Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48511b6a-0706-34ad-a6d3-0a0da945905c.roa
File:                     48511b6a-0706-34ad-a6d3-0a0da945905c.roa (raw, json)
Hash identifier:          ZvIWhD+Y6cFOYJL5irk+TJqikksG4rfUGSEN0FeuvRs=
Subject key identifier:   66:D4:8B:67:55:65:3C:8A:6D:9D:F3:9E:30:6C:1F:DF:C3:D3:8F:C4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E8C91E0EA4EB965E9F9076C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48511b6a-0706-34ad-a6d3-0a0da945905c.roa
Signing time:             Tue 12 Jul 2022 12:00:00 +0000
ROA not before:           Tue 12 Jul 2022 12:00:00 +0000
ROA not after:            Wed 17 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        13.200.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8c:91:e0:ea:4e:b9:65:e9:f9:07:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 12 12:00:00 2022 GMT
            Not After : Aug 17 04:00:00 2022 GMT
        Subject: CN=291e1389-65cb-4dae-b52f-35398bcb4016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b6:f5:5a:92:84:fc:15:33:31:99:99:12:25:
                    cd:50:19:2c:c7:39:bd:29:39:a6:2d:a7:bc:d4:e6:
                    fe:4e:74:61:36:94:fc:5f:55:c1:ad:c5:96:cc:f1:
                    20:5b:35:2a:b6:0c:16:cb:96:15:54:80:7b:22:a1:
                    2a:64:49:18:58:08:d9:cd:57:df:3f:29:3c:ce:c4:
                    91:15:81:20:b8:6d:df:98:68:87:67:7b:05:fe:79:
                    9f:d9:aa:d6:54:88:02:e5:68:8d:6e:6a:fc:76:a1:
                    4a:ac:a6:02:f7:24:3e:d6:57:f0:1e:c5:44:be:0d:
                    91:91:14:70:b9:33:a5:eb:7d:98:2e:ff:e9:2a:e3:
                    a7:39:8f:50:cd:79:a8:36:d8:38:00:50:32:93:3a:
                    f3:8b:50:13:4e:af:f0:24:2c:2a:79:d1:aa:38:51:
                    18:f8:ce:42:7f:c6:07:73:5d:d8:e3:c5:10:20:6f:
                    1f:e7:07:02:33:ba:ba:fc:0f:38:63:82:e7:4c:18:
                    1b:60:8b:d8:2f:42:c9:98:e6:eb:3e:f7:96:51:b6:
                    de:92:09:98:84:67:d1:89:4d:b9:0b:28:7d:d3:3d:
                    f9:76:ce:e2:af:a4:24:8f:b4:98:94:4d:32:c6:c0:
                    7e:a3:3c:15:df:a7:ff:b1:0b:b3:70:8b:45:fc:57:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D4:8B:67:55:65:3C:8A:6D:9D:F3:9E:30:6C:1F:DF:C3:D3:8F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48511b6a-0706-34ad-a6d3-0a0da945905c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.200.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:07:31:6f:ec:eb:b8:2f:98:31:a5:73:dc:5d:37:a7:9b:55:
         3d:c5:ec:0d:9a:45:c2:06:e0:2e:11:d8:48:e0:b3:73:ec:e2:
         2d:5c:b9:60:6e:03:6b:84:6a:38:64:65:f5:9e:e2:ed:4d:57:
         ae:9a:48:76:cc:aa:cf:e7:32:8c:a0:da:68:b7:5f:9a:06:c8:
         67:f9:e0:b9:52:ad:e7:8f:37:51:3a:c3:30:13:1f:c3:7a:fb:
         ed:0e:d1:1c:dc:f6:c4:c6:3b:0f:1b:72:be:c9:80:7c:60:eb:
         22:d9:3e:bb:52:e9:10:d9:ec:25:42:64:8b:07:15:5b:6f:7d:
         68:dc:be:1f:41:3b:fd:00:1d:28:ba:8d:60:8d:33:6f:5c:8e:
         b5:ed:9f:81:84:9e:31:33:62:df:ab:f8:fb:ad:06:61:73:cd:
         3d:e8:36:f8:21:86:df:e1:0a:13:2a:24:07:37:7c:1f:61:f0:
         0c:9d:5c:d7:91:f3:66:0f:3e:5d:25:61:47:11:8e:1c:f0:29:
         80:87:08:70:4a:a9:64:a7:0e:84:31:bf:4d:d0:a8:b2:a6:e3:
         2e:88:05:b0:ec:0f:49:e9:21:ea:a9:fe:79:7d:a3:ce:cf:04:
         a9:80:f2:d7:32:9c:80:22:06:39:90:d4:c9:4a:25:67:da:f1:
         dd:38:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:46 2025 by rpki-client