Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50fb66e3-319f-3727-973c-74235236b596.roa
File:                     50fb66e3-319f-3727-973c-74235236b596.roa (raw, json)
Hash identifier:          k5b/4x/g7lYMAN3a7QcIH9goF2VoUdrbF33iV1wVAYw=
Subject key identifier:   45:9F:AC:60:29:70:E2:68:41:10:49:56:64:D3:11:89:BC:FF:E1:52
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C9607CE96059662697B019C90
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50fb66e3-319f-3727-973c-74235236b596.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        146.78.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:07:ce:96:05:96:62:69:7b:01:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=0fc0f331-3ac3-4eca-9d26-ad9071c1c7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:b9:a3:8b:dc:2e:ea:17:a7:33:fd:46:f1:
                    45:73:9c:2d:11:ed:5b:3d:a5:ad:85:ba:5e:7c:f2:
                    b8:36:53:51:2d:75:46:0c:9e:39:9c:38:fe:d2:1f:
                    fd:c6:a0:b2:8b:97:7d:67:da:4c:29:84:03:b9:0c:
                    44:6e:7a:9e:e0:de:4f:ea:9f:06:1d:96:e4:eb:d6:
                    1d:6e:c4:f8:a4:82:a9:55:d3:fa:7c:1a:bf:3f:5b:
                    65:f4:8f:af:85:5a:19:96:8e:72:a3:29:1f:16:93:
                    60:fb:60:8b:d2:96:c4:24:b4:3b:fd:ae:dc:a7:3c:
                    e6:80:4b:08:b5:39:c8:d2:bd:88:43:2c:6d:a2:e6:
                    df:ea:99:39:e6:2b:67:b1:50:e9:b9:ff:84:65:9a:
                    7e:b0:d2:a6:a0:2c:b3:08:11:d6:c7:b0:ed:a9:ff:
                    60:8b:34:d1:8c:ae:73:67:7f:58:30:d4:61:4f:a7:
                    0f:4b:eb:55:4d:d1:e9:93:51:7c:aa:8e:a1:24:70:
                    6d:4f:64:a7:06:ab:9a:c2:b2:6b:49:c4:18:c1:c9:
                    76:5e:3d:ee:a5:4d:af:94:75:bb:c5:f2:79:bb:1a:
                    35:b5:1f:05:46:77:19:da:54:13:78:4a:ca:fe:46:
                    7a:b5:45:72:8d:6e:69:ce:f4:95:66:bf:68:f5:27:
                    c7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9F:AC:60:29:70:E2:68:41:10:49:56:64:D3:11:89:BC:FF:E1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50fb66e3-319f-3727-973c-74235236b596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6d:27:c3:0a:7f:10:58:ad:1f:83:e4:3d:35:85:7f:59:55:
         d2:41:73:ba:5f:c7:9b:01:b2:a1:b8:a2:f3:d2:4c:42:f2:0b:
         d5:fe:fa:bb:41:76:c1:be:b2:c6:ea:4d:fa:ed:7f:ea:8b:d7:
         02:96:97:dc:9c:a8:e0:40:38:a4:d2:80:a1:46:57:85:d7:84:
         04:c2:eb:18:15:76:5f:0b:6f:86:fe:82:54:ed:67:06:c8:78:
         42:bb:38:a6:85:70:a6:05:1e:15:81:32:1f:ee:9f:b5:3a:32:
         b7:dc:ea:ec:ff:ee:4f:03:18:51:ca:e0:58:1b:4f:cc:37:46:
         ac:f9:7c:62:4f:89:b8:58:66:96:72:9a:a8:25:e7:57:89:1d:
         45:62:e4:a9:ab:30:23:ac:09:e6:19:53:5c:b6:e8:00:9c:36:
         ac:fe:a4:d3:80:ee:ac:73:38:60:ec:10:9e:f5:d0:57:58:c4:
         d8:6a:43:15:b2:d4:04:f3:7d:2d:91:56:fa:f3:0d:89:b9:a2:
         1b:c4:71:4c:9c:f3:41:0b:1a:a2:1a:24:91:24:8e:1c:13:e7:
         66:a2:b6:86:e8:80:0c:8e:4c:c3:1e:28:0f:64:a7:d0:1c:01:
         a1:44:fb:25:29:d3:dc:a9:34:61:2b:cd:6a:54:a2:35:13:13:
         67:91:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:45 2025 by rpki-client