Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/9954e7c7-46c4-3043-b163-553ecdf85f0f.roa
File:                     9954e7c7-46c4-3043-b163-553ecdf85f0f.roa (raw, json)
Hash identifier:          wbBkOlYt5T6widd3qBvO7zwXLAVdW4mNVkUgVCvH5zc=
Subject key identifier:   F5:B7:DC:B6:36:2A:5F:FE:54:29:AB:FF:CB:D6:29:03:5D:63:9E:99
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF5A88E96DE9D7F7ED600
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/9954e7c7-46c4-3043-b163-553ecdf85f0f.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f5:a8:8e:96:de:9d:7f:7e:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=a667b8e7-bbd8-4e0f-b004-2d612149f341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:34:45:20:a1:80:b1:bf:b5:12:fa:0a:6b:
                    85:5f:36:90:b7:c5:74:b3:8f:d2:6a:3a:04:b8:7f:
                    c7:ee:d2:1f:62:e2:24:19:73:98:f7:e4:07:59:aa:
                    fc:b9:c9:0c:9b:25:80:cd:f6:16:24:72:68:1e:a4:
                    ba:51:86:ff:d0:79:a8:7c:d3:2f:0b:50:77:58:71:
                    3f:13:0f:3c:ea:40:c0:df:cb:46:86:ff:bf:69:32:
                    aa:70:e4:73:59:76:06:74:25:7d:09:4d:5e:b0:bb:
                    01:4e:46:90:98:9d:7a:0d:91:4f:19:32:c2:88:05:
                    b0:76:ca:9a:6b:19:05:a7:36:e1:7d:3f:52:51:10:
                    de:fa:ee:6f:c3:60:3e:06:7e:61:65:a6:89:8a:72:
                    c2:fc:f2:16:89:88:f6:ca:86:42:20:ec:cd:ed:9a:
                    03:64:60:65:ad:cf:22:d3:b4:75:20:bd:fb:19:a5:
                    aa:87:51:9a:d5:f1:7b:cc:d7:7e:09:26:7e:a3:79:
                    af:ca:dc:49:68:04:4d:2a:c5:3e:96:a7:1a:df:05:
                    ab:38:c0:fc:1d:96:33:a0:87:83:49:51:cf:65:e5:
                    e8:7a:19:66:e4:2d:6c:bb:5b:f4:87:75:90:c4:65:
                    ee:5f:c7:c7:c0:a8:c9:15:e3:a0:49:16:2f:1f:dc:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:DC:B6:36:2A:5F:FE:54:29:AB:FF:CB:D6:29:03:5D:63:9E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/9954e7c7-46c4-3043-b163-553ecdf85f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:d0:cc:36:7d:d9:43:af:94:a3:1d:66:69:3f:8d:63:7a:
         3e:6f:c6:5a:f5:84:fb:1b:ef:77:ef:bc:ad:a7:df:37:b4:90:
         0e:4d:64:cf:d0:9f:fd:2e:fd:3a:c3:ab:40:0b:40:82:42:90:
         90:c0:7b:37:e9:45:57:f8:03:f8:05:5b:25:53:9a:fe:c9:45:
         0e:e3:46:a7:6a:24:30:80:e8:03:c7:7e:ef:8b:7f:73:0b:bd:
         c2:26:49:b0:66:1e:17:2a:81:49:91:6e:93:60:c2:83:98:2c:
         63:54:bd:c1:bc:ce:20:92:60:c4:34:4a:78:31:04:de:a9:85:
         7f:07:35:c2:bb:d8:30:75:50:8a:1b:26:22:93:e7:42:3e:56:
         0a:56:ec:8f:b5:04:1c:42:1b:22:9f:42:76:83:fc:c9:90:6b:
         a3:01:11:03:1b:0a:74:94:ca:3e:ea:08:63:01:3f:06:39:5b:
         a1:de:5b:05:af:04:94:fd:51:16:b9:e0:c5:f2:e5:dd:72:ab:
         22:06:aa:33:38:a8:a3:a6:c0:7f:7d:fe:d9:bf:7d:9a:77:74:
         77:54:16:52:55:ad:e5:ba:5c:70:6c:58:fd:c8:bd:40:9b:5c:
         59:77:ad:52:22:14:18:5a:39:ac:5f:bb:15:9f:77:f2:a3:4e:
         00:cb:1e:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPWojpbenX9+1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
YTY2N2I4ZTctYmJkOC00ZTBmLWIwMDQtMmQ2MTIxNDlmMzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5k0RSChgLG/tRL6CmuFXzaQt8V0s4/SajoE
uH/H7tIfYuIkGXOY9+QHWar8uckMmyWAzfYWJHJoHqS6UYb/0HmofNMvC1B3WHE/
Ew886kDA38tGhv+/aTKqcORzWXYGdCV9CU1esLsBTkaQmJ16DZFPGTLCiAWwdsqa
axkFpzbhfT9SURDe+u5vw2A+Bn5hZaaJinLC/PIWiYj2yoZCIOzN7ZoDZGBlrc8i
07R1IL37GaWqh1Ga1fF7zNd+CSZ+o3mvytxJaARNKsU+lqca3wWrOMD8HZYzoIeD
SVHPZeXoehlm5C1su1v0h3WQxGXuX8fHwKjJFeOgSRYvH9w9zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPW33LY2Kl/+VCmr/8vWKQNdY56ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvOTk1NGU3YzctNDZjNC0z
MDQzLWIxNjMtNTUzZWNkZjg1ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+sRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTO0Mw2fdlDr5SjHWZpP41jej5vxlr1hPsb73fvvK2n3ze0kA5NZM/Q
n/0u/TrDq0ALQIJCkJDAezfpRVf4A/gFWyVTmv7JRQ7jRqdqJDCA6APHfu+Lf3ML
vcImSbBmHhcqgUmRbpNgwoOYLGNUvcG8ziCSYMQ0SngxBN6phX8HNcK72DB1UIob
JiKT50I+VgpW7I+1BBxCGyKfQnaD/MmQa6MBEQMbCnSUyj7qCGMBPwY5W6HeWwWv
BJT9URa54MXy5d1yqyIGqjM4qKOmwH99/tm/fZp3dHdUFlJVreW6XHBsWP3IvUCb
XFl3rVIiFBhaOaxfuxWfd/KjTgDLHpY=
-----END CERTIFICATE-----