Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/494f397c-67e0-3a22-af1e-dbed42a20030.roa
File:                     494f397c-67e0-3a22-af1e-dbed42a20030.roa (raw, json)
Hash identifier:          hXzir15kpik9XvbghK9huLpa1qv3idQqMqLBE7DVmoM=
Subject key identifier:   20:0B:4B:EA:92:E2:ED:E4:15:ED:3F:00:22:83:4D:51:2C:23:0F:5D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848A12AB343289E024604B582C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/494f397c-67e0-3a22-af1e-dbed42a20030.roa
Signing time:             Wed 22 Jan 2025 13:38:04 +0000
ROA not before:           Wed 22 Jan 2025 13:38:04 +0000
ROA not after:            Tue 22 Apr 2025 12:38:04 +0000
asID:                     34305
IP address blocks:        50.118.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:2a:b3:43:28:9e:02:46:04:b5:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 22 13:38:04 2025 GMT
            Not After : Apr 22 12:38:04 2025 GMT
        Subject: CN=540fce50-b86e-43a5-bdde-b346f00fcf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:f0:a4:74:69:27:41:d7:f8:b6:a2:1c:fe:
                    01:a4:5f:28:0b:85:37:50:ee:7e:9f:1c:0b:80:81:
                    f3:82:9c:a0:0b:44:22:c4:ce:a4:29:a8:cd:d3:6a:
                    e2:87:55:aa:af:01:a8:55:e9:79:07:70:56:df:0a:
                    b5:ce:cb:9a:d4:71:c7:52:c7:1c:90:95:50:e2:03:
                    81:73:8f:66:bd:21:27:91:b0:f3:33:0b:c7:83:9c:
                    d8:b2:d7:c9:7b:e9:c8:72:2b:f3:e2:9c:c2:0d:0a:
                    02:cd:e3:01:a4:67:71:21:a1:61:36:80:4c:90:65:
                    c1:86:1f:ef:23:60:0d:86:05:18:77:1a:94:7f:25:
                    d5:f5:89:51:bf:a4:8e:3e:63:76:ae:78:cb:76:44:
                    5d:fe:b0:55:e7:d7:3d:c1:bc:1f:50:c7:78:e7:35:
                    15:e9:4a:74:7b:d6:49:09:da:fd:35:dc:27:a3:bb:
                    24:3f:06:7c:03:e9:ac:3d:7e:3d:c8:5b:15:f0:55:
                    f5:2f:04:08:56:5a:36:46:2d:2b:e2:70:bf:97:53:
                    11:54:2a:b3:50:bd:77:22:2d:06:c8:2c:d1:f5:b2:
                    b2:58:c4:31:0b:3f:62:19:d6:b8:6c:00:2f:4a:0a:
                    9f:3e:b1:87:c5:ef:0a:02:a6:05:c6:61:2b:bc:dc:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:4B:EA:92:E2:ED:E4:15:ED:3F:00:22:83:4D:51:2C:23:0F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/494f397c-67e0-3a22-af1e-dbed42a20030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.118.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:df:24:81:1a:94:db:eb:23:ab:3b:23:6f:49:7f:10:eb:
         39:3f:cf:e7:4c:e4:be:92:bf:35:ff:3e:b8:9c:07:2c:a5:fc:
         70:06:58:3f:a1:bb:1d:0d:fa:6a:ca:f4:e2:66:54:2e:05:07:
         de:5f:8d:c4:4c:58:f6:05:92:cf:c5:14:20:91:de:f2:46:aa:
         57:81:ed:33:9f:6f:c2:8d:01:b3:e2:4c:1a:8c:5c:8e:1e:df:
         dc:44:0c:5f:42:d4:3a:28:e8:0c:b5:03:68:89:f7:71:53:b0:
         0a:b1:c6:0f:41:1c:ba:c5:2b:03:61:ce:f0:4c:d3:99:67:1b:
         4b:ca:41:3b:47:28:68:a6:3a:ed:97:19:c4:67:7b:41:16:49:
         ec:09:8d:fd:e5:bc:cf:86:5e:54:a3:85:a7:2d:ac:d9:6c:df:
         3d:1d:ec:77:1b:d8:48:78:d0:d5:a5:6c:8a:ee:67:01:70:ec:
         76:03:e4:dd:c6:1d:b8:1c:ea:ee:1c:d4:2f:0c:4c:84:b1:c1:
         5f:0e:9f:e0:31:86:9c:1d:d6:20:c7:90:57:50:37:98:18:f4:
         95:cf:68:54:f9:3a:21:1b:8c:71:ea:98:ed:79:f1:10:6a:98:
         b6:3d:cc:93:5a:2e:6b:e1:7d:59:af:d5:9e:58:78:32:61:87:
         5f:32:b3:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihKrNDKJ4CRgS1gsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDEyMjEzMzgwNFoXDTI1MDQyMjEyMzgwNFowLzEtMCsGA1UEAxMk
NTQwZmNlNTAtYjg2ZS00M2E1LWJkZGUtYjM0NmYwMGZjZjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJvwpHRpJ0HX+LaiHP4BpF8oC4U3UO5+nxwL
gIHzgpygC0QixM6kKajN02rih1WqrwGoVel5B3BW3wq1zsua1HHHUscckJVQ4gOB
c49mvSEnkbDzMwvHg5zYstfJe+nIcivz4pzCDQoCzeMBpGdxIaFhNoBMkGXBhh/v
I2ANhgUYdxqUfyXV9YlRv6SOPmN2rnjLdkRd/rBV59c9wbwfUMd45zUV6Up0e9ZJ
Cdr9Ndwno7skPwZ8A+msPX49yFsV8FX1LwQIVlo2Ri0r4nC/l1MRVCqzUL13Ii0G
yCzR9bKyWMQxCz9iGda4bAAvSgqfPrGHxe8KAqYFxmErvNzB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCALS+qS4u3kFe0/ACKDTVEsIw9dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDk0ZjM5N2MtNjdlMC0z
YTIyLWFmMWUtZGJlZDQyYTIwMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUu3ySBGpTb6yOrOyNvSX8Q6zk/z+dM5L6SvzX/PricByyl/HAGWD+h
ux0N+mrK9OJmVC4FB95fjcRMWPYFks/FFCCR3vJGqleB7TOfb8KNAbPiTBqMXI4e
39xEDF9C1Doo6Ay1A2iJ93FTsAqxxg9BHLrFKwNhzvBM05lnG0vKQTtHKGimOu2X
GcRne0EWSewJjf3lvM+GXlSjhactrNls3z0d7Hcb2Eh40NWlbIruZwFw7HYD5N3G
Hbgc6u4c1C8MTISxwV8On+Axhpwd1iDHkFdQN5gY9JXPaFT5OiEbjHHqmO158RBq
mLY9zJNaLmvhfVmv1Z5YeDJhh18ysyc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:10 2025 by rpki-client