Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa
File:                     b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa (raw, json)
Hash identifier:          P3VGBrFp8tJKSN2lD+ZSP7cz4PLess/gyIR9iOlSDqM=
Subject key identifier:   8D:CB:7E:CE:2E:0B:4B:3E:4B:7E:CA:8B:6E:2A:1C:63:D1:82:3B:FA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848DBD66A9FF23896AB1D1E9CD8
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     30058
IP address blocks:        50.7.27.0/24 maxlen: 24
                          67.159.36.0/23 maxlen: 23
                          67.159.58.0/23 maxlen: 23
                          2001:49f0:d11d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6a:9f:f2:38:96:ab:1d:1e:9c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=669b9fd0-194c-4954-ad80-8a242f3ccfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:1e:ee:c6:3e:78:f2:ae:33:b7:36:9a:ea:
                    5a:86:28:77:79:76:2c:d1:74:de:22:89:d6:1e:9d:
                    46:6b:72:ab:c1:e9:62:00:a9:66:f1:ac:f8:31:60:
                    24:8b:14:de:b0:50:9f:5c:6e:90:01:ac:71:6a:51:
                    6f:d8:e6:4c:49:97:9d:d5:30:c3:f8:87:dd:cf:a0:
                    5c:c3:a1:ce:c0:e9:7f:eb:19:89:bf:ff:06:1c:cf:
                    b1:7e:da:b3:48:d8:c7:0c:0f:16:ff:34:89:70:a3:
                    fe:0d:ac:cd:4f:4d:dd:61:f4:38:be:ed:6e:40:78:
                    8e:e1:da:2e:4d:3d:9b:24:dd:19:5b:48:a9:47:83:
                    7a:6e:2d:f7:ae:83:5f:7e:46:c8:0e:3d:8a:5b:be:
                    6e:18:5b:3a:1d:1c:6a:78:11:c9:67:2e:cc:fd:de:
                    03:65:f8:df:60:bb:17:e9:83:c0:89:1f:4d:f7:d6:
                    2e:88:57:22:ba:19:05:91:f3:52:8a:6d:90:3b:90:
                    ca:af:f2:54:fc:d8:47:ac:21:53:f2:13:da:81:d3:
                    fa:38:43:5c:09:af:de:d2:d5:24:4e:b4:ab:a4:de:
                    2f:85:57:c4:95:f0:4f:80:55:75:27:74:88:b8:de:
                    9a:d9:36:1e:a7:cb:4e:24:af:9c:19:c7:0f:a4:6a:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:7E:CE:2E:0B:4B:3E:4B:7E:CA:8B:6E:2A:1C:63:D1:82:3B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b4f426b9-40e8-329b-bfbc-f70e54ec8ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.27.0/24
                  67.159.36.0/23
                  67.159.58.0/23
                IPv6:
                  2001:49f0:d11d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:87:6c:29:15:0f:3b:0f:94:b4:1c:64:42:8a:29:b3:17:
         bf:a2:98:81:18:e3:21:1a:25:5e:a4:43:d8:f0:5f:54:27:3b:
         c3:de:7e:a7:61:da:b6:00:91:26:f2:95:17:2f:2a:c4:07:39:
         92:29:d8:de:6b:6f:00:28:77:c4:22:d4:5d:c4:8c:46:3b:d4:
         5e:47:bb:33:3f:bd:aa:fc:07:47:3d:c4:5e:4b:61:d6:15:8e:
         03:f4:d0:83:da:e9:84:23:41:06:5e:5c:33:58:1e:89:c3:ca:
         eb:ed:b7:e4:a1:0c:b1:db:1d:c9:05:2a:24:11:cc:97:1b:27:
         81:f0:9c:b4:89:e0:42:65:0d:98:67:51:0c:9c:c8:5b:e1:15:
         50:ef:3f:d0:9b:a2:1e:b6:01:d2:aa:7e:e1:ef:e8:19:e2:6b:
         4b:c8:50:c8:3f:9c:13:9d:51:72:6a:03:f3:de:4b:e5:e4:27:
         30:2f:4a:d3:ac:72:78:ef:e4:98:07:08:a0:d2:eb:1c:bb:98:
         20:d7:b7:c6:8e:4b:4a:62:74:67:8b:c4:09:6f:7f:55:21:a1:
         46:0f:79:dd:27:c1:0e:49:9f:a7:6e:ff:73:3a:47:ab:5b:b0:
         4f:fb:c2:6c:ea:9f:aa:53:ed:cd:2a:45:d8:2a:69:cb:b3:9d:
         01:8d:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:13 2025 by rpki-client