Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3378c1f9-35ab-3522-a861-e5d4d8e06ca8.roa
File:                     3378c1f9-35ab-3522-a861-e5d4d8e06ca8.roa (raw, json)
Hash identifier:          v6Kw9tkTfZCwpbLrYEOXiyF/qIsMxblt0eb1gp2m4fI=
Subject key identifier:   63:B7:08:C3:B1:EE:A0:6B:B6:6C:D2:CD:BA:85:3B:87:5F:A0:86:E9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F9E21A81E9D1D89E7B97FB540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3378c1f9-35ab-3522-a861-e5d4d8e06ca8.roa
Signing time:             Tue 18 Oct 2022 12:00:00 +0000
ROA not before:           Tue 18 Oct 2022 12:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        3.128.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:21:a8:1e:9d:1d:89:e7:b9:7f:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 18 12:00:00 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=065000f4-0795-42ed-b47a-4955ea389098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:ab:04:d2:09:92:4e:fe:c0:69:f8:60:b0:
                    25:41:f6:8c:f4:0c:d8:c4:30:93:cd:55:99:d3:79:
                    a4:7d:96:b1:3f:a5:89:fc:92:60:e2:85:e7:d2:15:
                    b5:33:bd:42:05:bc:2b:0c:a4:7f:67:2d:d3:4e:f8:
                    d0:09:23:a4:57:2c:be:a7:5d:d4:87:f3:bb:ee:4b:
                    b5:f2:fa:ce:06:40:45:2a:24:00:1d:6d:0f:b3:af:
                    11:b0:13:a4:c0:8a:38:52:b9:1e:3e:67:06:57:c2:
                    60:55:b3:d3:a5:d9:7a:41:96:98:8b:db:4d:20:63:
                    8c:76:35:49:e1:ad:9f:10:78:f7:70:82:15:8f:fc:
                    0b:f4:52:1e:5f:da:13:8b:c6:3f:f9:0a:5e:61:6f:
                    9b:49:78:8e:ff:91:03:ee:a2:84:13:3b:23:7f:c9:
                    ad:2b:4e:8b:86:70:ee:ac:df:58:50:ec:9e:67:2b:
                    5a:80:24:fa:ff:8e:cb:20:f4:1c:1a:ec:4e:a1:19:
                    2e:27:c1:f6:dc:e9:de:8d:4b:8d:78:1e:1c:59:22:
                    b6:04:35:3f:bc:1b:1f:0a:0b:1e:d3:a9:26:98:2b:
                    da:2e:ca:49:84:78:33:70:8e:f7:08:ab:dd:6b:19:
                    ac:90:b9:bc:e6:dd:b2:52:62:45:22:e1:3e:0e:e0:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B7:08:C3:B1:EE:A0:6B:B6:6C:D2:CD:BA:85:3B:87:5F:A0:86:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3378c1f9-35ab-3522-a861-e5d4d8e06ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.128.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:4d:d8:15:2d:e5:b2:79:5e:20:a2:7b:dd:cb:38:db:04:
         7f:20:7c:24:36:35:af:81:31:67:5f:0e:c7:b5:65:b9:f2:86:
         7a:7b:14:e2:87:db:72:a4:49:7d:a5:01:04:65:06:9e:14:19:
         72:e5:3d:40:d6:de:31:fc:6d:48:e2:6f:f7:74:46:0d:bc:40:
         bd:e7:d2:d3:20:ac:99:b1:b4:0a:8f:d5:63:91:21:0a:54:70:
         6c:7e:bf:c5:55:6b:8a:c4:06:83:eb:21:a7:36:92:16:c1:38:
         48:35:1b:bf:bc:fb:50:4a:6a:4a:50:3e:b7:a1:70:c8:ae:24:
         5a:13:ca:00:21:6a:02:a2:98:ed:d5:d9:43:3c:8f:d5:e9:1d:
         04:fc:e5:c8:76:3c:27:2c:e7:44:cf:a4:cc:06:79:8a:01:14:
         f8:a0:f5:95:fc:8d:0a:cf:b0:f1:9e:67:21:91:26:be:01:6e:
         8b:5e:0c:12:13:c0:eb:09:90:4c:c5:6b:d3:eb:1c:3b:bc:c7:
         fe:1e:4a:2e:0d:43:6e:c5:84:b9:88:52:53:52:bf:59:08:84:
         c3:d8:25:54:be:ca:94:5c:ff:cf:ff:68:87:09:fe:da:36:a3:
         26:8b:ac:f1:8f:d8:11:05:7c:f7:fb:87:dc:eb:3f:8e:11:ee:
         a1:39:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:28 2025 by rpki-client