Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/4032dfdf-e78c-355d-879d-d8ec680ebf03.roa
File:                     4032dfdf-e78c-355d-879d-d8ec680ebf03.roa (raw, json)
Hash identifier:          Z0IiJc9vobMFov5YwsC1ep5IgsdrOrmD5tE7L8VdSag=
Subject key identifier:   63:90:B8:11:7C:E4:9E:13:B0:14:24:D3:D5:A1:CA:A9:B3:7C:CE:12
Certificate issuer:       /CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
Certificate serial:       010D0C9F4328584FC95C1D4AD2DBA47C3D221780
Authority key identifier: 0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/4032dfdf-e78c-355d-879d-d8ec680ebf03.roa
Signing time:             Mon 09 Nov 2026 20:38:32 +0000
ROA not before:           Mon 09 Nov 2026 20:38:32 +0000
ROA not after:            Sun 07 Feb 2027 20:38:32 +0000
asID:                     55178
IP address blocks:        72.14.117.0/24 maxlen: 24
                          72.14.121.0/24 maxlen: 24
                          72.14.122.0/24 maxlen: 24
                          97.75.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c9:5c:1d:4a:d2:db:a4:7c:3d:22:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49cd804-3f4b-4772-bcbd-c7238e36bdea
        Validity
            Not Before: Nov  9 20:38:32 2026 GMT
            Not After : Feb  7 20:38:32 2027 GMT
        Subject: CN=1f9301ff-10fb-46b6-987d-fefc189a3ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:44:83:1c:51:81:27:4c:65:5a:fc:4a:0e:
                    5c:1c:5e:95:be:ce:1d:3f:6f:77:05:c1:18:28:83:
                    71:eb:49:f5:5d:9d:ee:08:56:5a:5d:2a:47:f0:cd:
                    77:fa:00:e8:c3:4d:94:fd:5b:76:4a:11:f4:28:ea:
                    8b:b4:34:ff:30:bf:f7:66:b0:54:43:3f:e3:b0:5d:
                    ad:cf:ce:07:9a:4a:01:96:03:b2:e4:26:fb:76:14:
                    63:93:2f:08:a4:0e:05:ad:fe:5a:37:f0:81:5b:00:
                    90:29:f6:c8:a1:c1:9f:1a:bc:26:1c:e2:f6:ca:55:
                    7d:5e:d6:69:66:e3:bc:bf:35:92:58:ff:00:3f:9b:
                    8c:81:94:e1:2f:9e:5c:7c:a4:01:05:10:6b:78:f4:
                    23:8c:f9:f8:33:4f:9e:92:6c:e2:09:70:76:98:46:
                    7a:3a:20:8f:41:f0:90:d7:8d:76:c7:0b:26:a9:35:
                    ac:68:7d:6a:d0:0d:f9:76:1d:22:fe:33:86:db:b8:
                    fe:1a:0b:94:d9:8d:d3:4d:57:61:46:af:cf:79:da:
                    cc:7b:63:91:12:5c:2c:24:41:72:22:c7:34:b7:f5:
                    15:37:c6:ee:32:47:5e:c1:6f:d6:21:c7:7b:0c:f0:
                    ad:fc:09:7d:67:1d:bf:0a:a3:f1:a8:54:58:08:a6:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:90:B8:11:7C:E4:9E:13:B0:14:24:D3:D5:A1:CA:A9:B3:7C:CE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/4032dfdf-e78c-355d-879d-d8ec680ebf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea/d49cd804-3f4b-4772-bcbd-c7238e36bdea.crl

            X509v3 Authority Key Identifier:
                keyid:0C:42:CE:FA:22:4C:5A:5F:9B:51:F8:96:16:2A:72:54:BE:83:B1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d49cd804-3f4b-4772-bcbd-c7238e36bdea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.117.0/24
                  72.14.121.0-72.14.122.255
                  97.75.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:29:75:a6:fc:e2:3a:dd:d1:69:aa:c9:e3:94:44:ad:ce:
         7a:1c:c6:51:53:64:ff:ab:06:d7:63:7c:81:1b:a4:a2:5b:70:
         c9:6b:77:a4:e2:eb:43:e0:0e:d6:f1:39:f9:b7:00:9b:81:c1:
         55:81:46:d9:ae:87:57:60:a7:9e:e6:26:02:f0:36:ff:4d:88:
         f9:4a:26:f7:45:cc:3b:a9:2c:e5:88:cc:7e:5e:83:d5:b6:ef:
         94:77:59:a2:b9:67:1d:aa:e7:ae:64:9d:4d:3a:08:0c:21:11:
         5d:d1:47:d2:dc:55:d6:8c:74:d9:d6:0c:07:ab:23:5f:bc:15:
         88:a7:c4:c6:78:b3:58:96:07:3f:82:4c:40:c1:94:e0:6c:27:
         78:48:85:e9:f3:88:55:2a:a5:d7:4b:94:a7:c8:3e:dd:dd:4e:
         ca:55:5e:e0:10:4a:d5:f9:24:02:4f:8d:87:66:c0:4d:df:3f:
         4f:3e:5d:d9:8b:af:ee:e9:b4:39:de:91:07:98:9c:11:8a:0f:
         3b:59:04:ba:14:f9:8d:df:fa:59:7e:54:b6:54:84:ca:da:f3:
         03:31:ad:38:44:b3:cf:db:ec:a7:af:d8:8e:4c:6c:4d:28:7c:
         34:d1:18:28:9a:a9:93:fb:94:83:90:85:bd:ed:f1:ec:09:2e:
         99:bc:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----