Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1db5441d-62e8-3970-9194-f2622ce37fe1.roa
File:                     1db5441d-62e8-3970-9194-f2622ce37fe1.roa (raw, json)
Hash identifier:          nE/Wqq/892gxztWU2KmgPgLShNNl0Yy3zM8foQXRxKI=
Subject key identifier:   61:DE:60:D3:2E:77:28:6A:38:60:5E:CB:14:4B:B1:6E:56:BF:CE:61
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBE1AB12029246F712884FB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1db5441d-62e8-3970-9194-f2622ce37fe1.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        169.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:1a:b1:20:29:24:6f:71:28:84:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=48fad224-2458-4988-b0b6-89d510a24204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:df:e0:3d:ed:62:c4:dc:97:96:1f:d5:4a:eb:
                    53:2c:07:c1:40:d6:1d:df:8a:c6:17:dc:4c:c3:e1:
                    24:2b:1e:c9:7f:1f:7e:02:ab:c2:59:8e:12:25:9b:
                    25:c1:68:4b:65:dc:61:9d:e4:a1:49:77:62:03:81:
                    5d:8d:9e:a8:78:5b:3e:b6:ee:47:e4:44:6d:d1:60:
                    6e:11:fd:00:ce:80:35:96:a4:68:4c:07:8f:57:3e:
                    cb:8d:83:6d:40:e8:d3:13:3e:7e:8c:c9:74:0b:fd:
                    0b:a2:29:8a:88:78:a5:c1:a2:9a:1c:72:c5:e8:53:
                    d4:0b:f7:97:8b:3a:fd:fd:c2:5e:22:8b:94:08:01:
                    c6:6e:39:63:09:ff:b4:43:4c:a8:89:38:7c:a6:62:
                    7b:3d:12:f9:31:8d:6b:9a:18:7d:c7:8a:14:9c:d0:
                    1b:46:f8:75:5e:47:12:16:de:a4:7d:05:f3:18:cd:
                    60:02:09:da:28:d3:0c:04:1a:0f:c1:bc:21:47:cf:
                    76:93:69:e6:03:7d:17:5b:10:83:6b:ae:ad:b4:0c:
                    a7:2c:b3:e5:42:57:cb:c2:fa:60:c3:8e:60:de:72:
                    40:7b:0c:be:d0:4b:9c:0e:19:17:cb:49:d7:c8:42:
                    b6:b7:f6:e9:77:c2:d9:f4:6f:46:51:57:9e:65:8c:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DE:60:D3:2E:77:28:6A:38:60:5E:CB:14:4B:B1:6E:56:BF:CE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1db5441d-62e8-3970-9194-f2622ce37fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:fb:d8:88:ee:01:83:3c:00:fb:8a:5c:dd:24:50:d1:c4:
         d3:b2:ea:ce:cb:79:fc:da:4a:a2:08:1e:d3:59:ea:8f:06:0a:
         92:51:54:9e:8b:22:df:23:ae:30:e6:77:fd:60:69:73:bb:c1:
         86:98:c4:c6:c4:26:2e:9c:c8:6d:3e:01:75:2e:5c:a8:7b:e7:
         84:af:3d:fb:d6:9d:37:60:0e:b5:f1:6a:c9:a9:63:77:7a:ea:
         24:65:85:a4:78:36:68:1e:ec:6b:b4:8e:a6:51:d2:85:7b:6a:
         4d:41:e8:ff:03:d6:12:ea:06:ce:fa:db:f4:ee:fb:99:0f:5f:
         44:dc:31:7c:6b:e1:d2:c3:3d:68:ad:2b:ed:3a:ce:26:ed:27:
         4e:16:7c:d5:5a:9d:58:e4:fe:9f:a3:9d:91:d6:f1:21:7f:8b:
         2b:6d:be:22:a6:80:2c:0c:7b:61:92:b2:21:a7:eb:5d:4d:f4:
         06:d2:4d:a6:9c:c6:a5:81:91:c9:bd:45:e6:68:57:6a:b9:97:
         de:a5:ba:55:c7:65:21:50:70:a4:ff:fa:ef:b5:81:58:c9:b2:
         d3:0e:93:bc:df:ec:e4:7e:9d:17:8a:03:a4:5b:ef:f8:84:61:
         28:4b:5a:06:6d:a0:c9:ae:a2:2d:95:3c:b4:61:91:80:60:ba:
         c9:7e:a5:9e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy+GrEgKSRvcSiE+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDhmYWQyMjQtMjQ1OC00OTg4LWIwYjYtODlkNTEwYTI0MjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/gPe1ixNyXlh/VSutTLAfBQNYd34rGF9xM
w+EkKx7Jfx9+AqvCWY4SJZslwWhLZdxhneShSXdiA4FdjZ6oeFs+tu5H5ERt0WBu
Ef0AzoA1lqRoTAePVz7LjYNtQOjTEz5+jMl0C/0LoimKiHilwaKaHHLF6FPUC/eX
izr9/cJeIouUCAHGbjljCf+0Q0yoiTh8pmJ7PRL5MY1rmhh9x4oUnNAbRvh1XkcS
Ft6kfQXzGM1gAgnaKNMMBBoPwbwhR892k2nmA30XWxCDa66ttAynLLPlQlfLwvpg
w45g3nJAewy+0EucDhkXy0nXyEK2t/bpd8LZ9G9GUVeeZYzL3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGHeYNMudyhqOGBeyxRLsW5Wv85hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWRiNTQ0MWQtNjJlOC0z
OTcwLTkxOTQtZjI2MjJjZTM3ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqc0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApbb72IjuAYM8APuKXN0kUNHE07Lqzst5/NpKogge01nqjwYKklFUnosi
3yOuMOZ3/WBpc7vBhpjExsQmLpzIbT4BdS5cqHvnhK89+9adN2AOtfFqyaljd3rq
JGWFpHg2aB7sa7SOplHShXtqTUHo/wPWEuoGzvrb9O77mQ9fRNwxfGvh0sM9aK0r
7TrOJu0nThZ81VqdWOT+n6OdkdbxIX+LK22+IqaALAx7YZKyIafrXU30BtJNppzG
pYGRyb1F5mhXarmX3qW6VcdlIVBwpP/677WBWMmy0w6TvN/s5H6dF4oDpFvv+IRh
KEtaBm2gya6iLZU8tGGRgGC6yX6lng==
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:37:13 2025 by rpki-client