Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d7153e7-3fb7-3827-a5c9-005b9946fb34.roa
File:                     1d7153e7-3fb7-3827-a5c9-005b9946fb34.roa (raw, json)
Hash identifier:          Rk9gEJcqr2/sncQ5cERvqadJEqjYPUrGpnflNNhxssI=
Subject key identifier:   83:6D:F9:E3:AD:C2:4C:55:BA:59:B5:5D:C4:A0:7E:D3:F3:E3:DD:39
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CD07B87FCAF2FB38E74A87500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d7153e7-3fb7-3827-a5c9-005b9946fb34.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Fri 11 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        141.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d0:7b:87:fc:af:2f:b3:8e:74:a8:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Mar 11 05:00:00 2022 GMT
        Subject: CN=aa7a6a0f-5294-44e8-8021-24c13c440be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:79:2e:b4:5f:08:d9:25:fb:35:c2:24:db:
                    a5:95:7e:c8:d4:5d:48:2c:f1:c6:a7:f4:b4:7d:a4:
                    9e:67:4a:3f:f3:e5:55:f8:f0:79:18:29:4c:f7:17:
                    b7:b6:c9:66:4c:d0:f3:09:3c:e0:f8:e8:de:22:9e:
                    04:9d:46:af:f7:d1:c7:db:97:17:47:14:df:31:83:
                    de:71:18:ea:b6:8f:ba:4b:d1:22:1f:d4:c3:1d:49:
                    55:b4:40:47:0e:e9:2f:d8:9f:e5:dd:56:db:fd:fe:
                    c0:06:67:fb:01:20:49:78:76:47:fb:93:38:54:8e:
                    60:73:67:82:e7:72:8d:13:6e:86:97:bf:c3:aa:38:
                    fe:cd:b3:42:92:e5:a9:a3:90:3d:b7:06:15:6b:c1:
                    1c:a5:c6:61:34:d2:65:8d:d5:4d:ab:a9:88:c4:83:
                    1f:14:36:f8:48:71:76:c1:b2:15:0a:34:ad:a0:aa:
                    4a:3b:53:70:18:dc:0b:8b:b3:9c:74:3e:f9:49:13:
                    63:15:7e:31:93:55:db:10:6b:85:b9:0f:3f:c4:fd:
                    98:96:60:8b:31:fc:3e:df:39:38:a5:8f:44:08:69:
                    ee:3b:39:b5:a0:62:c5:71:95:5a:e7:20:16:c4:6e:
                    78:8a:59:97:85:89:94:64:54:cb:ee:93:3f:36:f8:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6D:F9:E3:AD:C2:4C:55:BA:59:B5:5D:C4:A0:7E:D3:F3:E3:DD:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d7153e7-3fb7-3827-a5c9-005b9946fb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:80:81:7a:7d:cf:f7:13:a6:e6:8c:ff:ab:8a:f4:1d:42:35:
         0a:d2:27:d2:46:df:22:cf:de:80:69:75:70:d1:0c:21:a0:4b:
         98:6f:44:4e:71:5b:f1:e0:86:71:8b:67:27:48:62:fd:b6:68:
         d2:34:47:cf:7d:50:a3:de:42:8b:57:24:ab:af:71:20:76:eb:
         1b:a8:cd:67:88:35:cc:cd:e0:52:07:8e:8c:38:9c:7b:d2:41:
         4d:cb:df:a8:81:3d:be:03:ad:9a:86:f4:de:58:16:8b:d7:a2:
         e7:7e:e1:7f:ec:ec:92:cc:e3:9d:1b:00:a6:90:15:9b:9f:cf:
         ff:5d:b5:90:64:55:06:d7:e2:ca:7f:21:10:f9:a3:ad:98:0a:
         84:85:f9:a0:0b:4a:df:3d:11:f0:8f:10:27:40:1b:b0:52:4e:
         1c:2a:a2:9c:2b:c5:e1:50:b7:fa:99:82:24:ed:e3:64:1d:5d:
         9b:98:ce:7b:d4:68:1b:5a:4f:43:0f:70:70:e6:ae:67:3f:38:
         4b:a6:40:7b:a6:cb:2d:71:27:0d:ec:89:d5:c0:93:a4:f9:da:
         d6:13:38:54:02:9c:05:4e:9c:98:68:c7:7d:2f:06:7b:ea:cd:
         ee:ac:3d:8d:45:76:e0:e4:8a:ac:0c:e6:20:ef:59:fc:18:4f:
         2e:76:9a:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzQe4f8ry+zjnSodQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwNDA1MDAwMFoXDTIyMDMxMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWE3YTZhMGYtNTI5NC00NGU4LTgwMjEtMjRjMTNjNDQwYmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Sd5LrRfCNkl+zXCJNullX7I1F1ILPHGp/S0
faSeZ0o/8+VV+PB5GClM9xe3tslmTNDzCTzg+OjeIp4EnUav99HH25cXRxTfMYPe
cRjqto+6S9EiH9TDHUlVtEBHDukv2J/l3Vbb/f7ABmf7ASBJeHZH+5M4VI5gc2eC
53KNE26Gl7/Dqjj+zbNCkuWpo5A9twYVa8EcpcZhNNJljdVNq6mIxIMfFDb4SHF2
wbIVCjStoKpKO1NwGNwLi7OcdD75SRNjFX4xk1XbEGuFuQ8/xP2YlmCLMfw+3zk4
pY9ECGnuOzm1oGLFcZVa5yAWxG54ilmXhYmUZFTL7pM/NvjAMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFINt+eOtwkxVulm1XcSgftPz4905MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWQ3MTUzZTctM2ZiNy0z
ODI3LWE1YzktMDA1Yjk5NDZmYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjbUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFYCBen3P9xOm5oz/q4r0HUI1CtIn0kbfIs/egGl1cNEMIaBLmG9ETnFb
8eCGcYtnJ0hi/bZo0jRHz31Qo95Ci1ckq69xIHbrG6jNZ4g1zM3gUgeOjDice9JB
TcvfqIE9vgOtmob03lgWi9ei537hf+zskszjnRsAppAVm5/P/121kGRVBtfiyn8h
EPmjrZgKhIX5oAtK3z0R8I8QJ0AbsFJOHCqinCvF4VC3+pmCJO3jZB1dm5jOe9Ro
G1pPQw9wcOauZz84S6ZAe6bLLXEnDeyJ1cCTpPna1hM4VAKcBU6cmGjHfS8Ge+rN
7qw9jUV24OSKrAzmIO9Z/BhPLnaaIA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:09 2025 by rpki-client