Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3710e9a6-98c6-343c-8d94-ea335298e1ee.roa
File:                     3710e9a6-98c6-343c-8d94-ea335298e1ee.roa (raw, json)
Hash identifier:          VOJ7ZAywW9LeVW5LD59tfbU+qqMrhMdVb18GqarUQKw=
Subject key identifier:   FB:42:A6:62:31:B1:39:99:D0:AB:D2:7E:AE:BC:85:3D:26:10:BA:3D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F851F1744141CFE942E3C5300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3710e9a6-98c6-343c-8d94-ea335298e1ee.roa
Signing time:             Sun 09 Oct 2022 12:00:00 +0000
ROA not before:           Sun 09 Oct 2022 12:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     7224
IP address blocks:        3.4.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:85:1f:17:44:14:1c:fe:94:2e:3c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  9 12:00:00 2022 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=431ea6b4-6288-444c-8777-a202022fccdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:37:af:35:77:69:57:3f:b6:fc:7b:ef:59:
                    cb:56:24:24:9a:ed:3d:c5:49:d2:99:40:89:29:24:
                    99:12:17:8e:be:22:0e:19:22:0a:4b:a0:9b:c9:21:
                    c3:f8:41:91:b0:92:af:28:cb:9e:0a:46:1e:35:ce:
                    5e:64:51:e0:99:07:81:3e:4c:bd:9f:09:86:8f:04:
                    17:d6:b1:0c:2e:8f:96:16:2f:9d:ed:53:55:c9:b0:
                    25:8c:70:e5:b4:09:da:84:af:2d:9b:b0:2e:78:3b:
                    e5:4c:41:f6:68:0e:9e:9d:d5:1e:52:3d:5e:f0:d9:
                    a1:5d:00:3c:a0:a3:c3:00:a7:50:1c:b8:f3:10:3d:
                    d1:20:8c:0f:57:6f:74:b9:c2:de:2b:f6:14:9e:66:
                    f9:77:c1:a7:90:96:65:22:47:f0:0d:18:e8:9f:1a:
                    b9:70:4f:98:72:b2:24:5d:1f:e0:b9:3a:db:4b:34:
                    fc:2e:d6:36:0d:8f:37:0a:87:42:15:6d:91:f8:9a:
                    bd:2b:55:02:df:e3:cd:f4:80:05:52:4c:39:8a:20:
                    0b:76:5d:30:ba:1d:f7:57:67:ee:d6:92:0a:bc:b0:
                    ed:6b:42:f4:bd:b4:33:d7:db:33:bb:24:04:f7:50:
                    8d:08:cc:bd:09:7f:cb:03:3c:0b:81:61:13:e6:97:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:A6:62:31:B1:39:99:D0:AB:D2:7E:AE:BC:85:3D:26:10:BA:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3710e9a6-98c6-343c-8d94-ea335298e1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.4.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:54:3e:04:25:37:29:c4:8e:21:a8:50:76:ff:9f:3c:8e:
         be:89:ec:69:ec:31:fe:a4:35:6c:4c:23:2f:95:ac:22:18:f0:
         8c:db:90:e8:52:82:1f:94:47:0d:0d:70:de:d7:92:3c:96:ce:
         55:4d:c6:75:a4:8f:50:ef:c3:78:1e:6e:d6:7c:83:dc:5e:62:
         82:97:92:9c:32:00:da:67:67:19:b0:6a:b8:59:35:14:28:b7:
         1c:f1:de:8c:7c:da:6f:83:8f:ac:a2:5c:52:85:de:72:19:9c:
         77:e6:0d:3c:c5:97:f7:96:33:22:82:12:44:f4:50:f2:a8:19:
         7a:c3:32:27:b4:9f:58:04:ab:46:6e:cb:a0:0c:6f:2f:36:dd:
         ff:20:0c:9d:a5:2d:8d:fc:ae:a7:49:fb:22:91:ae:dc:98:79:
         d2:8b:38:cf:ad:70:82:89:26:34:ae:72:b7:a5:83:43:2a:82:
         ae:bd:96:40:04:57:c6:c2:91:1e:a8:42:c9:4f:01:4a:0f:bd:
         b4:e7:af:65:8b:c0:29:65:ce:bb:d5:23:7e:b9:cd:f5:26:36:
         be:1b:3b:42:6c:89:1f:de:e1:3e:f5:ef:81:cd:c9:7a:d3:8d:
         ff:74:d6:78:e7:39:e1:ca:01:cc:97:28:dc:d6:15:56:70:4c:
         2d:5a:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:08 2025 by rpki-client