Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/839a6cce-f31b-3ebe-8661-65e764336d57.roa
File:                     839a6cce-f31b-3ebe-8661-65e764336d57.roa (raw, json)
Hash identifier:          Hck4M1Nb8LZvmhDOjACrP9IFBLNM4tc/r0L49Xd/odg=
Subject key identifier:   D3:67:06:D8:E0:AE:35:B6:B5:60:38:97:EF:C7:53:7B:BD:BF:C1:CD
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F04E503374335A717D0130500
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/839a6cce-f31b-3ebe-8661-65e764336d57.roa
Signing time:             Mon 31 Aug 2026 11:40:07 +0000
ROA not before:           Mon 31 Aug 2026 11:40:07 +0000
ROA not after:            Sun 29 Nov 2026 12:40:07 +0000
asID:                     834
IP address blocks:        199.235.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:04:e5:03:37:43:35:a7:17:d0:13:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Aug 31 11:40:07 2026 GMT
            Not After : Nov 29 12:40:07 2026 GMT
        Subject: CN=c35a3d69-1489-4a6c-ac82-0350f7a7c86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:6f:99:82:46:61:54:23:47:ad:3d:b4:e7:
                    71:96:08:42:64:b4:43:f0:c6:a2:bf:55:40:1c:db:
                    f8:dd:27:f4:19:8b:37:c7:fa:aa:1d:66:85:6c:d4:
                    52:5b:8f:1a:5a:5c:62:66:cd:fa:17:a3:7f:40:d6:
                    f3:8d:fb:33:e9:64:52:ae:e4:fa:0e:e3:d5:6a:d7:
                    fd:61:91:0f:93:e5:fa:58:bf:a0:3a:93:0b:ac:2c:
                    46:bf:d0:73:95:b0:b7:58:25:8d:5b:b8:f5:0a:9e:
                    ee:23:9d:51:bf:b2:96:1b:10:f1:7d:83:7a:1c:81:
                    78:0b:26:e7:f8:26:70:a0:43:f1:dc:dc:56:27:ac:
                    a8:49:29:37:48:2b:b0:82:1d:be:82:31:a8:4b:aa:
                    8f:3c:4d:ce:25:c9:eb:fb:a1:2b:a8:d3:a8:2c:20:
                    06:3f:b1:4e:06:5a:3c:67:09:bc:98:1d:dc:f7:ed:
                    38:1e:86:c5:05:18:13:00:48:da:61:82:49:3d:90:
                    39:fb:bf:11:37:df:75:48:ae:b4:ba:37:df:dd:78:
                    67:09:7f:47:52:10:eb:d6:ab:34:03:a4:78:8d:93:
                    11:4c:7d:0a:1e:32:e1:30:4b:05:bc:d3:cb:31:5e:
                    53:88:65:7f:c4:4a:21:71:7f:cb:e0:f4:79:7d:fd:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:06:D8:E0:AE:35:B6:B5:60:38:97:EF:C7:53:7B:BD:BF:C1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/839a6cce-f31b-3ebe-8661-65e764336d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6b:b4:48:5f:49:aa:58:5c:fd:85:a0:64:06:00:03:7d:91:
         8b:b0:ae:0c:ad:1b:e8:47:36:35:9a:66:8c:4d:cb:a4:ac:14:
         c5:04:75:a7:52:02:8c:9d:e1:35:17:2e:4c:b2:30:e4:b9:53:
         99:bf:b8:ad:5a:f8:0c:35:76:e3:b9:1e:94:94:e4:ec:2a:ec:
         35:d7:3a:2b:77:d9:3e:aa:24:ee:1f:82:6f:d3:0f:44:65:6b:
         ba:3e:3b:7c:32:98:98:2d:ba:02:d4:e2:5f:c5:e9:ab:a4:88:
         c9:27:6a:ed:3d:00:e6:2c:a8:ab:68:1d:64:bd:d9:77:c8:84:
         c7:91:16:b9:55:b8:e3:80:19:fa:f1:c2:5d:e1:fe:5c:c7:8b:
         2b:68:36:ae:9e:1c:79:ce:bc:ed:be:10:4c:2d:8e:f7:9b:15:
         bc:48:fd:b0:91:4d:07:c7:9d:4b:e5:13:71:73:b3:b6:e4:89:
         ed:0a:26:94:98:8e:51:3e:f1:cb:1c:be:5d:12:b5:db:fa:29:
         ce:b6:da:fc:68:fe:55:df:6d:c9:0e:17:29:b9:7d:26:94:a3:
         bb:26:3e:0d:49:79:f2:d9:41:9e:fd:45:49:cc:10:e2:b2:78:
         27:0a:59:45:0a:33:d6:aa:19:b4:d0:6b:af:5b:60:e4:9a:b7:
         9a:6e:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----