Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ce47690f-2b35-366d-8caa-995251fc24ae.roa
File:                     ce47690f-2b35-366d-8caa-995251fc24ae.roa (raw, json)
Hash identifier:          d3sphJWUneVmJbZUPKmb4GeW8I7bUha/2glaGPLDdQk=
Subject key identifier:   C1:60:63:14:22:E5:A4:B7:DC:8C:9A:B9:DB:53:B5:9B:17:E6:76:B3
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858494733E428AC39A03E2E3D1880
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ce47690f-2b35-366d-8caa-995251fc24ae.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     29802
IP address blocks:        206.51.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e4:28:ac:39:a0:3e:2e:3d:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=1a6797b0-7966-4968-aed3-cdc7f2704dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:67:f7:68:bc:41:f0:00:fc:0e:46:d3:1c:
                    8b:17:28:a1:5c:cd:22:9e:cc:fa:ed:75:37:b2:aa:
                    7b:3b:b9:e3:93:09:13:36:85:72:28:3d:23:e3:4d:
                    62:c6:ab:72:b4:72:9b:17:f1:8c:af:bd:64:3b:c0:
                    83:72:6f:82:22:c8:bd:46:4e:eb:7b:43:3d:bc:6a:
                    19:5a:f6:83:bf:d6:a0:2c:2b:9b:d4:9d:5e:16:38:
                    fd:60:cf:55:c4:8d:4d:75:8b:c8:5a:f6:9f:1f:8d:
                    87:35:f2:4e:3c:81:87:4c:e1:4d:ae:53:33:57:0b:
                    7d:fc:44:bd:77:8e:f5:c5:e4:94:91:81:33:72:5a:
                    f7:41:f9:f8:83:a8:34:ca:59:a7:c9:af:da:1c:6e:
                    2f:c2:33:ad:24:76:a9:ef:5c:dc:79:c8:8c:20:64:
                    2f:d1:1c:17:69:3a:f1:eb:55:02:d8:1a:92:0b:45:
                    ae:34:61:b1:ed:95:5d:01:8c:b2:f3:f6:1e:fe:00:
                    51:19:67:21:95:9b:7c:86:1e:a7:9c:e4:45:ae:75:
                    3d:74:b4:fa:0c:44:f0:83:de:04:49:57:e3:d7:e7:
                    c3:b3:a4:96:a8:88:6e:a2:81:d6:23:ca:f1:5a:1e:
                    45:93:b1:02:df:14:8e:6d:78:3d:43:2b:7f:ce:59:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:63:14:22:E5:A4:B7:DC:8C:9A:B9:DB:53:B5:9B:17:E6:76:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ce47690f-2b35-366d-8caa-995251fc24ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:9c:ff:2d:58:76:0a:76:d5:05:f7:18:61:a1:46:a6:e8:
         a0:2e:47:a1:b1:6d:83:cb:85:8e:b1:86:a9:d7:45:92:b4:c6:
         d8:95:90:ef:4e:72:f8:96:19:91:ba:14:61:d0:e6:7e:40:48:
         8a:8a:97:e5:6c:c6:16:97:fe:c3:3b:ff:ac:b8:58:d0:fb:de:
         6e:7a:e4:8a:9c:3b:8d:3d:3a:26:38:36:43:2e:c9:d5:cc:c4:
         06:21:29:86:ae:31:c0:22:07:99:e5:52:e0:4f:6f:a7:52:15:
         f3:42:66:5a:29:15:fb:63:e6:76:30:10:7c:ee:0a:23:a4:c5:
         be:7b:32:23:24:6e:f4:97:9a:ce:b7:ea:7e:8a:45:96:5b:0f:
         4b:4b:d8:54:61:e2:68:0f:1e:6a:1d:a1:37:68:fd:9d:e7:36:
         e0:7e:1e:83:5b:91:da:cc:0f:d7:7d:81:66:b4:62:f1:17:42:
         b2:a9:22:18:0c:ba:a0:25:9b:22:b1:e8:b2:d7:c8:f8:51:9e:
         4f:78:ca:61:01:b5:80:40:70:70:91:be:44:6f:3d:b0:a0:b8:
         27:d7:2b:eb:23:de:b4:d4:3b:eb:eb:f6:23:7d:d8:62:36:b7:
         84:2f:36:83:32:75:9f:07:5d:e0:da:9b:7c:d0:0d:2c:63:fd:
         f4:f5:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:45 2025 by rpki-client