Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1045cdbf-a2ca-38f8-80ef-38b7410ffd65.roa
File:                     1045cdbf-a2ca-38f8-80ef-38b7410ffd65.roa (raw, json)
Hash identifier:          +ErfFT3Qf38K9T0Q3nh0yjhF51jyZOPZGd53Zazbvh4=
Subject key identifier:   FC:AA:50:7F:65:38:DB:71:A3:77:4D:81:B8:A3:6F:98:47:5D:3B:71
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848960B5AB6096A9AFFDEE78500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1045cdbf-a2ca-38f8-80ef-38b7410ffd65.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     30058
IP address blocks:        50.7.192.0/23 maxlen: 23
                          50.7.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:5a:b6:09:6a:9a:ff:de:e7:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=eaf8d229-e385-48e3-8670-86e39729a5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:89:97:fb:22:bd:b9:b3:fa:24:70:80:09:87:
                    d3:09:7d:d4:89:b9:a3:e9:0a:7f:6f:2b:20:64:26:
                    e3:71:38:81:c7:b0:2f:4a:f9:28:06:90:48:c2:0e:
                    54:1d:89:0d:fd:cd:61:70:70:a4:da:69:3f:67:72:
                    0a:c3:99:40:4a:9d:d6:52:5c:01:70:c0:23:36:40:
                    25:10:f6:ca:fb:99:f9:1d:43:71:4a:6b:cd:60:33:
                    a5:5b:32:67:68:35:ed:c0:92:50:ae:da:72:b9:a2:
                    95:6f:7e:68:d8:c6:f7:33:b4:01:be:1e:7e:96:0e:
                    f4:67:13:24:74:5f:50:d6:24:57:bf:8e:16:54:71:
                    fa:d1:36:bb:2c:88:6a:f6:d0:a7:08:ca:db:e4:f6:
                    91:58:a3:a7:67:0a:ee:0e:9e:2c:fa:1f:c7:73:55:
                    1c:28:c7:12:88:10:0e:f8:f9:47:24:88:1a:1d:de:
                    11:3a:dc:35:d8:2d:c3:f3:cc:6f:e0:bf:fb:c1:d4:
                    8f:93:83:36:ea:8b:7f:28:de:6c:ff:a2:57:e0:32:
                    ce:bb:1d:b6:bf:2c:80:85:49:da:16:44:b6:51:f0:
                    d8:96:ae:46:77:d8:25:b1:ab:73:4b:c2:a2:68:37:
                    5b:1c:19:17:2a:f2:8a:59:a2:b5:e7:ab:a0:ec:54:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AA:50:7F:65:38:DB:71:A3:77:4D:81:B8:A3:6F:98:47:5D:3B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1045cdbf-a2ca-38f8-80ef-38b7410ffd65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.192.0/23
                  50.7.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:63:51:1e:da:90:21:51:4c:06:ce:f3:f5:0b:89:01:61:
         9c:a8:a0:21:46:d3:d5:86:42:df:ff:90:d0:5e:f8:d9:6d:22:
         21:f1:b6:ab:8e:49:6c:c4:c7:ad:00:54:95:52:d5:95:f5:ae:
         19:e5:d3:32:f0:25:36:0a:2b:34:09:1f:6b:a4:45:75:44:04:
         2d:34:bc:5e:7f:62:f8:bb:f8:06:80:46:77:28:cc:ee:d6:64:
         e5:e6:2e:be:a8:72:40:69:89:90:52:07:74:3a:f0:ad:85:5b:
         d9:4b:80:32:a4:d3:dc:51:6f:e5:e0:3e:b6:c3:6d:45:61:aa:
         ad:4f:ab:d3:85:9c:5d:be:04:95:c2:90:de:7b:06:5a:34:8e:
         09:90:05:c1:92:52:20:f6:05:16:45:02:ea:1e:57:82:0a:ef:
         f9:62:d1:8b:06:97:bb:01:1b:eb:b8:9e:7b:6c:b3:7d:89:83:
         e0:b3:ae:49:a9:41:9f:e7:5f:f3:bf:c1:7d:84:cb:34:e2:15:
         13:f1:77:f2:28:91:9a:1e:b6:d3:3b:0b:48:09:bf:36:cf:b9:
         8f:fe:c7:95:90:f8:b8:c7:96:f5:ad:b5:e9:6a:a4:f3:75:89:
         87:53:57:31:5e:53:dd:d7:4d:2b:09:57:e0:54:66:88:5f:69:
         4e:a8:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:12 2025 by rpki-client