Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b051347-f50b-3dbe-a3cc-d90d6c6f848d.roa
File:                     2b051347-f50b-3dbe-a3cc-d90d6c6f848d.roa (raw, json)
Hash identifier:          P0rZmQbkQRBsd93ENIfwqblUobSKo7gWkTZgs7PCfrc=
Subject key identifier:   C4:18:3B:2F:16:E3:EF:5D:85:85:E0:70:6A:3F:D6:5B:ED:8B:08:FD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F74578C86691478BCBA7C1380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b051347-f50b-3dbe-a3cc-d90d6c6f848d.roa
Signing time:             Mon 03 Oct 2022 12:00:00 +0000
ROA not before:           Mon 03 Oct 2022 12:00:00 +0000
ROA not after:            Tue 08 Nov 2022 05:00:00 +0000
asID:                     6167
IP address blocks:        161.188.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:74:57:8c:86:69:14:78:bc:ba:7c:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  3 12:00:00 2022 GMT
            Not After : Nov  8 05:00:00 2022 GMT
        Subject: CN=307482df-f50c-4f18-afb8-fc351d28d4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:93:ca:c3:2e:18:31:0a:0a:37:39:0c:09:
                    96:d0:19:9e:d6:09:17:91:71:0e:f5:64:ef:1d:50:
                    c5:30:09:38:1f:fc:ff:8e:8b:7f:c6:30:1a:f4:cf:
                    16:35:ee:d7:d3:cd:0d:18:2b:2c:77:50:69:7d:0a:
                    49:1f:54:b3:b4:c0:fe:49:b3:eb:1e:32:ce:1b:6c:
                    95:1e:1e:54:9b:d0:6e:58:01:d6:51:05:68:08:26:
                    af:e1:d6:b3:79:4c:85:94:5a:84:56:01:e1:86:e9:
                    6d:bb:58:e5:33:31:cc:a6:ce:71:14:06:b4:d6:72:
                    08:1e:6a:fe:06:d1:c3:51:8f:2f:36:e4:d9:91:c5:
                    53:3c:93:9e:c0:fd:9a:d0:a0:ed:cf:10:09:97:87:
                    18:1f:6a:fc:bc:61:e6:11:a2:78:02:81:34:0d:27:
                    34:20:e9:6a:a0:00:03:f6:4a:8c:5b:8c:84:93:fd:
                    a0:18:33:75:f6:31:2a:89:28:17:9d:72:6c:54:16:
                    30:84:8d:00:50:19:97:b9:6b:26:f9:af:16:78:7c:
                    32:b7:67:cd:bf:f3:d9:6b:92:d2:17:4d:d3:af:3a:
                    f0:19:9c:fb:f6:f8:49:30:8e:9f:7c:ee:31:cb:60:
                    9c:90:55:52:ed:9a:ab:f4:54:26:50:70:c7:20:1c:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:18:3B:2F:16:E3:EF:5D:85:85:E0:70:6A:3F:D6:5B:ED:8B:08:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b051347-f50b-3dbe-a3cc-d90d6c6f848d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:43:2c:30:57:69:cc:d0:93:f2:92:20:85:87:c5:65:e3:
         a2:33:30:4a:6c:66:f6:bb:f0:cd:21:17:19:62:6d:e4:c4:22:
         0b:26:83:6f:21:38:88:39:c7:e5:9d:7f:74:4f:c7:fc:4f:18:
         fa:7a:f7:ba:ca:50:72:8f:3d:5e:de:c9:8f:2b:d5:a4:0e:3c:
         45:c7:b3:d3:f0:65:a4:3a:d5:df:ca:e6:44:eb:3b:e9:7c:11:
         ae:eb:63:fa:93:f3:11:dd:8e:42:ba:16:8b:9c:3c:48:86:c5:
         38:58:4b:b3:65:4b:a9:f4:bb:b7:a4:20:a9:cb:df:54:eb:ad:
         b3:b0:0f:77:5d:2d:27:39:7f:aa:32:63:f7:17:0c:40:c3:06:
         a8:4f:fa:9e:00:f6:97:d1:7d:bd:83:c5:d1:13:41:bc:28:a7:
         79:8e:f2:4b:a5:cd:16:1a:96:2b:16:42:4f:8f:05:75:9c:46:
         04:58:57:60:d6:95:d4:b8:4a:e9:c4:3a:ab:e3:d5:17:c8:5f:
         60:fe:8a:51:c8:13:25:2c:4e:0f:dc:fd:fe:52:a4:bd:fa:27:
         81:54:36:7c:ca:16:14:82:12:2d:df:4c:a0:45:1a:9a:7b:40:
         a8:dd:f2:09:3c:88:93:4c:c0:40:c3:d9:1a:06:fa:d3:e3:55:
         b7:e5:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:55 2025 by rpki-client