Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/278f5741-d54a-35df-9377-397a9f11a7ad.roa
File:                     278f5741-d54a-35df-9377-397a9f11a7ad.roa (raw, json)
Hash identifier:          KUf1wTVKy0n7F2+wLQWBZ7ZnjK9PhQceq2l4HKvmoHg=
Subject key identifier:   39:99:3F:46:8C:D0:7B:BF:C0:1A:EC:96:7A:49:03:65:FD:3D:64:A4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D337916D6878A8A122DD012C2
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/278f5741-d54a-35df-9377-397a9f11a7ad.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        206.70.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:79:16:d6:87:8a:8a:12:2d:d0:12:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=58072e20-2bfe-43f9-99ac-3b9f3857b4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:c5:13:85:16:2b:6f:28:f7:27:52:fd:b4:
                    8b:fc:aa:4c:e4:e7:63:98:15:01:d8:83:9f:e3:2d:
                    0c:8d:af:63:e9:bc:58:3d:18:e1:94:4e:8b:07:5d:
                    d2:8b:d5:b8:73:e8:44:f2:6c:cf:d4:12:81:70:b5:
                    44:72:38:f3:ef:a9:db:c5:5f:9e:21:98:62:92:77:
                    2d:13:f7:ff:dc:06:8a:19:dc:9b:a8:ee:91:dc:93:
                    07:d1:3c:39:ae:b2:ba:f4:7e:eb:df:22:e4:55:0c:
                    e3:22:68:3b:6c:d2:0a:e6:25:8f:5e:76:35:29:4a:
                    05:13:14:98:05:23:e9:37:5c:d8:aa:01:35:95:c5:
                    7b:73:dd:74:12:27:9a:fc:0c:1b:b5:91:c3:9c:cb:
                    17:98:1c:8f:5e:85:ea:c7:af:78:51:e0:31:c5:97:
                    82:06:cc:b4:09:ed:e7:7e:c4:ce:c3:77:da:10:a1:
                    94:2a:af:7b:35:2f:4e:27:89:7b:1f:0d:71:1e:77:
                    02:bc:fd:f0:3f:f6:9e:c5:19:e7:64:10:5b:e9:e7:
                    1a:80:6d:c4:55:d9:39:91:60:54:5a:9f:01:27:e1:
                    71:9f:f2:0f:97:b1:98:59:a3:4a:90:b9:c5:6e:01:
                    1f:82:bd:57:24:3e:3a:3e:d1:e5:33:f4:b1:80:ac:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:99:3F:46:8C:D0:7B:BF:C0:1A:EC:96:7A:49:03:65:FD:3D:64:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/278f5741-d54a-35df-9377-397a9f11a7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:27:13:57:08:e2:2a:cd:13:9e:fc:95:a8:84:9b:86:e6:
         4d:68:74:7b:67:7d:36:43:f8:b7:4f:08:3c:07:55:18:a6:a0:
         90:17:ec:a2:77:dd:09:d7:82:c7:19:10:d7:2a:67:12:d5:8d:
         f4:f2:ae:3e:b2:b8:7a:01:ca:03:55:b8:c2:bc:6a:c5:97:b4:
         0e:bc:d1:fe:7d:6e:fd:32:d9:cf:b0:61:73:1b:cd:95:5c:78:
         63:b1:20:cf:08:c6:56:49:d4:ea:7a:48:a3:4a:2d:ed:c4:74:
         27:4b:fc:47:e6:24:de:32:5b:57:5d:e7:fc:c5:c8:7f:08:08:
         72:20:83:f5:5b:cd:e4:e7:85:43:f6:65:43:4c:a2:c9:36:bf:
         49:ff:87:32:53:dd:5e:69:d2:60:68:a4:32:25:7d:25:ca:54:
         61:75:72:b3:24:ed:19:f6:24:b9:ec:6f:c6:a2:fe:1c:cf:7e:
         15:cf:43:10:1e:e5:63:48:2a:51:30:e1:b7:a2:cc:e2:3b:cb:
         0c:2c:63:c2:a1:85:6c:1f:49:f6:eb:54:2d:6c:60:97:8f:19:
         b3:3d:8b:ba:fa:6e:f6:ee:2e:1a:42:8c:28:ab:c3:2d:11:f2:
         a6:f9:b5:22:60:fb:2a:97:ca:c6:7d:c7:f6:d0:2c:cd:cb:11:
         e0:61:d8:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0zeRbWh4qKEi3QEsIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NTgwNzJlMjAtMmJmZS00M2Y5LTk5YWMtM2I5ZjM4NTdiNGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE7FE4UWK28o9ydS/bSL/KpM5OdjmBUB2IOf
4y0Mja9j6bxYPRjhlE6LB13Si9W4c+hE8mzP1BKBcLVEcjjz76nbxV+eIZhiknct
E/f/3AaKGdybqO6R3JMH0Tw5rrK69H7r3yLkVQzjImg7bNIK5iWPXnY1KUoFExSY
BSPpN1zYqgE1lcV7c910Eiea/AwbtZHDnMsXmByPXoXqx694UeAxxZeCBsy0Ce3n
fsTOw3faEKGUKq97NS9OJ4l7Hw1xHncCvP3wP/aexRnnZBBb6ecagG3EVdk5kWBU
Wp8BJ+Fxn/IPl7GYWaNKkLnFbgEfgr1XJD46PtHlM/SxgKw0OwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDmZP0aM0Hu/wBrslnpJA2X9PWSkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjc4ZjU3NDEtZDU0YS0z
NWRmLTkzNzctMzk3YTlmMTFhN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzkYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfkAnE1cI4irNE578laiEm4bmTWh0e2d9NkP4t08IPAdVGKagkBfsonfd
CdeCxxkQ1ypnEtWN9PKuPrK4egHKA1W4wrxqxZe0DrzR/n1u/TLZz7BhcxvNlVx4
Y7EgzwjGVknU6npIo0ot7cR0J0v8R+Yk3jJbV13n/MXIfwgIciCD9VvN5OeFQ/Zl
Q0yiyTa/Sf+HMlPdXmnSYGikMiV9JcpUYXVysyTtGfYkuexvxqL+HM9+Fc9DEB7l
Y0gqUTDht6LM4jvLDCxjwqGFbB9J9utULWxgl48Zsz2Luvpu9u4uGkKMKKvDLRHy
pvm1ImD7KpfKxn3H9tAszcsR4GHYmw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:20 2025 by rpki-client