Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/dd3e14f3-e507-3f87-8321-9b2ba8b989a0.roa
File:                     dd3e14f3-e507-3f87-8321-9b2ba8b989a0.roa (raw, json)
Hash identifier:          9JKKgeXp8Zuhwu9bQoKdBG+I9w2d5perXou6VEqCDsw=
Subject key identifier:   11:4C:AC:2E:60:4A:8A:F4:7F:A8:68:0F:C9:5A:17:8F:02:A3:1E:6B
Certificate issuer:       /CN=59e1f397-f208-4e0a-b533-5d815cc15e83
Certificate serial:       010D0C9F43285844C6550A51FC8B71A8023BB780
Authority key identifier: 35:FB:AC:C2:8A:EF:03:F7:69:23:09:DB:43:B8:D1:34:7E:E7:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/dd3e14f3-e507-3f87-8321-9b2ba8b989a0.roa
Signing time:             Sun 04 Feb 2024 02:00:25 +0000
ROA not before:           Sun 04 Feb 2024 02:00:25 +0000
ROA not after:            Sat 04 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        50.115.218.0/24 maxlen: 24
                          50.115.219.0/24 maxlen: 24
                          50.115.223.0/24 maxlen: 24
                          50.115.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c6:55:0a:51:fc:8b:71:a8:02:3b:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e1f397-f208-4e0a-b533-5d815cc15e83
        Validity
            Not Before: Feb  4 02:00:25 2024 GMT
            Not After : May  4 01:00:25 2024 GMT
        Subject: CN=ba9200e0-3ac1-4907-b50c-caecc6346723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e7:40:f7:c6:81:10:ea:b6:f3:a8:33:f5:38:
                    10:fe:56:12:c5:df:cb:aa:e8:43:1c:38:34:9b:78:
                    e9:0d:6c:d7:14:23:eb:f0:85:3a:cb:7f:dc:2c:a8:
                    73:97:fd:00:2d:20:c0:91:92:21:16:e6:40:33:47:
                    45:a3:ae:94:38:1e:37:50:8e:fc:43:3a:34:eb:bb:
                    d7:10:00:5a:d7:99:4b:1a:66:f6:22:c4:e4:58:82:
                    e8:84:eb:66:1a:db:5b:97:6c:43:ca:32:21:02:40:
                    12:e0:9c:b9:70:dc:f2:97:39:0b:da:27:63:03:84:
                    b8:23:cc:02:1c:a1:ca:29:41:3b:e3:bd:52:c0:f1:
                    92:32:92:c9:21:f4:f0:5d:82:f0:99:31:8a:c3:a6:
                    c4:2b:f1:96:b3:14:df:1d:1b:8e:0b:d1:07:34:28:
                    06:29:e9:51:1c:fe:bd:52:97:2a:e2:0a:7a:18:f3:
                    25:38:c8:10:bb:c1:f3:e5:e6:58:ea:3e:d8:fa:26:
                    ca:b7:86:d3:9a:3a:a4:97:78:69:f3:5e:b1:ef:12:
                    f5:e7:f2:63:35:30:33:8e:49:29:e0:ae:cd:39:d3:
                    e1:22:90:99:da:d9:b1:3f:aa:32:d6:99:a1:a4:c3:
                    dc:4f:97:8e:3f:d9:84:dd:96:66:ca:43:b6:b5:4a:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:AC:2E:60:4A:8A:F4:7F:A8:68:0F:C9:5A:17:8F:02:A3:1E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/dd3e14f3-e507-3f87-8321-9b2ba8b989a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/59e1f397-f208-4e0a-b533-5d815cc15e83.crl

            X509v3 Authority Key Identifier:
                keyid:35:FB:AC:C2:8A:EF:03:F7:69:23:09:DB:43:B8:D1:34:7E:E7:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.218.0/23
                  50.115.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:15:a0:37:5e:02:ab:78:bb:65:7a:42:3c:42:25:61:65:ac:
         12:e5:65:99:1f:05:e2:d8:a9:b3:f6:b9:6f:cc:05:ad:cd:56:
         39:2d:bf:0a:63:db:05:d4:c9:da:a9:54:cb:9e:69:04:4b:4f:
         4d:29:b4:38:1b:7b:a1:9b:32:c7:15:b9:b1:27:cb:87:d2:5d:
         40:a8:3a:09:d1:fe:ce:7b:11:28:c6:56:e2:2e:53:f2:20:c9:
         2d:04:6d:ef:bd:00:ce:a5:6a:63:0f:c8:38:d1:c3:23:35:c1:
         3e:27:86:3f:63:e7:a3:56:58:46:fa:f0:fe:f1:59:bb:a8:68:
         f9:b3:fe:9b:9e:15:0f:f0:34:f7:8f:78:4c:90:a6:69:87:f4:
         0d:8b:b9:41:b4:31:da:07:52:ce:0c:be:4d:75:b1:7c:71:90:
         ba:a0:df:fd:af:49:c8:ce:2c:ab:5d:ea:c4:44:85:74:f3:39:
         e8:7d:14:08:01:ed:2c:dc:9f:e5:3e:6b:1b:bd:b2:da:45:d8:
         80:12:27:7b:03:8c:ce:98:96:bb:98:3c:72:ef:4d:9a:28:b3:
         9d:1f:7c:0e:95:fc:3b:3f:c7:ab:c8:3f:17:a3:aa:66:64:9b:
         9c:4e:6a:82:6e:c8:59:3e:a5:be:15:4a:ab:5a:ff:20:ce:22:
         00:ed:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:14 2024 by rpki-client on console-ams.rpki-client.org