Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f6744d1-cddb-3790-82b3-a2db2d5fb8ce.roa
File:                     0f6744d1-cddb-3790-82b3-a2db2d5fb8ce.roa (raw, json)
Hash identifier:          Upplo6NhSG2HxaHFMfWOqhFAJCCik9tzDH3vCBAz6Eg=
Subject key identifier:   A9:3F:B3:04:D9:C3:F4:29:8D:BA:77:4D:EA:87:A8:C2:14:C1:5A:AE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BB532B7EDF1857CED4FC87C8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f6744d1-cddb-3790-82b3-a2db2d5fb8ce.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        141.139.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bb:53:2b:7e:df:18:57:ce:d4:fc:87:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=e796891e-d097-4cd1-8067-1a9ad53a13c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:04:4e:64:bb:13:16:70:2b:09:83:4d:65:
                    1d:81:f4:1b:69:a5:c4:cc:94:8e:0c:65:61:1c:de:
                    27:f0:18:2b:32:70:3f:cb:69:0d:d4:be:90:eb:05:
                    06:76:a5:15:98:ba:69:e0:f3:ee:09:ba:cd:da:dc:
                    1c:ce:74:51:e0:ee:b4:49:59:67:9f:47:ce:71:6a:
                    31:1c:ec:b6:0b:7c:ee:d1:6c:03:da:3c:39:ba:ec:
                    84:5f:b1:92:b0:f9:17:83:84:7f:1e:62:b1:1b:50:
                    74:0b:6e:52:58:90:7f:0a:77:69:de:1d:d5:07:f7:
                    f2:80:3a:5a:0d:67:7e:1a:c4:85:a5:d4:ab:39:87:
                    68:a8:46:aa:ce:cc:a1:0b:30:c3:c1:26:d8:e5:07:
                    b8:de:b0:8e:ad:a9:66:44:35:cf:e9:33:b2:05:ec:
                    57:96:ad:a3:ff:c6:42:0e:dd:ff:f8:71:62:b7:28:
                    b6:f6:c6:6c:59:e6:f5:a7:df:af:6c:e8:9a:b3:6b:
                    7d:52:c2:02:a1:0e:f8:40:8b:c7:7f:60:36:c8:65:
                    1f:c3:79:f8:93:8a:49:5e:7c:83:3f:07:a7:18:3c:
                    f8:75:d3:34:78:5f:8b:64:63:3d:57:75:78:86:e1:
                    9c:1e:c2:10:99:ea:b0:07:83:70:27:89:fc:c2:f1:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3F:B3:04:D9:C3:F4:29:8D:BA:77:4D:EA:87:A8:C2:14:C1:5A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f6744d1-cddb-3790-82b3-a2db2d5fb8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:7b:4c:f9:5e:08:23:74:9f:33:99:a0:9a:6c:ea:14:08:
         c9:ec:de:cd:96:63:fc:74:4b:c5:85:2c:c3:9a:6f:ab:ee:7a:
         a3:d8:45:b5:d5:d5:68:d2:dd:1e:5d:62:3d:7a:70:00:d0:06:
         b8:50:a0:91:47:7d:70:fe:0e:1f:3c:61:6c:25:9c:71:12:69:
         f7:e4:9e:b8:57:21:a4:8e:ed:cb:8d:a6:43:81:33:00:95:2a:
         b2:f3:1e:a7:55:25:b2:32:ff:85:57:fa:14:c4:13:4f:54:e9:
         68:e9:f9:60:d5:98:01:de:7d:08:dc:d0:3f:a1:3c:f6:f7:49:
         8e:f0:cf:18:fa:63:32:8b:ea:ab:9d:3e:2c:14:0d:fe:13:26:
         0b:d0:b8:60:ec:8a:61:d6:32:c2:c1:2c:7b:59:67:14:37:e0:
         76:b9:ef:3d:c2:d9:1a:d2:ef:cb:c3:a3:a4:76:50:b4:1a:f1:
         5b:d0:5c:ec:fa:63:40:55:bb:30:00:ce:94:a6:e4:70:b9:e4:
         21:05:3e:19:71:01:f6:36:7c:9a:a7:7a:bc:cd:79:3b:8f:4a:
         9b:2d:be:20:9a:ad:f8:4f:96:6c:3d:c6:74:79:df:5b:88:7a:
         a4:16:87:8f:91:bb:54:95:5b:80:7e:3d:d6:84:cc:f6:23:20:
         c5:bf:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:08:35 2025 by rpki-client