Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08a94320-6a22-37a9-80c1-d2265c140406.roa
File:                     08a94320-6a22-37a9-80c1-d2265c140406.roa (raw, json)
Hash identifier:          r9LtnCFeKeEogBYrsKZ4E6oa9fjGcmTpDfrrULvLlPs=
Subject key identifier:   B3:51:1F:70:BF:C3:C0:12:C5:08:9D:44:39:0D:CB:8A:0C:01:B8:AB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F90338DD2F6951779D4180D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08a94320-6a22-37a9-80c1-d2265c140406.roa
Signing time:             Thu 13 Oct 2022 12:00:00 +0000
ROA not before:           Thu 13 Oct 2022 12:00:00 +0000
ROA not after:            Fri 18 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        13.24.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:90:33:8d:d2:f6:95:17:79:d4:18:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 13 12:00:00 2022 GMT
            Not After : Nov 18 05:00:00 2022 GMT
        Subject: CN=acd5e0a2-667a-4080-993b-ce1114c6fda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:4a:c9:cc:aa:0a:6b:ea:a1:b5:8f:9d:e1:
                    df:41:a4:9e:55:54:26:f8:80:6e:06:f2:fe:33:13:
                    7b:d4:84:f7:88:f5:44:31:bc:f2:45:da:74:66:ea:
                    01:31:84:69:a3:cf:7e:5d:28:3d:3a:d7:94:a8:2c:
                    43:fe:75:e0:61:d1:11:fa:04:0f:1d:08:e4:69:b7:
                    7e:22:25:88:b0:bd:6b:f8:54:ac:7a:82:5e:c4:fe:
                    a5:e9:41:fd:f0:79:bc:b8:94:74:22:a6:a8:65:fd:
                    f5:cf:9b:bb:31:88:dd:b4:17:45:56:6f:99:5e:54:
                    5c:6e:4b:6b:1b:a9:1c:93:ab:11:33:0c:44:f7:5c:
                    8f:5f:79:23:8d:06:6c:c2:2b:26:b3:dd:19:fe:b7:
                    b0:6e:25:07:db:f1:42:ba:9e:c6:2b:46:51:c8:b3:
                    39:16:f6:2b:34:37:a9:9e:4d:56:7c:4c:82:e8:e0:
                    be:5c:6a:ce:b1:82:c3:af:58:fc:2d:95:94:76:ed:
                    99:f0:47:05:d9:71:1b:00:15:2d:02:01:14:0d:90:
                    62:c3:27:5d:03:e5:47:8c:02:90:f3:dc:e3:53:89:
                    9f:21:7a:8b:6c:61:81:10:ee:39:5a:c7:ce:6d:e2:
                    eb:18:7d:23:21:35:2f:35:b1:96:ad:04:a6:0c:e3:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:51:1F:70:BF:C3:C0:12:C5:08:9D:44:39:0D:CB:8A:0C:01:B8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/08a94320-6a22-37a9-80c1-d2265c140406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:38:4d:aa:57:5f:db:f4:79:31:d5:1f:98:74:c2:3a:7a:cb:
         55:1e:b0:67:71:90:00:24:fa:4c:d5:94:23:7b:96:20:53:80:
         13:b5:94:02:7d:60:ee:0a:8b:db:a8:65:82:9e:5d:60:ae:c3:
         38:5e:24:6c:e5:58:01:75:25:6c:9c:8a:e4:1a:4e:5b:f0:23:
         4e:44:cf:60:39:fc:93:63:84:52:7e:20:c7:d8:b0:1e:45:fb:
         f3:bd:26:9d:c1:d7:96:33:2e:61:36:05:45:1e:9b:64:c5:ed:
         df:18:3b:95:b3:7a:82:e8:65:8b:d3:36:55:03:2f:fe:20:ed:
         d7:d0:49:fa:2d:e2:f4:ac:18:ca:4a:c0:fe:31:f2:b7:d2:15:
         76:41:c7:35:36:73:de:20:7b:49:7b:6a:f8:82:63:98:53:86:
         97:25:eb:9b:14:95:d3:48:11:eb:0a:c2:78:d6:0d:03:58:25:
         a6:e2:88:57:bc:79:d5:ba:82:fe:66:30:4e:f5:4c:74:2f:4f:
         ed:43:11:3c:2c:05:6c:c6:c4:21:c6:41:c7:97:e6:29:65:21:
         98:3c:d6:c0:16:85:47:f9:56:a5:14:55:96:e5:42:ec:4a:a4:
         e8:c8:f5:62:9a:e2:8f:d0:3f:98:cc:54:42:e5:66:2f:47:e8:
         c0:0d:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:18:35 2025 by rpki-client