Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d10f2508-82e7-382c-8667-67cc14854c08.roa
File:                     d10f2508-82e7-382c-8667-67cc14854c08.roa (raw, json)
Hash identifier:          82ut8xjUHo4EY3p7e92g4hXHo8l8kQ3MdEcwzPkR0+4=
Subject key identifier:   29:1A:DF:4E:3A:BA:F5:04:9E:2A:06:B5:FE:22:E1:E5:5C:FA:D0:E2
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F1037A79E15412A2444EEC680
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d10f2508-82e7-382c-8667-67cc14854c08.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        199.235.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a7:9e:15:41:2a:24:44:ee:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=84d8200f-755e-4374-b286-17da12d828ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:dc:07:68:33:f6:de:f3:79:06:22:48:87:
                    87:f6:06:07:88:04:92:04:46:62:97:30:cf:e4:80:
                    61:75:19:b7:90:15:5b:c5:b3:e7:66:8e:c1:5f:02:
                    69:26:71:f9:48:cd:51:c2:86:5e:4e:65:c7:36:b5:
                    39:24:75:95:61:1c:ea:1f:51:1b:04:08:f7:cc:0e:
                    21:1a:e4:c1:ca:20:b1:aa:ba:fd:b6:fa:7d:d0:c9:
                    fe:a6:8f:c5:b0:8f:67:76:cd:67:f4:7e:5b:df:70:
                    c4:2a:84:bd:28:1e:bf:c9:cd:ce:63:be:f1:04:9a:
                    c8:95:0d:1b:38:db:41:5e:41:55:5d:30:de:9d:20:
                    2d:84:21:43:1e:9f:c2:0e:5f:cd:59:79:f2:62:c4:
                    b6:b6:23:47:d1:6f:41:ec:c1:ad:19:28:90:66:ef:
                    01:c2:23:54:e6:a7:84:0c:c3:89:1a:80:4f:6b:c9:
                    66:bd:a3:08:80:b3:af:7b:ea:b0:97:e1:22:89:9b:
                    ff:be:30:78:9f:72:d5:01:7f:e5:3d:44:32:f0:e0:
                    d8:38:c4:44:47:7a:29:15:f1:fe:c3:1a:80:26:6e:
                    8f:84:98:73:eb:44:a9:0c:28:88:08:41:a9:16:8b:
                    78:05:4f:18:7a:0a:c3:cd:38:cc:0c:d4:8f:7c:70:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:DF:4E:3A:BA:F5:04:9E:2A:06:B5:FE:22:E1:E5:5C:FA:D0:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/d10f2508-82e7-382c-8667-67cc14854c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:9a:c3:f6:cb:e0:84:ae:34:f8:c6:d9:bd:d7:5a:94:58:
         62:f1:00:37:02:e7:be:07:e7:98:d3:8c:49:bc:0e:96:17:e2:
         4b:e1:c1:bb:82:47:cd:3f:b3:5a:ca:a1:36:97:da:c6:a0:47:
         b4:eb:f8:13:ae:f2:ba:0f:d9:f0:3f:1b:96:fb:d2:69:3f:b4:
         0a:d4:dc:15:8b:c2:ef:cb:be:47:c3:eb:80:39:00:03:53:18:
         db:81:80:df:f0:c1:b7:66:04:47:e4:65:07:9a:31:60:8b:d8:
         4a:f3:5b:bb:cf:27:e6:cf:77:7e:3e:3c:34:cd:e5:e3:98:a2:
         a5:59:00:3f:af:9f:5e:d7:a9:45:45:79:42:2c:7d:fe:71:1d:
         c1:8d:35:bc:69:94:ce:16:b2:b7:85:8f:8c:3b:4c:02:36:6f:
         86:aa:a9:71:6d:db:1e:b1:0f:d2:e8:3b:14:11:ee:96:4d:06:
         8b:52:1e:0e:1b:4e:00:24:aa:6b:24:dd:3d:37:cd:5a:c1:05:
         b5:e5:cf:86:75:b3:26:0f:34:2d:8c:ca:c0:be:30:07:fb:7f:
         c6:b5:29:0a:76:37:0a:d1:70:ad:46:9b:25:bb:32:21:b7:5b:
         ad:fd:e0:b8:13:30:0c:68:72:eb:00:5e:9f:3e:ca:54:71:85:
         fa:cb:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----