Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05c1ce23-c17e-3cf7-9d66-065d14dce98e.roa
File:                     05c1ce23-c17e-3cf7-9d66-065d14dce98e.roa (raw, json)
Hash identifier:          ispoUh5nPSF67UVjPpKzntobVAywITzdAS485QwibJc=
Subject key identifier:   C2:CA:39:DB:F2:0E:D9:1F:61:95:EC:B2:6B:9B:0E:BA:9F:D2:AB:30
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8367E84D0CFEF096748BA240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05c1ce23-c17e-3cf7-9d66-065d14dce98e.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        146.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:67:e8:4d:0c:fe:f0:96:74:8b:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=4eb716a8-c0e0-479c-b8e1-90cf69012d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:77:b0:f1:26:a3:3e:ad:fe:c9:d6:cf:7c:
                    ca:9e:19:23:57:a2:01:14:75:e3:5f:99:0e:f7:f8:
                    43:5e:eb:c0:94:44:ce:2c:98:7b:1b:c2:00:06:c3:
                    86:7a:b0:10:e5:1c:2f:5a:81:c1:9c:e8:20:fa:e6:
                    db:11:ef:35:ab:8e:d8:64:95:87:e5:1e:03:4e:39:
                    24:21:ac:c8:ce:45:7c:6b:c7:15:0c:98:cb:bb:e4:
                    25:81:2d:62:11:e5:62:0a:4f:ca:29:e2:88:25:5a:
                    c7:d8:cd:6e:ac:4c:99:4a:bf:cf:bf:c6:d2:71:35:
                    36:d3:1b:f5:11:4c:12:c5:58:73:42:bb:06:76:17:
                    95:55:3e:d1:89:d8:30:e2:0f:23:8a:37:98:45:f1:
                    14:ec:e9:35:9c:36:af:b1:3e:3c:80:07:62:5a:9a:
                    e1:6c:d1:ac:d8:f8:29:1c:62:6e:fa:41:df:23:cc:
                    ab:ce:c9:70:22:0b:2d:72:3f:d8:30:22:e0:d4:95:
                    57:0f:a8:5a:71:c0:95:09:32:d1:4d:ee:2c:db:be:
                    53:56:93:82:6b:aa:0e:db:75:9e:7f:20:1c:49:62:
                    27:3c:b0:d3:81:9f:19:c5:cf:d8:12:1d:c4:b6:c9:
                    9b:20:aa:2e:c5:4f:80:2a:7c:f3:82:27:f9:a0:d3:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:39:DB:F2:0E:D9:1F:61:95:EC:B2:6B:9B:0E:BA:9F:D2:AB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/05c1ce23-c17e-3cf7-9d66-065d14dce98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:67:3d:ca:a2:86:1e:8c:a7:e2:6a:e1:59:aa:28:cb:67:66:
         ab:8e:7b:c8:98:44:f2:29:53:6b:3e:ba:f4:b7:52:5d:a2:9d:
         88:80:16:00:c1:4a:d4:c5:05:16:03:27:14:f2:8f:86:5b:84:
         72:9d:9d:70:18:f7:8c:30:ff:ea:e4:90:64:78:85:69:e6:95:
         3c:f4:f6:c8:f6:97:8d:e0:87:8c:a5:40:27:7b:e5:24:1a:41:
         0f:f7:94:12:5e:49:c2:3a:85:90:49:f9:3c:c9:a1:44:5c:9f:
         75:58:70:ff:a2:ac:b7:b9:dd:c7:7b:d6:34:b9:d5:21:ac:94:
         ae:03:e2:5a:55:0f:24:9f:05:02:e3:55:6f:8b:61:88:8b:91:
         03:e7:c0:07:68:3c:35:7f:62:8b:ef:4a:66:d6:2a:d9:17:f5:
         a0:cb:d7:be:b8:f2:af:9a:c1:da:02:b7:64:c4:89:76:39:38:
         bb:c7:86:4a:b9:c8:c9:84:50:e5:54:61:50:cf:91:df:29:c1:
         b4:9f:00:df:f8:03:05:d9:29:10:76:e7:cd:fe:d5:de:f2:eb:
         8d:c1:ff:82:78:d5:1e:e5:5e:a3:e9:6f:2d:0b:6b:1b:79:53:
         53:7e:b6:78:e2:7e:e2:71:2d:64:23:83:35:b0:d2:d8:27:85:
         39:4d:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:52:44 2025 by rpki-client