Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b84a158-e46c-3f5f-b2c4-5ce269430b74.roa
File:                     8b84a158-e46c-3f5f-b2c4-5ce269430b74.roa (raw, json)
Hash identifier:          9J/kpxFicKpS2RKoWtKNjXSAWAudKUrCwmBXIpGNtig=
Subject key identifier:   1A:64:67:84:64:E4:A0:A7:96:97:2A:78:7F:74:97:D6:6F:B7:C0:5B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492CB0B5FD18D64D39C5700DA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b84a158-e46c-3f5f-b2c4-5ce269430b74.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     54500
IP address blocks:        50.117.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b5:fd:18:d6:4d:39:c5:70:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=412add6e-0fb8-4105-af24-5c0299284daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:f4:28:be:8f:70:1f:db:5a:82:01:c5:b8:
                    15:3d:c0:de:84:95:d6:1b:49:b7:4a:03:1f:fc:df:
                    19:84:b9:bd:fa:a2:9c:7e:ce:9b:0b:a8:1b:9c:71:
                    bd:51:c6:b0:15:58:ea:14:e4:c4:b4:eb:e3:7d:c4:
                    9e:c3:c8:eb:a6:ef:90:c4:5a:b1:81:57:09:ef:71:
                    c7:87:33:b2:4a:d5:5a:1a:27:18:69:6b:41:6b:20:
                    90:86:3a:a4:bf:2a:09:c3:67:08:84:70:4a:da:91:
                    94:7a:47:a3:b9:3b:e7:db:40:8c:f3:42:34:1e:76:
                    07:e4:3e:c1:bf:ba:a2:3e:91:af:08:cd:2c:d5:05:
                    2c:5a:a6:d6:80:9e:f3:6e:67:87:47:8a:6c:3e:9b:
                    16:a0:47:5e:c2:5a:4e:07:a9:56:9f:bf:12:1e:2e:
                    68:ab:2f:dd:a2:91:d6:25:a0:36:04:e9:fd:0a:eb:
                    c7:89:5b:43:36:cc:c6:a8:bd:5d:87:80:f6:45:72:
                    ca:ee:53:8d:45:0f:20:80:d0:29:75:1b:34:59:31:
                    fb:d0:f7:7b:e8:2f:5c:2c:ae:23:ed:45:0e:9c:4b:
                    66:83:0b:42:a5:ee:7a:2d:74:36:3d:65:c7:2c:22:
                    03:d6:ee:95:5c:5c:cd:f9:b6:eb:30:d0:75:32:96:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:67:84:64:E4:A0:A7:96:97:2A:78:7F:74:97:D6:6F:B7:C0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b84a158-e46c-3f5f-b2c4-5ce269430b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:a8:5a:2e:df:42:12:b2:10:0b:2e:ef:b4:6d:9b:d4:0d:
         9b:d7:d0:c2:f8:f9:40:67:33:1e:fe:c9:58:88:bb:28:30:14:
         cb:cb:1c:c0:45:cd:2c:f9:c6:76:6c:d6:58:f2:ee:bb:b2:d9:
         98:fc:a5:80:ee:96:db:28:36:e0:20:76:f7:19:2a:0e:bd:61:
         57:47:95:fb:09:0e:ad:c9:dd:8b:bb:a8:a2:76:38:bb:3c:48:
         03:f0:d2:0d:e9:76:47:49:23:27:58:e2:5f:f5:36:86:ec:48:
         16:32:f2:a4:22:74:c9:e5:bb:a3:19:f2:81:27:a8:c4:aa:42:
         76:9d:89:f3:17:ff:3e:55:ed:fc:a5:80:66:b8:be:bc:3a:f8:
         77:71:f7:5e:13:02:47:3a:14:df:55:a8:a7:b0:f0:e0:35:78:
         2f:fc:be:eb:ae:5b:05:cb:52:4f:46:df:54:be:82:4a:8e:81:
         0a:09:e6:ec:d0:25:47:0f:a1:61:cd:30:dc:53:29:8b:90:e7:
         f8:58:1b:d3:b7:22:04:01:46:73:b1:c4:6c:7d:0d:2d:32:08:
         51:52:fc:fb:c3:fe:4b:08:9e:b6:d0:04:cf:aa:3c:98:02:36:
         8a:f7:95:01:94:8d:c2:2a:ba:bf:cd:ed:d5:95:45:93:a3:1f:
         23:84:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:34 2025 by rpki-client