Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/318f6770-f520-3849-aa94-40ea02238832.roa
File:                     318f6770-f520-3849-aa94-40ea02238832.roa (raw, json)
Hash identifier:          lPjhk+ZrKYDeYb1MEQcUO2J3bxZw+sfG4ekUB5JrvaY=
Subject key identifier:   B8:2B:77:F3:8E:73:C0:67:66:84:89:AE:91:4E:8F:F8:A4:A5:82:A3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DDB9D65F2F43003E247271600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/318f6770-f520-3849-aa94-40ea02238832.roa
Signing time:             Mon 09 May 2022 12:00:00 +0000
ROA not before:           Mon 09 May 2022 12:00:00 +0000
ROA not after:            Tue 14 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.11.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:db:9d:65:f2:f4:30:03:e2:47:27:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  9 12:00:00 2022 GMT
            Not After : Jun 14 04:00:00 2022 GMT
        Subject: CN=789f815d-37f6-4717-b26e-4f70c58d35d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:92:93:ec:9c:78:ef:18:77:bb:68:d4:cb:
                    68:80:59:14:20:2a:ae:55:9b:16:2d:ae:85:89:30:
                    30:c5:d4:14:4d:73:02:4a:fe:db:24:10:3b:0b:e8:
                    95:e6:7b:c7:d7:62:59:9c:86:10:21:a9:c2:e6:46:
                    b4:c3:77:ff:4d:ca:b8:52:bf:15:25:e9:ce:50:7d:
                    f1:70:33:66:2a:41:b5:e7:e2:d6:bb:70:6b:09:12:
                    6a:5f:83:38:1c:88:0d:08:0f:07:1d:7e:24:9c:df:
                    63:7a:1e:01:c3:21:3a:5d:37:ae:85:6b:0d:73:5a:
                    cb:58:c3:8c:71:22:7b:a7:b2:f8:e4:ba:06:db:1b:
                    a4:28:85:f8:90:e4:ee:06:34:8b:9c:bc:a6:21:f7:
                    d8:2c:83:0c:b9:47:68:42:9b:e9:a0:fe:e3:8b:89:
                    23:03:78:9b:a7:78:d9:2e:88:5a:e8:74:a1:ce:d9:
                    e1:69:64:f0:c5:1d:8f:1a:7f:73:2b:f6:40:7d:17:
                    89:c4:6b:a8:fe:55:ea:7a:a6:cb:ff:4b:8b:e8:42:
                    a6:09:e8:e1:03:ae:f0:ba:f1:ab:c3:79:aa:60:a8:
                    0e:0b:eb:a1:5e:e2:60:04:4b:a6:c0:f1:1c:4d:b2:
                    7c:bb:f5:33:4e:b2:f3:1d:55:cb:5d:cc:a5:df:14:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2B:77:F3:8E:73:C0:67:66:84:89:AE:91:4E:8F:F8:A4:A5:82:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/318f6770-f520-3849-aa94-40ea02238832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:a5:1b:4b:e2:04:22:ae:89:5b:4e:03:37:45:c0:ee:ce:
         14:ec:d4:b6:67:15:87:25:ff:db:04:03:e0:ef:73:96:f3:7c:
         32:45:19:49:10:f8:4f:cf:7f:c5:14:72:e3:8a:e4:52:4d:29:
         89:14:90:aa:e7:3b:d3:ed:f0:24:b0:65:51:a8:21:06:87:e2:
         c6:ea:f8:13:4f:44:2d:f3:cb:f8:e6:1b:a2:27:07:14:68:c0:
         43:11:e9:24:27:5f:39:c9:f2:9b:86:47:35:8d:50:27:c0:a7:
         c6:92:36:82:c6:75:b3:11:6e:50:4f:51:80:a7:0f:76:f1:8c:
         3c:cc:a9:c8:9a:e0:18:0c:23:b8:b3:7d:7e:00:36:f2:08:5d:
         c1:6d:f6:c6:0b:c2:31:36:8c:0c:14:48:03:c0:38:f9:62:76:
         7c:80:a5:7a:c0:55:37:e1:1a:6e:41:bb:99:8f:7d:5f:00:c5:
         bf:a8:db:e4:87:84:79:d6:a5:5b:14:57:0c:56:8d:a5:c2:55:
         fd:fa:72:c8:f3:b6:a7:fa:b0:87:6f:5b:d8:17:d4:1f:c5:0f:
         7c:52:7f:8d:3d:7b:74:be:05:54:2d:b1:0e:9a:45:c8:00:90:
         d2:8c:07:cf:f6:3d:ce:ae:73:17:40:20:05:fb:00:6b:5a:bb:
         48:1a:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:19:51 2025 by rpki-client