Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01464801-39f7-323b-9bc7-81bba16b6fea.roa
File:                     01464801-39f7-323b-9bc7-81bba16b6fea.roa (raw, json)
Hash identifier:          v0BYii5C+Rbgam41gKrdnMA0A7um52/OrOB22SaD7hQ=
Subject key identifier:   DA:63:6A:F2:CC:FD:08:D3:43:DB:6C:DA:09:E6:7F:17:17:37:C2:F1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BC48DB021107411A01ACF690
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01464801-39f7-323b-9bc7-81bba16b6fea.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        146.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bc:48:db:02:11:07:41:1a:01:ac:f6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=f448b0f2-354a-4c5c-b3ff-1c7bac746dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:01:d4:8a:40:b1:ac:a9:14:e2:0b:5d:f3:
                    5e:7a:88:ba:4c:25:4d:fe:23:af:a1:b3:72:2f:6c:
                    b2:b1:14:07:6d:4e:5e:ce:61:cd:bc:ff:f6:2d:40:
                    c2:90:0c:0c:e4:32:9d:15:15:34:6c:0a:1c:d0:25:
                    63:67:46:f2:9b:ea:f8:61:70:b4:2f:92:2a:08:15:
                    c4:8c:d2:e9:57:e1:85:3a:5f:03:a5:79:af:b3:0c:
                    02:58:15:d4:26:bc:79:5b:ca:77:bf:7b:7a:fb:41:
                    b4:d9:24:cc:21:0e:ab:29:b9:60:2d:4f:8d:4c:ba:
                    41:91:8b:e8:3e:53:be:af:fd:4b:ad:10:95:4d:5c:
                    73:37:bd:60:48:95:f3:9c:20:7b:08:e4:52:4f:b9:
                    ad:9b:89:f6:82:77:f0:fb:5c:ef:0e:5c:8a:44:a5:
                    27:04:45:cc:05:17:09:1b:0b:54:fc:97:ba:9b:62:
                    94:2f:0e:df:3c:7b:8b:20:35:f0:0d:5f:64:53:75:
                    7b:c4:f0:90:ff:ee:c4:a8:da:1f:2a:b7:68:01:1c:
                    96:d6:dd:79:46:d9:81:5a:fc:3f:c8:2e:8f:33:93:
                    0a:1f:cf:2a:f2:88:a4:92:fd:a6:4d:9f:79:24:c8:
                    6f:a0:b4:6c:e2:1b:9e:a7:ae:1e:93:ef:b3:5b:6a:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:6A:F2:CC:FD:08:D3:43:DB:6C:DA:09:E6:7F:17:17:37:C2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01464801-39f7-323b-9bc7-81bba16b6fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:97:ba:20:3a:b1:e5:1f:93:5f:5a:13:e0:0d:12:0d:00:6c:
         c5:f6:0e:3a:db:31:ff:ca:eb:2a:92:74:d5:b8:47:b5:d0:0f:
         12:af:b9:7d:c7:4c:3b:f1:f5:a8:a4:34:4c:a7:45:e2:9d:f1:
         85:a5:49:83:52:be:8c:37:df:e7:4d:aa:8f:1d:9c:ff:b7:aa:
         0a:c5:37:9e:5b:15:05:5d:33:a0:57:60:a3:f6:b0:3b:bf:15:
         cc:63:4b:16:b2:28:f6:99:d3:94:0f:6b:a8:de:d6:65:82:7f:
         bf:4c:c2:a4:b3:98:8c:09:57:75:78:5a:c8:98:6c:3c:33:0a:
         6b:0f:d6:09:18:d2:9e:84:f1:d8:32:e6:15:fb:ed:4a:f7:1d:
         9e:9f:c8:0b:6c:c6:5f:4a:26:b3:18:94:0d:ba:27:fe:81:bd:
         f4:99:f3:21:f3:39:78:a7:ff:47:01:90:c7:42:1e:d8:4b:85:
         38:44:1c:90:de:7c:10:84:aa:60:13:a0:81:fb:bf:08:cf:69:
         4d:4f:71:55:29:d7:fc:c7:34:33:2f:8d:b1:f3:05:41:2d:0c:
         ff:96:53:ad:4b:9a:d9:43:4d:6b:64:4f:9c:bb:ce:43:63:a0:
         3d:07:39:d0:83:21:0a:25:4a:4c:84:8d:9f:94:24:3d:08:5e:
         df:dc:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:54 2025 by rpki-client