Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dfb1c10-c9fb-36fb-9b6c-9ad7d1e58301.roa
File:                     1dfb1c10-c9fb-36fb-9b6c-9ad7d1e58301.roa (raw, json)
Hash identifier:          w0L193yAghOMMlt4Mt61UU5Mcs0eVs+w5Z92G2ArikA=
Subject key identifier:   1C:68:76:81:9D:B2:AC:DA:BD:77:6E:30:D2:38:A9:5E:53:5C:47:60
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E9F3D95B1592F7C4F32492100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dfb1c10-c9fb-36fb-9b6c-9ad7d1e58301.roa
Signing time:             Mon 18 Jul 2022 12:00:00 +0000
ROA not before:           Mon 18 Jul 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.208.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9f:3d:95:b1:59:2f:7c:4f:32:49:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 18 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=16d07bf3-9b76-4f8f-8857-fd081417ad35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:75:e8:28:85:11:b6:74:25:f5:35:99:7a:
                    5d:f6:91:39:49:19:49:99:d0:ab:54:7e:85:c3:2b:
                    e2:31:e4:0e:11:55:1d:97:f2:49:88:e5:6d:4b:53:
                    4a:a4:2a:5f:a7:3d:6d:6b:98:d2:d2:31:07:03:84:
                    39:5d:4e:28:1c:e4:f9:2b:07:f8:b4:48:06:34:6a:
                    e8:59:4f:26:c3:54:c8:d0:a8:5d:5a:ba:f1:d0:bd:
                    cf:c8:a1:8e:c7:e7:28:16:76:79:f7:b5:03:c1:8a:
                    df:bb:03:f6:c2:f5:23:7c:3f:a4:5d:d1:aa:ae:b4:
                    32:d0:fc:0b:58:39:b5:b7:20:81:a3:f4:00:c1:14:
                    76:2c:f2:41:39:1d:b4:32:de:65:1c:34:4a:70:4f:
                    3b:5d:a4:48:6c:d1:2a:4e:42:6b:1f:43:d3:7a:cf:
                    97:65:5a:5f:40:30:2d:8d:c1:12:93:e1:d7:df:cd:
                    ec:b7:2e:ea:d4:4c:0f:a2:a2:da:36:4d:2f:18:f8:
                    cc:65:8e:76:eb:2d:8c:c3:8f:47:14:ea:10:e8:2d:
                    1d:48:e8:24:cb:ca:1d:c8:f6:47:51:65:f4:90:80:
                    27:7e:4a:e9:af:92:43:79:4c:8d:8c:cc:35:50:14:
                    ec:ca:ed:be:e6:12:7b:34:1f:da:96:64:d8:06:32:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:76:81:9D:B2:AC:DA:BD:77:6E:30:D2:38:A9:5E:53:5C:47:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dfb1c10-c9fb-36fb-9b6c-9ad7d1e58301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:39:31:ba:b7:ee:ec:09:cc:2d:03:1d:d1:73:e5:06:24:87:
         b1:91:fa:0e:07:b2:02:b8:9d:64:05:45:6a:39:bd:57:c1:9b:
         26:31:8b:5b:42:76:0e:5d:39:dd:58:2d:8d:2e:f0:8d:b9:d6:
         55:12:3e:0a:73:30:5c:7c:e5:6b:1c:e1:df:ae:ac:1a:8d:64:
         f5:6a:f7:19:09:79:9b:42:7b:66:21:ee:78:22:70:e6:db:0c:
         d1:fc:69:1f:3a:40:d3:1a:03:71:31:0a:d7:18:68:cb:0d:0a:
         a2:d4:0f:1b:a1:dc:95:5e:db:23:f9:23:af:06:38:99:82:af:
         a2:44:a4:6b:87:e0:6b:40:d9:28:29:33:fc:69:e5:d2:1a:b7:
         85:26:d7:fb:5f:ff:53:76:08:3d:1f:0e:f5:23:f9:ef:37:42:
         ce:eb:1c:32:1a:6b:eb:0d:72:c1:86:e9:cb:a0:5e:79:fb:d5:
         33:17:c8:e1:33:73:f1:df:1d:93:cd:68:9c:1e:7c:81:89:e8:
         da:b9:5b:39:f2:25:35:b6:70:f1:a3:62:81:db:a0:39:99:66:
         bd:94:27:15:83:61:96:2f:9c:c4:e2:df:93:dc:d8:01:72:be:
         32:51:37:ec:97:5e:f9:c8:f3:3b:70:0d:ea:dc:77:84:5e:63:
         5c:5d:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:27:44 2025 by rpki-client