Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27504afd-93c4-3305-94a5-f0df1ef1f78c.roa
File:                     27504afd-93c4-3305-94a5-f0df1ef1f78c.roa (raw, json)
Hash identifier:          J/mudr9C/uPh0alUYSJSHB0E8TM5dqFpHbmNCogg6VE=
Subject key identifier:   65:11:AC:48:FC:95:01:61:17:61:65:6D:5E:1E:05:9C:6A:EC:93:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CAB8C60901200AFD34BAE0620
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27504afd-93c4-3305-94a5-f0df1ef1f78c.roa
Signing time:             Fri 21 Jan 2022 05:00:00 +0000
ROA not before:           Fri 21 Jan 2022 05:00:00 +0000
ROA not after:            Fri 25 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        157.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ab:8c:60:90:12:00:af:d3:4b:ae:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 21 05:00:00 2022 GMT
            Not After : Feb 25 05:00:00 2022 GMT
        Subject: CN=35e8d27d-db9b-4346-b322-93328466c66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:8e:ce:2f:f4:31:df:3e:36:06:39:a5:55:
                    fd:81:16:72:41:8e:81:83:d9:5f:ea:05:e7:f6:6c:
                    f0:34:d4:16:27:08:96:df:2a:d3:0d:67:f1:a3:74:
                    48:bc:25:5b:2f:97:ab:d5:84:17:25:2f:92:68:51:
                    b7:c0:0b:9b:f5:4b:90:77:c8:06:14:37:79:1b:f1:
                    db:5a:b7:f9:de:4c:04:88:ba:d9:0e:6d:b7:68:4c:
                    e8:84:79:32:47:21:99:d2:ed:e7:b7:5c:4f:54:a8:
                    1c:ed:ea:e7:9d:ac:ef:5f:5f:24:29:9b:13:b6:a5:
                    9e:0d:33:4d:4d:51:2f:50:c1:b4:19:04:b5:fb:05:
                    d6:e4:fa:a4:c9:db:8f:a6:b9:81:05:84:95:5d:9e:
                    33:0d:a7:41:c5:f5:81:52:d7:4d:fa:88:ea:a9:82:
                    b8:9e:60:88:6d:f1:f6:16:ab:22:58:b2:52:3c:ce:
                    71:6a:3f:e9:e0:31:57:1d:f3:34:03:e0:95:b7:ad:
                    1e:8a:ee:8b:1e:78:da:f0:5e:4e:a5:b2:f1:c1:a6:
                    b6:1d:f7:eb:52:1d:03:60:a6:84:ef:07:d8:81:c3:
                    d2:dd:03:f2:ad:9d:cb:9c:f5:fc:58:49:f8:43:d0:
                    7b:7a:6f:e3:31:a5:ed:bc:c5:3f:12:4b:d7:c6:70:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:AC:48:FC:95:01:61:17:61:65:6D:5E:1E:05:9C:6A:EC:93:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27504afd-93c4-3305-94a5-f0df1ef1f78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fa:93:6c:86:b0:76:a8:d8:7c:72:ca:ec:9e:32:3b:be:df:
         f3:23:b8:7e:fd:65:34:67:4a:db:27:a3:a9:c9:bd:7d:61:46:
         9b:aa:ef:b5:63:d5:53:f1:d7:fe:3d:2e:cc:49:71:b6:2e:b6:
         59:e9:48:53:d0:7a:ac:d4:60:2d:a0:ad:52:a4:8b:73:1f:eb:
         d8:31:fc:d9:04:fc:61:75:40:c6:bb:20:ea:0a:ad:29:fb:a1:
         2a:af:ff:ac:16:59:54:5e:02:e6:50:2a:ed:c4:2b:20:45:2a:
         ac:6d:01:ba:d0:a4:0c:cb:40:51:2f:bd:86:6b:21:43:25:47:
         13:59:4b:96:88:e8:d7:2c:13:40:eb:fa:13:4f:5d:5a:36:d6:
         d0:de:12:74:d8:28:a3:eb:6c:94:81:e6:b9:d4:96:4c:3c:f2:
         cd:0a:e3:e1:bc:b5:c4:34:5f:af:d6:d8:c6:e6:f5:4c:50:5d:
         9f:f3:76:34:4f:f0:0f:b3:45:81:a8:c3:78:54:e7:c6:3c:65:
         dd:fa:4d:34:ae:dd:92:1a:fa:93:ee:94:21:e6:21:50:44:96:
         9e:24:22:44:16:07:00:07:82:fb:a2:77:88:64:d0:1a:b5:30:
         c9:91:15:19:f1:7a:63:04:28:8a:31:12:88:25:44:6b:ea:ef:
         cc:6b:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:56 2025 by rpki-client