Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04e9b609-0340-320e-9f36-54ad69642120.roa
File:                     04e9b609-0340-320e-9f36-54ad69642120.roa (raw, json)
Hash identifier:          7L+emxMa4mLz7GHX5UHYalXTufDTdXELaDSb8v5bayY=
Subject key identifier:   AF:F9:8F:AF:C3:DE:61:29:AE:55:B3:D8:E0:0C:E7:C9:1E:7B:39:E4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CC804DDB95A22AD5A32900200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04e9b609-0340-320e-9f36-54ad69642120.roa
Signing time:             Tue 01 Feb 2022 05:00:00 +0000
ROA not before:           Tue 01 Feb 2022 05:00:00 +0000
ROA not after:            Tue 08 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        136.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c8:04:dd:b9:5a:22:ad:5a:32:90:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb  1 05:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2022 GMT
        Subject: CN=dd16de8e-0254-4df8-877c-ba7097889779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:98:ed:28:33:5d:1d:df:d2:03:41:fc:25:
                    df:5d:b1:22:14:6b:64:c9:18:b7:3e:20:2a:9b:3d:
                    6a:74:a6:67:ed:93:1a:ec:2c:75:b3:ad:78:ad:7d:
                    1a:86:9c:a1:39:e0:e7:44:4b:53:35:25:b4:0f:06:
                    dd:4a:3c:d5:20:5c:e7:fd:f4:6c:a3:64:13:9f:5b:
                    f2:2b:2b:4b:09:8a:9c:c0:7f:c4:f1:21:c6:1d:e2:
                    a6:d6:34:87:f9:f7:b0:32:d4:39:67:57:a3:91:25:
                    20:fd:e4:25:23:75:a1:0b:32:8f:cd:e3:16:65:5f:
                    de:72:ce:6d:25:9f:ef:5a:3e:0e:2b:e4:5f:4d:97:
                    8f:f7:0f:d3:ce:00:a1:3d:e7:8f:42:7f:6f:e6:1c:
                    8c:42:0f:fb:9e:c1:8b:30:bb:58:74:ef:ab:c1:18:
                    ca:86:3b:5c:07:5a:40:60:85:bb:45:75:2f:6a:10:
                    8d:6a:86:0c:70:74:b8:0a:77:06:cc:09:d2:92:db:
                    fb:d3:50:14:46:e6:b7:61:02:d1:ae:2e:78:74:82:
                    12:99:b8:62:c9:b6:78:a9:20:ef:b6:21:73:87:6a:
                    e3:0d:d6:60:ee:97:96:ea:94:f2:6c:55:a4:b4:e8:
                    c1:90:a9:02:8c:ac:88:01:7c:90:cc:18:fc:59:e2:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:8F:AF:C3:DE:61:29:AE:55:B3:D8:E0:0C:E7:C9:1E:7B:39:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04e9b609-0340-320e-9f36-54ad69642120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:13:8f:39:17:91:41:49:21:3c:e9:e2:11:7c:43:c7:92:e7:
         5b:38:bc:cc:72:bf:7d:4a:31:57:11:fe:aa:4d:99:95:8f:7f:
         4c:82:6f:e2:e8:f6:8e:f1:2b:44:8b:59:aa:9b:2e:b5:d0:c1:
         1a:1c:17:34:29:c8:97:9a:dd:ce:b7:e7:b5:c1:c3:c9:9d:07:
         4d:4e:f7:08:67:a4:4f:16:cd:77:c7:50:3d:ba:94:02:19:19:
         39:8e:22:41:9f:9e:2b:92:cb:21:4d:7a:30:63:d8:b0:55:fe:
         56:c2:99:ae:54:54:78:b9:46:d5:78:b4:29:49:29:0c:92:ea:
         b2:57:4e:d0:e2:00:13:fd:d8:41:2d:ad:86:df:d5:1a:9f:b9:
         85:07:0b:2d:d4:f2:c7:14:7c:b3:78:a0:ad:23:e5:9d:61:27:
         6c:4b:da:18:68:d1:30:df:d0:77:15:9a:76:c9:3f:10:c0:87:
         fc:71:8b:2f:2a:b2:57:1d:f9:a9:3a:24:58:a5:3f:60:dd:9d:
         4b:43:d1:8c:d3:89:3d:a9:e9:06:95:48:a2:10:31:b6:28:d6:
         51:48:8e:4c:69:1d:77:55:78:f1:7b:5e:cb:3a:0a:ee:da:cd:
         05:9d:92:7b:e1:e9:1e:ac:ec:1d:5c:2f:ed:b8:a0:00:72:c0:
         51:5e:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:27 2025 by rpki-client