Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e7ece5c-a03a-39df-8ca8-449bb38ddd2e.roa
File:                     4e7ece5c-a03a-39df-8ca8-449bb38ddd2e.roa (raw, json)
Hash identifier:          vfuTstG+aso19O58y9lAVcurw1ja9a8QwpQ/Zj958Fk=
Subject key identifier:   3E:4C:B7:16:47:CE:E6:CF:3A:5A:E3:FA:1C:97:C9:F0:4D:3A:C2:18
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF1E23065EF922D390AF32A60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e7ece5c-a03a-39df-8ca8-449bb38ddd2e.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        165.94.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f1:e2:30:65:ef:92:2d:39:0a:f3:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=71fabaf3-9888-4230-b959-e88087bbf9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:ec:38:a7:73:e6:a3:88:06:aa:92:fa:59:
                    92:61:7c:fb:95:22:7d:c3:03:95:4e:3c:4b:ce:59:
                    46:8a:17:5e:49:57:8a:8f:7c:80:de:04:76:fd:9c:
                    11:f3:f3:63:60:15:b7:75:6c:dd:6f:88:ef:1b:d0:
                    59:b1:26:bb:f2:ea:14:36:f3:fd:e4:93:ec:64:f8:
                    4f:db:95:52:8c:93:41:a0:7e:45:7b:15:7c:b5:ec:
                    92:1b:b7:fc:aa:aa:9a:66:9f:3b:97:38:9f:24:ac:
                    e4:3c:55:54:75:27:e9:2a:45:68:96:ba:f9:67:1d:
                    18:d7:41:4d:81:b9:bb:c5:62:00:05:73:b7:2b:78:
                    71:46:9f:9c:44:27:89:c1:d4:14:84:3c:57:5c:da:
                    3f:2a:17:e0:16:2c:80:38:fa:77:8d:48:96:57:b5:
                    99:3d:74:53:64:83:01:9a:13:cf:c5:26:ad:3a:93:
                    03:26:38:fc:1e:d1:f3:ee:e6:52:79:2c:cf:39:f8:
                    8c:5c:d0:6d:6a:7d:e5:4c:be:94:00:5a:ce:cd:a7:
                    93:13:e7:eb:fa:00:28:cf:0a:b6:02:9a:e6:88:eb:
                    f1:97:e3:a7:e6:ef:e4:9b:ad:6a:36:80:79:bc:de:
                    7c:2b:e7:05:1b:c5:21:06:51:3a:83:b7:ef:08:ee:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4C:B7:16:47:CE:E6:CF:3A:5A:E3:FA:1C:97:C9:F0:4D:3A:C2:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4e7ece5c-a03a-39df-8ca8-449bb38ddd2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:4f:1f:52:c6:67:23:5f:a3:af:b9:e3:7e:8b:f6:6c:f2:
         76:66:00:fa:09:82:b2:5e:43:e8:9f:e4:1c:f3:34:a0:14:49:
         54:7c:83:70:f1:ce:9b:9d:45:65:c4:53:8f:0f:be:f5:da:1e:
         59:47:39:dd:be:fd:72:f1:04:b4:5d:b7:b4:a5:11:af:6a:3e:
         92:45:90:a7:5e:a8:5c:2f:8b:70:64:9f:fc:14:84:34:18:72:
         b6:e7:35:18:17:8d:39:05:43:d2:63:d5:51:e0:f3:18:de:f4:
         12:b7:a2:ff:99:d4:9b:94:7d:38:fc:3c:fa:10:ec:62:24:f8:
         82:73:74:37:4c:ab:6f:6a:d9:61:26:10:e8:a4:11:1c:83:f3:
         25:2e:4b:e3:31:70:2b:07:a9:ab:3d:70:e2:d5:31:43:5c:0c:
         f1:66:46:e9:d2:38:4c:6f:1a:79:34:5f:6d:65:b0:cf:7b:af:
         cf:60:fc:64:78:f4:01:c4:f6:fb:29:2f:9a:30:25:db:69:c4:
         6d:6a:a0:78:e1:1b:61:06:0e:a7:82:42:1f:fe:04:e9:8f:0e:
         5a:3e:97:dc:12:56:74:8c:9b:eb:cd:89:05:97:4d:0b:9a:c6:
         04:a0:49:63:ed:e1:1b:1b:23:9e:63:29:17:44:29:17:27:6b:
         06:e1:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:55:55 2025 by rpki-client