Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4321271f-1369-347e-98e7-79986fba607c.roa
File:                     4321271f-1369-347e-98e7-79986fba607c.roa (raw, json)
Hash identifier:          k+U8+8aU1u5qd/+v43FmtkvEMlGr2VYDv1szcZgcils=
Subject key identifier:   2B:48:63:1B:76:3F:C5:6F:D3:77:88:09:7D:09:BB:6E:49:78:F0:E8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E933350B14F0F5623A98D8700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4321271f-1369-347e-98e7-79986fba607c.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        134.62.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:93:33:50:b1:4f:0f:56:23:a9:8d:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=ef99ff77-a372-483a-b9fc-2de82edadf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:13:27:c7:0e:23:06:e3:a1:f9:f6:6c:72:
                    9a:4f:87:25:4c:3f:01:8c:64:54:0a:21:77:c4:a7:
                    c5:51:da:0e:85:7f:94:dc:44:d9:30:02:ce:53:3f:
                    19:92:88:98:92:f3:26:2a:44:61:ec:22:b2:be:43:
                    d4:14:a1:4e:82:4e:99:f3:f0:70:f3:54:31:87:40:
                    1d:6b:87:aa:bc:b8:e0:f3:22:7d:f5:98:d4:04:ba:
                    ee:87:61:02:21:b6:29:6d:f4:b7:be:8c:2f:88:9b:
                    4f:66:04:58:fa:6e:1c:8b:65:4a:88:98:12:25:4c:
                    6b:9a:a3:e7:d2:02:46:31:6f:b4:75:c3:dc:50:59:
                    a3:c8:3b:95:ae:9c:ef:77:97:6b:d2:82:33:54:35:
                    99:94:fd:9e:c4:08:81:32:be:68:3f:e6:02:79:81:
                    8c:57:4b:80:86:1b:17:65:eb:b2:c1:77:eb:2d:91:
                    aa:29:28:45:f9:56:aa:64:af:af:63:20:9f:f4:2e:
                    c1:d2:68:b1:f3:58:11:c5:8d:af:ab:34:c8:84:35:
                    46:1e:59:b3:43:68:06:0f:9c:95:52:53:df:f8:d9:
                    f6:f1:09:7f:93:fd:0c:1f:71:78:4a:9a:82:d4:d4:
                    9b:d0:27:67:7b:9a:df:fe:7f:09:3f:31:85:f1:c3:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:63:1B:76:3F:C5:6F:D3:77:88:09:7D:09:BB:6E:49:78:F0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4321271f-1369-347e-98e7-79986fba607c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:70:d3:1c:11:ae:35:05:b2:0a:ac:cd:b7:3f:1b:80:ce:a8:
         f0:84:f9:52:81:18:b5:5c:b7:67:d5:3e:30:17:e8:e7:a9:27:
         d7:b0:d6:a1:f2:21:b0:5d:56:c6:7f:49:de:1c:0e:76:7b:85:
         0e:bf:42:fe:32:10:0e:62:3f:05:eb:f4:47:9e:74:f9:07:87:
         90:db:da:1c:79:49:d6:98:d9:8a:b0:6e:b7:f3:27:91:7f:53:
         15:bb:16:50:e7:55:6e:6d:12:d8:55:3b:57:90:fe:ef:80:f6:
         32:d3:6f:0e:84:84:40:28:47:d0:1a:5f:58:95:28:77:21:20:
         18:ec:14:ca:7e:45:c0:41:37:f0:9d:b6:a6:80:1f:ce:01:05:
         fc:d6:d2:95:bd:26:2d:2f:88:8c:8b:29:d2:dd:2c:20:48:35:
         91:4c:14:28:33:f6:89:89:72:99:d9:1f:74:2d:68:e5:35:6f:
         25:36:48:13:29:fc:75:33:b8:7c:20:85:84:bf:0b:8e:b4:a9:
         9e:1a:f7:05:3e:22:ef:85:65:95:33:dd:3b:e8:77:5b:36:1e:
         30:b6:b5:d5:fa:49:e0:33:3c:9c:b2:3a:c2:13:af:a2:4b:22:
         9d:c8:aa:b1:79:35:d5:c8:08:78:1b:7e:e6:ca:f4:5c:b3:d9:
         00:a8:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:51 2025 by rpki-client