Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06c72bbb-1aed-3037-93bb-9e363ca5237a.roa
File:                     06c72bbb-1aed-3037-93bb-9e363ca5237a.roa (raw, json)
Hash identifier:          XH7HW3arQaWJDlZFj8ZpNoz/OjyK3Hqll6xVTVT1cj4=
Subject key identifier:   69:03:5B:8E:52:61:3F:EA:58:EF:F8:E4:82:68:2F:5C:AF:66:0F:30
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD8D0A36B275006DC0D6F280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06c72bbb-1aed-3037-93bb-9e363ca5237a.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.144.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:8d:0a:36:b2:75:00:6d:c0:d6:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=eb6e1ce9-6d4a-49e1-8bfc-cdc0e43b665f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:7c:5a:46:d6:cc:30:18:42:bc:6a:ea:d7:
                    eb:6b:47:98:27:5b:f8:e7:cf:9a:79:49:31:f5:05:
                    b6:76:da:a5:0c:52:90:11:bd:85:90:5b:da:b6:41:
                    aa:35:71:ee:51:a7:95:db:8b:47:9c:1e:7a:94:b2:
                    80:8b:a4:30:48:90:a5:a2:f0:32:a8:45:c1:40:2e:
                    6b:42:26:24:21:a9:40:d5:9a:44:53:40:50:e7:86:
                    34:c9:48:51:23:4f:59:81:21:52:e9:23:40:a0:30:
                    83:1d:fe:fb:a4:c7:68:2d:cf:8d:dd:83:c9:27:06:
                    f3:b6:98:9f:5b:af:d1:43:55:90:a7:aa:c9:dc:3b:
                    6d:5b:be:3e:53:7d:9f:e4:55:80:ea:e8:99:d2:94:
                    34:f4:99:54:03:17:f5:3c:d7:ad:09:fd:24:f2:85:
                    69:c5:d3:63:c2:ba:24:ef:95:02:79:ea:7b:a0:64:
                    54:0e:4b:53:46:00:da:0d:91:c5:d2:9e:3f:bd:bb:
                    1d:e6:11:cd:e2:15:94:67:0b:df:e7:dd:9c:70:d2:
                    2d:81:2e:54:52:7c:f1:98:f8:17:35:41:a6:7c:25:
                    94:64:e9:15:d4:0a:78:7d:25:59:c5:52:2b:25:d0:
                    94:a3:a4:aa:f9:62:be:12:76:b0:90:e5:af:be:9f:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:03:5B:8E:52:61:3F:EA:58:EF:F8:E4:82:68:2F:5C:AF:66:0F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06c72bbb-1aed-3037-93bb-9e363ca5237a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.144.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:06:b8:ab:77:ab:de:44:c3:a8:ce:f0:93:0f:04:fc:5d:e3:
         89:83:a6:31:6e:54:51:0e:7e:65:89:ea:04:3d:05:dd:4e:2d:
         f1:15:41:70:64:6d:f4:62:ce:57:9b:76:43:51:bd:38:2c:fe:
         34:c1:0d:e8:e0:c4:c7:8f:c9:fb:15:c5:41:a9:5a:eb:b9:28:
         cf:6b:62:b3:c4:9e:09:01:b0:5f:46:20:47:af:92:d9:3b:7f:
         5e:cd:88:54:42:f7:52:9c:2a:59:57:0a:63:99:3e:a8:aa:bc:
         46:34:ac:23:00:aa:15:01:25:2d:a1:7b:42:45:df:59:df:93:
         07:bc:b4:4f:65:54:78:98:19:a2:c2:23:48:e2:94:76:80:1b:
         d0:58:7b:a4:7f:bb:e3:52:b1:a2:f5:9c:08:e5:b4:1e:c5:17:
         2e:36:f8:8f:96:e9:d8:92:df:99:ea:c0:46:9f:f5:43:35:05:
         8e:16:42:17:8f:f6:8e:2e:59:06:69:67:ee:ae:70:a6:40:17:
         68:fa:bc:5a:56:b6:4c:30:97:d7:55:2f:fe:c9:ca:f3:f9:c9:
         0f:4e:82:4e:82:0c:9f:a9:07:58:9e:48:77:29:8c:a4:98:ae:
         50:82:b8:ea:32:a4:a1:da:09:59:87:31:1e:bd:4b:c7:9b:a4:
         5b:34:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:05 2025 by rpki-client