Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49396415-fa7b-3714-b24c-e74cb694228b.roa
File:                     49396415-fa7b-3714-b24c-e74cb694228b.roa (raw, json)
Hash identifier:          YJBqJYh1E6lxGbzJR2MCdgSBhejbvfBLOknVqU1CxEs=
Subject key identifier:   B3:C5:A8:EC:1D:9C:D3:06:95:A1:75:30:63:FF:A9:F3:DF:2C:04:81
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F502307F481B802BB0691A2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49396415-fa7b-3714-b24c-e74cb694228b.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        13.112.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:23:07:f4:81:b8:02:bb:06:91:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=ee844865-659a-4f66-b9da-71303a284415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:5a:85:d9:f9:b5:b4:fb:d0:a4:06:96:f5:
                    0e:a0:be:98:24:4f:c6:54:85:8c:8d:3c:1f:a2:46:
                    b3:b3:2b:e4:30:51:2c:68:48:6a:94:eb:46:ff:c5:
                    b9:1b:9f:3d:85:24:5f:f3:df:e7:98:88:88:19:b8:
                    19:ec:35:dd:af:71:48:96:53:d0:f6:20:41:f6:b5:
                    ce:f5:51:32:70:e8:66:02:20:2c:db:ad:98:7c:3a:
                    4f:47:ed:fe:8c:e8:50:24:95:d7:fd:44:b4:63:05:
                    8f:55:51:47:c6:8e:dc:d1:99:1f:08:6f:e1:57:cb:
                    23:44:9d:ee:b4:c7:f6:f5:e5:59:14:17:49:39:a6:
                    c3:36:83:75:de:c4:4b:19:01:f9:94:05:72:65:c0:
                    5f:c8:b9:f0:75:49:f9:a6:fb:a3:f5:17:90:4c:67:
                    85:93:ca:f4:28:35:4b:91:56:92:c9:e6:ca:33:8e:
                    2f:b0:8d:dd:70:79:63:2b:37:08:a1:72:82:11:06:
                    6c:22:9c:2b:e9:2b:c2:d0:e3:35:ac:10:74:b6:3f:
                    6c:e5:fe:83:44:cd:b5:4a:7f:e2:61:2f:9d:34:d4:
                    27:c3:bd:b8:73:6f:9b:62:15:90:37:5c:02:57:31:
                    64:43:a9:75:dd:16:8b:02:20:f2:bd:26:d3:5c:ab:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C5:A8:EC:1D:9C:D3:06:95:A1:75:30:63:FF:A9:F3:DF:2C:04:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49396415-fa7b-3714-b24c-e74cb694228b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.112.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:97:33:7d:a1:06:df:dc:04:e2:d3:8f:1b:29:90:77:e7:
         8f:1a:52:a9:a3:7f:49:94:69:db:93:4f:7d:5a:86:1a:25:70:
         65:74:8b:a2:6d:1b:26:9a:49:06:90:01:8e:a8:aa:c3:1e:5e:
         9a:bf:41:05:86:d9:4e:1e:fb:14:43:9c:0b:8a:89:b0:bc:47:
         4e:b3:38:af:3a:8c:87:7d:88:fe:79:6e:f6:4d:1d:d9:60:97:
         34:ec:f0:f4:1b:0c:01:cb:99:78:45:c5:24:b5:7b:b2:5c:de:
         5e:e5:9e:d4:73:80:fe:d7:fe:c6:85:a5:56:a0:23:7d:e0:c1:
         df:12:50:31:e7:9a:10:be:ce:82:57:12:0d:21:66:40:06:1d:
         0a:bd:19:cf:f6:fa:80:7b:2e:8f:24:17:3b:83:f8:f7:8f:85:
         70:d3:44:f9:40:89:61:af:09:30:7a:67:23:f9:24:f6:46:8a:
         f9:8d:43:f1:3f:1e:d5:71:fd:c6:1f:c9:86:f4:53:54:f0:a2:
         7f:e1:a5:e5:23:09:67:8e:bb:11:e8:0e:30:b2:dc:79:a5:57:
         ef:8f:d6:df:28:50:06:3f:fe:05:05:9d:ce:e4:a1:2e:6b:d0:
         d9:b7:88:e5:9f:96:ba:57:46:4d:6c:67:a6:a9:61:0f:d4:f5:
         5f:79:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:29 2025 by rpki-client