Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/339cb685-5bed-348e-b38e-3081e17f8390.roa
File:                     339cb685-5bed-348e-b38e-3081e17f8390.roa (raw, json)
Hash identifier:          R7X2bRbR5Ru4vn19GHyMk5FTefE6yWWHjxxAnLiiYO4=
Subject key identifier:   E9:31:88:94:C0:31:67:4F:E4:D7:11:9F:AB:82:3C:5E:4B:F2:6F:4E
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF2A6C3F800428A56DEC0
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/339cb685-5bed-348e-b38e-3081e17f8390.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f2:a6:c3:f8:00:42:8a:56:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=8befbde1-9ebd-4fb5-bbe8-47849d1fd82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:a1:61:87:34:22:ea:b3:24:c0:42:16:85:
                    6b:c2:77:10:10:bb:cb:f9:b8:62:49:62:52:5e:98:
                    54:e5:5a:c0:7a:19:48:bf:8b:f0:8f:d5:c4:91:7b:
                    47:1e:a9:03:0f:bc:e6:fd:2f:c0:e0:02:64:73:a4:
                    39:41:f6:f8:19:db:b1:4a:0e:7b:bc:b1:de:79:a3:
                    e0:ca:a6:c5:7b:8d:b7:0b:bb:f4:2d:bf:f8:46:1c:
                    fb:b6:1e:61:d7:cc:aa:4d:c6:31:1f:af:66:6c:bb:
                    42:c0:ba:cf:5a:3c:24:dc:7b:09:05:70:47:ad:99:
                    de:39:9b:cf:39:24:5a:66:e4:44:13:d4:17:4d:f6:
                    5b:3a:43:69:93:7e:89:57:45:87:5f:ea:d2:83:00:
                    b5:7a:bb:74:41:18:01:a1:17:a8:c4:7b:c5:e1:28:
                    80:7a:41:65:4e:77:87:24:9a:b0:dd:b4:69:6d:38:
                    95:61:e0:bd:94:4c:06:17:fb:9b:d1:9d:92:53:96:
                    af:2d:47:69:54:66:49:9a:7f:82:36:27:09:dc:3d:
                    aa:04:a5:a9:33:e1:8f:a0:f9:fa:9e:44:83:66:75:
                    e8:2e:5d:c8:80:98:58:dd:4c:be:5e:ce:7e:dc:e3:
                    84:32:5e:d5:d5:df:ef:4d:b0:16:f3:99:89:8e:53:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:31:88:94:C0:31:67:4F:E4:D7:11:9F:AB:82:3C:5E:4B:F2:6F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/339cb685-5bed-348e-b38e-3081e17f8390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:ad:c8:84:3b:d6:ad:f5:59:89:c0:b5:73:29:79:bc:5f:
         42:fb:dc:9b:50:16:73:e3:cb:76:1a:db:60:91:c2:55:a4:eb:
         62:ed:03:a9:3f:96:bb:d8:5a:53:d6:b5:a1:34:41:ee:a1:f1:
         5c:c0:97:8a:8c:25:20:97:26:b8:ac:16:aa:50:23:4a:46:fd:
         f2:99:e9:8e:f6:2c:54:1e:4d:b8:76:08:5a:c6:94:ac:47:ac:
         43:e8:d1:bc:11:4b:7b:94:d9:04:93:06:c6:f0:cf:fa:0e:b1:
         69:0e:4c:2a:5d:1b:d3:ef:b9:bf:56:f2:a3:24:8f:63:ee:9c:
         b5:45:19:27:6d:0a:c8:92:b8:ae:a1:19:94:9b:89:55:61:82:
         a2:8d:93:eb:1e:69:1a:9c:a9:85:e4:75:29:8f:ba:c9:24:4f:
         26:57:c4:15:94:fc:1c:28:55:3a:4c:7b:10:d2:8c:3f:28:65:
         ae:e7:55:68:63:94:56:92:6c:fc:e4:11:38:f9:c6:c0:dc:05:
         b8:ea:90:6e:7d:02:fa:3b:42:1c:0c:a3:71:e4:71:70:af:2f:
         b7:35:f1:54:7c:a1:f8:e6:c4:49:91:cd:8c:59:81:c4:55:f2:
         04:a7:b3:ea:41:5e:0c:78:b4:7a:0b:d3:28:f8:b0:53:e4:62:
         d4:6c:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----