Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36225f0b-e35b-305b-97ff-d8bbf2cb4927.roa
File:                     36225f0b-e35b-305b-97ff-d8bbf2cb4927.roa (raw, json)
Hash identifier:          9MWbpHbKLLUhcbPWj9RqEP4rrfRRTST+Yx8jSzm13Sc=
Subject key identifier:   87:88:82:17:A1:DD:A4:04:F7:A3:5F:3D:66:33:B6:16:85:9C:09:45
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840191D00C75BBE0716A97C6600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36225f0b-e35b-305b-97ff-d8bbf2cb4927.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        134.63.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:1d:00:c7:5b:be:07:16:a9:7c:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=d6450490-b1b1-4f58-b2a1-4f91d0084889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:76:cf:cc:f3:de:17:92:62:23:53:e7:ac:
                    e5:83:1a:a6:1f:97:c2:64:45:fd:d6:de:57:75:6f:
                    da:f1:13:e1:77:9d:2a:e7:95:61:95:74:56:91:0a:
                    54:cb:65:97:29:c0:81:79:72:55:48:22:1c:ba:4a:
                    22:3b:8d:b2:24:36:92:c9:26:13:1a:e6:d7:ed:d0:
                    39:f8:5d:92:1b:fb:97:06:17:db:65:16:3f:d9:32:
                    c2:a2:7c:c4:d1:5e:7a:b4:b8:4f:46:fb:69:bf:37:
                    a2:f7:f4:93:e3:d1:01:06:9a:96:4d:c1:8d:df:42:
                    c6:0f:d2:b0:0e:93:aa:c5:c4:e3:55:bf:08:0e:75:
                    1a:48:30:6e:0b:19:57:d6:7d:9f:8a:f4:e4:d4:14:
                    f6:0d:0d:07:d2:7d:57:c0:d5:12:ef:15:4e:a7:1d:
                    51:5d:8d:79:10:fc:56:51:f0:0b:52:1c:a7:36:6f:
                    cd:9a:fa:9d:31:d6:96:7b:cc:19:77:8e:04:ae:85:
                    bd:cb:1e:ab:a8:ee:ec:50:59:f2:79:a3:65:d4:b0:
                    09:a8:22:85:df:a5:53:a2:27:35:5c:cf:29:6f:74:
                    90:78:eb:21:e7:a3:84:a4:8f:8e:8f:1f:b7:0d:60:
                    41:76:b1:e2:8f:2a:27:26:e4:d7:6e:a6:78:42:a6:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:88:82:17:A1:DD:A4:04:F7:A3:5F:3D:66:33:B6:16:85:9C:09:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36225f0b-e35b-305b-97ff-d8bbf2cb4927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:f2:a2:88:67:ce:52:b2:bb:4a:e4:90:c0:45:5a:e2:31:
         0d:ca:5b:1e:b3:db:5f:79:d0:d4:0d:28:8a:38:e8:e2:e1:bc:
         ea:bf:4b:76:d3:53:2c:2c:ba:1d:1c:3e:6d:1e:68:a4:d9:20:
         1f:5d:79:5c:33:63:0a:12:a1:49:ad:32:be:48:70:f7:6d:67:
         7c:b6:1b:8a:1e:f9:d1:78:f7:62:18:13:03:b6:f3:c4:e6:06:
         7a:79:1d:38:37:60:4e:52:2f:99:89:cd:f9:27:7f:17:c4:0e:
         54:25:34:b4:97:54:20:51:2c:9c:61:dc:7a:a8:c2:96:d8:a8:
         86:33:a9:44:86:19:4c:05:89:b6:69:e9:46:a1:d1:6e:5d:ac:
         c0:61:c5:fe:41:4f:bc:7a:57:eb:2f:93:9b:4f:ad:33:f7:01:
         d1:5a:72:63:f3:55:71:44:b5:db:55:88:1a:d0:14:65:99:e1:
         cc:39:a7:12:27:85:eb:98:e8:fb:ef:92:55:62:43:55:eb:89:
         11:e0:7c:59:be:8d:d8:c5:de:04:30:fa:f6:da:d8:5a:aa:5d:
         ff:d4:42:b0:94:37:a0:88:53:47:01:bd:b4:58:f3:e1:a4:ba:
         09:8e:26:3a:3b:12:9d:0d:d5:0f:5b:9a:01:cd:f6:bc:d5:7e:
         8c:0c:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:31 2025 by rpki-client