Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08694f65-4039-347e-9d60-a9b009071319.roa
File:                     08694f65-4039-347e-9d60-a9b009071319.roa (raw, json)
Hash identifier:          RkygLonVgp+QL7yISBfqOMzV2QQGm8wiEBhMK9OMYJU=
Subject key identifier:   43:18:34:B4:CC:C5:33:E7:B0:67:10:69:8D:21:86:04:67:49:17:C4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE2BC7F698A254DE0B2918E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08694f65-4039-347e-9d60-a9b009071319.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        160.1.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:bc:7f:69:8a:25:4d:e0:b2:91:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=7f272f10-92ea-44a5-a121-5a9f914393dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:26:a1:c0:f4:17:ba:08:85:c8:9e:3f:00:f0:
                    cc:10:dc:62:66:93:bb:f2:b6:10:59:27:1f:e0:81:
                    2f:6d:03:85:cc:28:ec:dd:ff:a9:c9:26:0c:39:25:
                    5d:5c:c3:39:64:57:59:1a:ca:38:55:6e:5e:5a:ac:
                    33:a7:2b:39:ab:a4:f6:7f:c7:a7:ce:78:f3:ec:ba:
                    80:7a:23:f2:c2:a9:af:5e:e5:b9:7a:f6:06:00:63:
                    60:3a:c5:19:ff:ca:2c:de:c4:56:7c:0e:38:bb:1d:
                    44:55:ff:66:b9:8f:7e:93:7e:82:5d:34:c0:40:86:
                    be:a6:ee:c1:66:7f:b1:dd:a8:17:5b:c1:c1:b1:ba:
                    9d:48:51:d0:5f:7f:a4:3f:a3:a5:9c:35:dc:c9:8d:
                    f3:61:97:a8:55:34:f5:da:11:36:7f:f8:1c:4b:48:
                    02:e6:12:3f:da:51:3a:0d:68:0d:1d:3b:c2:9d:df:
                    44:bf:25:f0:36:8d:4e:33:9e:dc:c0:a0:a9:16:e1:
                    e5:81:b6:cc:2a:85:11:2b:0f:05:83:1f:bf:f0:a6:
                    0e:f1:76:db:13:96:0d:af:99:be:9e:89:8d:f0:90:
                    fb:be:be:ef:5c:55:d5:14:4e:54:da:67:75:51:2b:
                    94:76:1b:cc:c2:f5:e6:e6:e7:d7:25:21:56:10:3a:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:34:B4:CC:C5:33:E7:B0:67:10:69:8D:21:86:04:67:49:17:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08694f65-4039-347e-9d60-a9b009071319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b4:5f:88:b8:ec:81:68:72:db:c0:15:38:29:74:ec:26:7d:
         97:63:53:3d:72:aa:94:f1:31:1b:48:3d:fd:6a:cf:84:df:ce:
         c3:90:b9:38:eb:52:5a:1b:dc:db:2d:51:b1:3f:16:0b:d1:56:
         44:ea:88:58:f1:37:fb:d1:35:ab:d3:94:f4:d5:a9:0b:11:96:
         22:89:36:fb:13:9f:94:8c:53:5f:6f:6d:cf:77:f4:31:ad:3e:
         7f:dd:8b:80:bd:12:7c:be:ae:29:02:3b:d3:be:a9:e1:17:c0:
         6e:19:99:39:29:9a:1d:06:01:60:a6:4f:27:cc:7e:0c:d3:5c:
         fd:32:59:2b:f1:01:e6:2f:63:47:61:8c:f1:99:a3:dc:34:78:
         bc:f6:5c:d4:fa:88:d9:7e:11:db:94:f7:c8:6b:e4:54:44:4e:
         19:78:31:07:df:da:30:4d:dd:11:35:49:7c:c2:fd:f5:81:da:
         c5:63:dd:29:de:de:69:83:58:49:07:0b:13:d9:66:c6:b5:8e:
         79:55:10:90:d6:92:1f:b7:6c:39:18:67:65:38:3c:e2:f1:ac:
         a8:29:e3:19:d5:4f:c4:42:dd:ff:05:e5:8d:f6:5a:53:db:15:
         b1:34:5b:81:b5:a4:6f:eb:49:94:b3:a8:f0:bd:99:8a:aa:84:
         d8:73:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:42 2025 by rpki-client