Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02d57457-d693-3edf-90ff-e3fe92e9a87e.roa
File:                     02d57457-d693-3edf-90ff-e3fe92e9a87e.roa (raw, json)
Hash identifier:          4dv5rVIak840Sr9dj9SjfEUKIblewKW7xLuwPZgB56w=
Subject key identifier:   6B:DF:87:EC:B6:55:80:EB:AF:FC:69:81:DA:C7:61:A8:7D:1C:24:64
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F01D2A303B55E0488BFB66730
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02d57457-d693-3edf-90ff-e3fe92e9a87e.roa
Signing time:             Tue 23 Aug 2022 12:00:00 +0000
ROA not before:           Tue 23 Aug 2022 12:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        13.112.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:01:d2:a3:03:b5:5e:04:88:bf:b6:67:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 23 12:00:00 2022 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=e9bbe61d-552e-42b3-85d9-cc5848e58337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:e8:d1:a2:8c:1b:86:75:37:73:20:8a:d5:
                    62:0e:22:57:3b:41:7c:bd:f8:19:a3:a5:39:d9:72:
                    3c:da:1d:3b:a6:aa:0f:0c:70:f8:54:e1:a5:18:4b:
                    25:37:ac:10:4c:a1:8a:04:7e:c3:41:06:ff:19:21:
                    09:ba:39:d4:03:62:f7:89:a9:e8:75:5a:cc:55:b7:
                    7a:29:a7:c4:3f:77:a3:f7:c5:e1:73:99:19:b7:8e:
                    07:a6:63:70:73:0d:50:6b:73:32:d3:57:83:e2:81:
                    ed:04:17:81:e1:33:9d:5b:4d:c2:ab:d6:e9:90:6f:
                    6c:1e:03:0a:f9:8f:d1:1b:45:6e:11:61:35:f0:eb:
                    5b:b2:46:df:f3:b9:3c:6e:c3:b8:95:74:ef:1a:14:
                    10:f2:76:8a:5d:65:79:2f:f3:8d:eb:b7:53:38:53:
                    2e:b3:52:e8:2c:1b:b3:db:a8:a4:00:dd:77:d7:15:
                    9e:0d:ed:3b:a8:4a:6d:92:fb:3c:08:2f:97:dd:4f:
                    66:76:60:92:94:0e:e5:95:66:4b:cb:9a:22:77:21:
                    51:15:4a:ac:92:e2:27:ef:de:b8:2c:72:ad:7d:aa:
                    de:10:1c:81:9c:9c:c8:5a:b3:23:63:f7:3b:3d:fa:
                    c9:82:37:12:50:ef:7e:e3:fa:e1:08:51:d7:9b:b5:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DF:87:EC:B6:55:80:EB:AF:FC:69:81:DA:C7:61:A8:7D:1C:24:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02d57457-d693-3edf-90ff-e3fe92e9a87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.112.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:06:5b:db:39:94:4f:59:cb:bb:d6:ce:bc:56:8e:1d:85:
         79:15:a7:91:5c:11:d8:a7:74:5a:f6:0c:41:ba:df:10:2f:dd:
         36:cc:7f:99:35:32:a5:60:f8:2d:e4:06:12:02:4b:de:ed:70:
         d8:0d:f3:45:a0:64:1b:e8:c2:0d:6f:35:5b:4d:36:70:55:3e:
         56:8e:4d:51:4d:84:f0:07:a9:ef:c8:18:dc:fb:84:34:59:65:
         b8:36:6c:e0:db:99:c9:2f:70:ee:3c:75:10:9c:5f:11:9f:6f:
         42:3e:d1:23:6a:22:2b:8f:31:82:12:26:cc:f7:9b:e1:d7:1e:
         c7:00:d3:9f:74:3c:9c:13:7f:71:f1:6d:cf:fe:54:9d:58:d3:
         04:31:97:34:a0:fd:f9:a9:68:5f:9e:6e:85:96:d4:6d:ff:7a:
         c6:33:86:f2:b1:fa:73:c8:ee:78:4a:c2:c1:4c:db:f5:6e:ed:
         4a:e0:20:7b:6e:2d:2d:b7:1a:b7:d4:a0:60:85:d4:36:c2:2b:
         44:9e:0b:c7:51:f4:09:e6:0f:88:3d:53:be:a0:d1:70:14:bf:
         cc:68:f2:fd:74:44:8a:3e:3a:20:b0:d2:14:4c:14:dd:27:a8:
         01:1b:53:23:f8:f2:bf:32:3c:53:c4:e4:a1:d8:66:5f:c2:c8:
         97:75:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:42 2025 by rpki-client