Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0009f142-180e-3523-85e8-a53c3b469826.roa
File:                     0009f142-180e-3523-85e8-a53c3b469826.roa (raw, json)
Hash identifier:          hV0pPzPe745aw/HVOEhqcS/sYn7YUWvGrHrN24UHDf8=
Subject key identifier:   4F:21:74:D4:8B:EF:BB:8F:19:AA:2C:D6:88:F5:CE:A1:9E:A6:DE:0B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD675FD69DC3861404466B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0009f142-180e-3523-85e8-a53c3b469826.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        47.128.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:67:5f:d6:9d:c3:86:14:04:46:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=adb5e727-074f-444e-b00d-e4b1ab9de096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ce:f9:b2:a0:f0:32:6d:96:98:6d:d3:b2:d9:
                    54:0e:53:f4:9b:6c:48:a9:60:69:1f:85:92:cc:77:
                    da:88:38:08:cb:dc:a2:4c:10:a8:04:64:ee:d1:cf:
                    9c:6d:cd:ab:9a:ab:d9:4b:77:9d:d0:b9:56:68:60:
                    a4:fe:84:9e:78:a1:69:05:07:0d:11:76:e4:13:50:
                    ce:4f:26:b1:e3:9f:66:12:0e:32:b5:1d:bf:dd:86:
                    d1:bf:fd:bd:5a:dc:37:de:84:a7:3f:b4:65:58:1a:
                    f0:b5:72:ca:55:a7:3c:69:84:e3:a7:3a:98:a8:e5:
                    71:6d:78:a5:53:d7:a9:4c:ce:9c:8b:41:fc:a0:c8:
                    1b:c1:a8:41:d5:a6:03:b2:b7:f1:89:ca:75:40:14:
                    25:83:b2:ed:de:5b:20:60:91:32:75:aa:5a:06:c9:
                    1c:bd:99:13:e6:55:8c:cf:95:97:11:8b:29:25:f7:
                    54:74:62:8a:ea:0e:e0:e6:a9:8a:59:83:5d:58:02:
                    98:08:9b:2b:52:1d:93:45:c7:d7:ec:c4:4c:67:30:
                    9c:9d:83:6a:c6:7a:42:2f:78:42:d2:00:ee:ac:26:
                    b9:56:e6:c6:4a:26:fe:d7:b1:17:05:dc:3b:93:8c:
                    79:48:b9:df:2f:85:e4:34:8f:54:6d:2c:92:a3:3f:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:21:74:D4:8B:EF:BB:8F:19:AA:2C:D6:88:F5:CE:A1:9E:A6:DE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0009f142-180e-3523-85e8-a53c3b469826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.128.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:12:70:c6:12:85:74:51:fc:df:0e:e3:62:39:9b:b8:ca:
         38:53:ca:26:4e:5a:2a:82:ba:8b:62:4d:e3:8c:20:ab:1d:6c:
         a6:a9:06:d7:a8:2b:67:4b:7c:9d:89:5e:c0:5b:3f:5d:d0:38:
         ac:f3:2f:70:2e:67:5a:4b:14:28:1b:51:aa:1c:f8:5d:ec:d7:
         47:72:f7:86:e4:3b:a9:c2:a0:da:3a:10:f1:74:57:3e:83:6d:
         20:d1:04:36:c8:98:bc:d1:5f:1d:7e:88:f2:26:e7:a1:32:da:
         8e:9c:b4:5b:f0:3f:95:4f:c8:51:02:ba:1b:e8:ea:a5:47:47:
         8d:f8:91:d8:a7:58:ad:cd:74:43:66:a1:ca:55:f9:7a:a8:06:
         33:46:8e:84:04:53:05:df:cf:6d:0b:fe:d0:bc:31:23:33:1a:
         73:5c:29:5e:0e:4e:24:b8:d2:d3:84:ea:1f:01:65:02:ea:a0:
         e8:32:30:8b:b1:aa:a2:a2:45:75:75:9c:36:f8:de:73:26:0f:
         bc:50:a8:03:99:d5:2e:66:4d:b7:43:b0:51:e8:d9:35:3c:92:
         bc:17:37:7f:09:7d:cd:f3:22:23:50:94:de:79:a6:6c:51:25:
         42:94:42:3b:91:d5:78:a8:6c:38:19:e8:f8:9b:55:ee:1c:d6:
         7d:68:fd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:58 2025 by rpki-client