Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe5df87-63cb-38a1-a5ec-f24b78cd858c.roa
File:                     0fe5df87-63cb-38a1-a5ec-f24b78cd858c.roa (raw, json)
Hash identifier:          B7MtPKMMD0YiU3JzxAkLgvN6YcDkKqtrqvMX2Fuzro4=
Subject key identifier:   C2:64:50:3B:7B:81:EE:C1:4B:E8:A1:9D:09:51:1E:9C:96:20:52:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D1EB5A67DFD58814C20344F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe5df87-63cb-38a1-a5ec-f24b78cd858c.roa
Signing time:             Fri 04 Mar 2022 05:00:00 +0000
ROA not before:           Fri 04 Mar 2022 05:00:00 +0000
ROA not after:            Fri 08 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        141.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1e:b5:a6:7d:fd:58:81:4c:20:34:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar  4 05:00:00 2022 GMT
            Not After : Apr  8 04:00:00 2022 GMT
        Subject: CN=3acea2c0-13a0-47aa-b294-e9b0ab013b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:36:9a:51:11:b0:05:5f:3a:4d:f7:83:b5:
                    4f:48:cc:c4:71:c5:f4:e2:06:b3:8e:c7:07:f2:9c:
                    20:7f:64:40:fa:d2:d9:cb:be:9f:a7:6f:9c:f2:58:
                    74:f4:1e:2c:60:0f:b2:f1:ce:dc:93:80:e0:2a:97:
                    03:fa:ab:63:64:5a:26:8a:19:6e:c0:a7:b6:0b:da:
                    74:33:63:5e:c6:b6:0f:81:b8:72:a9:b4:5c:cc:4d:
                    d9:cf:93:e5:3b:56:9d:22:fe:c5:47:8a:fb:a5:68:
                    e1:1d:45:47:bf:48:79:78:ce:53:d8:94:d3:28:07:
                    72:43:2c:a6:ed:a0:49:f0:63:91:11:50:1d:83:9b:
                    bf:df:8d:04:53:71:f2:b8:89:9d:de:15:ff:64:0d:
                    fa:9e:b6:59:e1:bb:9f:bc:b0:f0:dd:f6:b9:44:e4:
                    af:ec:59:44:f3:34:b5:d6:d7:69:76:00:6b:bd:1c:
                    d7:fc:52:8c:3d:55:37:98:37:78:86:e3:39:b4:28:
                    34:2b:7e:d4:5e:d9:0b:4f:db:54:14:05:c8:88:c4:
                    15:40:b4:40:67:07:c4:94:17:3f:d2:df:5a:a3:c8:
                    b8:6c:76:e1:a1:f6:2a:ea:90:80:af:cd:b2:c4:8e:
                    3f:e6:2b:5a:1b:bb:68:63:90:a2:d2:71:a0:44:08:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:64:50:3B:7B:81:EE:C1:4B:E8:A1:9D:09:51:1E:9C:96:20:52:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fe5df87-63cb-38a1-a5ec-f24b78cd858c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a4:73:03:55:ba:6d:ff:2f:84:36:cb:36:b3:d0:66:6b:66:
         2e:fc:93:f1:eb:1f:fa:1a:61:c7:15:e4:c4:03:da:4a:42:9c:
         4a:e7:44:55:30:97:69:ea:27:25:86:c7:cb:bd:f9:19:d6:b5:
         2f:99:49:91:35:70:9d:03:3f:67:50:05:32:68:02:ec:fb:d4:
         98:61:44:b2:6f:6a:0f:2b:9a:da:ef:af:43:6e:03:b1:98:6f:
         f2:c5:83:b6:c9:66:ff:57:6b:b9:44:b2:45:53:cd:03:a9:15:
         ae:9a:e1:1d:a1:dd:65:9c:13:56:f0:d1:3b:ed:46:fe:c2:b5:
         df:35:8e:0e:69:10:1a:13:5c:e6:ba:da:eb:bb:e6:34:38:a6:
         0c:e9:4f:bf:70:96:92:0c:b3:d8:02:97:80:4e:52:4c:90:b8:
         96:5f:95:bd:bf:f7:84:88:71:9d:9b:95:cd:6c:a3:68:f4:9f:
         26:5c:85:cd:c9:16:b2:ea:50:8a:15:8e:66:46:0d:fa:78:29:
         8f:2a:fb:b8:76:ee:29:d8:17:86:f3:f6:3c:9a:44:ba:b8:db:
         2c:a9:af:19:dc:f2:58:5e:42:71:17:23:a4:75:1f:c7:0c:c3:
         1f:c6:0c:6c:8e:86:eb:8d:89:b9:d4:98:ef:fc:3c:77:37:5d:
         42:c2:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:17 2025 by rpki-client