a3:6d:17:dc:
                    a2:76:b2:c3:34:80:2f:31:94:e4:ea:31:d8:10:17:
                    d8:33:c2:59:46:98:33:2b:5a:bc:54:a2:79:93:ef:
                    c8:10:d5:d2:a6:11:8e:de:5e:79:5f:ee:7a:96:fb:
                    fd:c3:72:d8:2e:0c:40:9a:79:6e:52:58:31:19:b8:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:68:7C:CE:08:15:97:98:E7:DC:7A:4A:CA:0D:27:8B:26:AA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ea4e2d8-0139-340a-9bd4-5aef5a76a1f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.96.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:e8:a7:ed:c2:51:64:97:a6:20:3d:81:54:b3:b9:3e:6b:
         5e:42:a3:aa:87:6b:c0:6b:9f:12:5a:0c:23:7e:fb:08:92:af:
         51:85:a6:19:37:89:2a:36:36:2e:33:b7:89:84:f8:b2:66:a4:
         23:7f:25:d7:d1:6e:d5:09:c4:16:6e:e2:0c:4d:e0:84:96:ae:
         fe:72:52:94:f3:ee:53:88:be:ce:db:f1:a1:b3:92:af:89:34:
         7e:fa:ab:0a:e7:56:e7:8a:47:5a:ad:8a:6c:69:4b:4f:b4:91:
         b2:18:9b:fa:e3:56:e9:eb:46:71:01:7f:df:ed:06:e6:1e:dd:
         17:18:f5:69:e1:3b:fb:4e:4e:37:67:10:67:8b:65:e2:5f:4a:
         20:7b:3a:75:d4:b6:2a:a7:2f:85:7e:1a:2a:ad:d3:d4:ed:ae:
         56:70:4c:42:2d:37:2c:63:2e:f9:05:09:f3:77:a1:e1:9b:20:
         bf:58:72:e8:92:6c:bb:e2:11:f6:c2:ab:95:a9:2c:cc:f9:6d:
         16:f4:1a:9c:41:96:1e:0a:09:93:38:33:a1:1a:00:8e:de:e8:
         6d:3e:1a:88:27:4e:d8:3f:0b:2b:e0:e5:01:5f:0c:58:34:93:
         17:ba:ad:3f:66:95:4e:77:ba:cd:59:29:43:68:c0:d5:76:29:
         9f:c4:6d:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD20QQSBAMYNr9SktAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDQyNTEyMDAwMFoXDTI4MDQxODA0MDAwMFowLzEtMCsGA1UEAxMk
YTIxM2RhY2EtNjQ5Yi00OGVkLWI3YjItOWVkZDFkM2Q2YzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVpdx+d7tY7sO0IkQqbcu9IMl3PE5zbSStAa
EGTbRsiJIaJ4Do7lLh6EDkWIOogjeMIwV+Gwymh3Y2yiY3FXzsojHN3ztAPO5DdM
wmqLL5Zv2ijFCLU9CqZ/8tIup5H4ya7lIU5VHliFna5igVRIDpvMOMDlycppSflG
txFB0p6rGekaQeiSo0PdJOHj1rlO+7QnjJicG6Me1wOs2xwtj1rnlOhGHNx+xp4o
9I5Ee8hu7+HSuUjHlFPfeSmnNaNtF9yidrLDNIAvMZTk6jHYEBfYM8JZRpgzK1q8
VKJ5k+/IENXSphGO3l55X+56lvv9w3LYLgxAmnluUlgxGbi3iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF96aHzOCBWXmOfcekrKDSeLJqpSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVhNGUyZDgtMDEzOS0z
NDBhLTliZDQtNWFlZjVhNzZhMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMmAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6H6KftwlFkl6YgPYFUs7k+a15Co6qHa8BrnxJaDCN++wiSr1GFphk3
iSo2Ni4zt4mE+LJmpCN/JdfRbtUJxBZu4gxN4ISWrv5yUpTz7lOIvs7b8aGzkq+J
NH76qwrnVueKR1qtimxpS0+0kbIYm/rjVunrRnEBf9/tBuYe3RcY9WnhO/tOTjdn
EGeLZeJfSiB7OnXUtiqnL4V+Giqt09TtrlZwTEItNyxjLvkFCfN3oeGbIL9YcuiS
bLviEfbCq5WpLMz5bRb0GpxBlh4KCZM4M6EaAI7e6G0+GognTtg/Cyvg5QFfDFg0
kxe6rT9mlU53us1ZKUNowNV2KZ/EbT8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:41 2025 by rpki-client