Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b5f2825-906c-391d-b882-c73557904bea.roa
File:                     0b5f2825-906c-391d-b882-c73557904bea.roa (raw, json)
Hash identifier:          5c0iprIwqjM6a/a3f4AAJERQfWKoxn0THmC5EFiQ8sc=
Subject key identifier:   78:1D:D2:24:2A:37:65:46:3E:9F:FC:E9:B1:22:86:DF:11:55:E0:66
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E6DA83D4A2E2B1C5E57AE8900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b5f2825-906c-391d-b882-c73557904bea.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        161.188.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6d:a8:3d:4a:2e:2b:1c:5e:57:ae:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=7c42ba36-5e7d-45f6-88aa-76446506e671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:9a:e5:ec:71:15:e7:02:8d:53:52:c4:5b:
                    d5:a7:82:04:2f:0b:8a:f6:58:ef:7b:80:fe:df:4f:
                    9f:9a:f0:c8:85:6a:70:d9:db:77:fd:83:02:fd:aa:
                    0a:95:03:46:45:5e:de:4c:b4:3d:cc:1e:e9:6c:db:
                    e8:9f:c0:a9:44:02:44:44:a3:fe:b6:21:8e:60:14:
                    26:39:e5:37:b8:c2:97:18:bc:f9:5e:5c:4f:ba:05:
                    f1:63:e9:46:91:51:6f:b5:2b:c0:b2:e0:03:d8:08:
                    7f:05:d2:05:c6:3a:bf:13:41:5a:ed:83:b8:ec:1a:
                    d7:0e:c4:f3:c0:41:2a:7a:53:40:ce:87:9d:09:23:
                    fc:20:89:f6:1a:70:e6:76:b4:c1:f4:92:4a:fd:34:
                    91:7a:fc:35:81:20:e1:f8:35:e0:39:a0:48:9a:55:
                    e8:01:15:63:3c:0d:c6:ff:b3:f8:0a:dc:84:e0:39:
                    15:a1:5f:24:a8:e9:9c:95:9e:3c:5d:88:fc:86:db:
                    5d:c5:8f:23:da:f9:4a:be:38:e2:63:02:10:69:be:
                    af:22:7d:5e:a0:f9:96:6a:f6:65:55:26:76:d0:f4:
                    d2:ab:56:9d:1b:97:e3:b1:5b:b9:32:7b:29:16:bf:
                    50:01:28:5d:8f:4f:34:17:52:ad:bb:2e:f3:31:97:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:D2:24:2A:37:65:46:3E:9F:FC:E9:B1:22:86:DF:11:55:E0:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b5f2825-906c-391d-b882-c73557904bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:7a:67:65:3a:63:a4:67:3c:dc:5c:88:21:68:91:4b:1f:
         dd:87:19:87:57:66:28:15:41:e7:a5:af:b2:20:53:9e:e7:fe:
         80:38:ed:fd:ae:be:ba:ec:86:a8:a8:13:64:28:25:79:1a:61:
         7b:f3:91:f1:da:39:d9:61:34:e4:ae:1b:7e:ca:9e:e1:a9:eb:
         83:7a:fb:e5:54:88:90:2f:2a:00:7a:15:91:b8:0e:ea:eb:55:
         b3:ef:85:d7:9a:8e:d1:42:98:b7:29:61:16:ef:0c:4b:59:85:
         2c:04:66:45:71:7a:b0:71:e7:c7:67:3c:8a:1e:76:68:72:3e:
         45:df:9c:a4:f9:05:d3:53:20:b7:13:84:dc:51:11:85:b6:0f:
         08:a9:02:4f:0d:c8:09:eb:e2:1f:1b:8f:d4:ea:39:05:f5:c4:
         43:ed:76:ec:18:20:af:ed:8e:4a:4f:89:e3:76:a5:a9:19:d5:
         47:b9:6b:18:47:86:4a:16:8b:16:4b:6b:61:90:e6:b9:55:5d:
         ef:43:ab:92:38:33:6f:80:69:ac:1b:32:58:89:d9:5b:1b:a4:
         9b:9c:a3:c3:30:e1:9f:ce:e1:39:9d:2e:6d:69:ea:1f:af:14:
         23:dc:d1:dd:44:91:ab:17:a0:4a:9d:32:65:d2:54:0b:30:6b:
         51:9c:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:34 2025 by rpki-client