Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53c0631f-837e-3ab3-a04e-37d00445dbdd.roa
File:                     53c0631f-837e-3ab3-a04e-37d00445dbdd.roa (raw, json)
Hash identifier:          gA7uRQDNfu8lob25TAnM0i4MX+E6pNmX0r13DN+VgIU=
Subject key identifier:   A1:55:86:44:5E:B4:F9:31:22:94:84:03:EE:A8:C3:75:8A:67:71:E6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EED59B8FC105CB410F3216500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53c0631f-837e-3ab3-a04e-37d00445dbdd.roa
Signing time:             Mon 15 Aug 2022 12:00:00 +0000
ROA not before:           Mon 15 Aug 2022 12:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.4.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ed:59:b8:fc:10:5c:b4:10:f3:21:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 15 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=a4de7ee8-1f6a-47a2-b957-c682dcd84537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:33:25:e6:a2:84:28:6b:1a:cf:76:e6:ff:
                    f8:05:39:2e:5d:ac:78:a4:39:67:de:b0:9d:d1:b9:
                    9f:50:6c:4b:82:65:81:f0:12:7e:e7:86:57:9e:f4:
                    36:fa:5b:97:ac:2e:f0:9b:f1:b3:17:a6:75:90:1b:
                    8f:15:3e:2d:3d:89:6b:4b:69:d1:e6:c8:7c:96:87:
                    10:de:8d:8d:33:38:19:43:9b:50:5a:92:f9:57:e4:
                    fa:3c:fd:37:47:3b:31:3c:a1:92:2d:db:ad:32:05:
                    89:fe:bc:6f:e4:25:ad:a7:23:b5:a9:9f:86:7f:26:
                    84:45:f9:cf:b4:e9:af:92:6d:13:fd:d3:99:73:90:
                    1e:97:0e:c3:5d:a8:d8:ce:3b:2a:81:d4:ec:61:9e:
                    b6:61:05:1a:b9:31:e1:d4:fb:14:3c:9f:21:e5:66:
                    18:22:8e:2b:ff:b4:0c:11:66:ec:c7:5b:79:da:89:
                    f3:e9:65:30:c9:3b:cf:b0:28:f3:54:16:7a:e9:82:
                    66:e4:c9:e2:84:ea:83:e9:d9:03:b2:db:53:02:e2:
                    40:e3:1c:b3:28:37:be:76:31:a5:5a:81:57:15:81:
                    91:77:b5:80:75:c7:e6:1f:dd:1a:03:17:b0:b0:bb:
                    ac:7f:30:55:09:f4:5f:23:bc:31:10:c9:e7:8a:8d:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:86:44:5E:B4:F9:31:22:94:84:03:EE:A8:C3:75:8A:67:71:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53c0631f-837e-3ab3-a04e-37d00445dbdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.4.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:25:01:e7:e8:a5:33:4a:42:06:27:23:68:9d:bb:b3:05:1c:
         12:d6:7c:1c:79:b3:7b:91:cd:77:e4:b2:85:f2:4a:51:2d:22:
         3d:a5:fa:24:a0:7a:ea:2c:6a:7e:d1:2c:a1:42:7b:94:11:35:
         dc:f4:fe:68:31:8c:97:6a:cf:38:2f:b6:f7:3d:8f:d6:17:c9:
         b5:81:56:d1:39:ad:4b:16:3e:6f:01:56:fd:83:eb:9c:06:9d:
         e9:64:1d:cb:08:98:02:14:c4:66:37:80:2e:98:fb:4b:f6:e2:
         66:a2:67:a7:e9:d5:07:bc:df:6a:b2:96:48:47:25:5c:93:c4:
         9f:a1:6f:74:33:ff:b2:50:4e:25:a6:bc:fa:e8:c7:0e:e7:80:
         84:c8:f7:0e:10:be:d6:f2:28:a0:de:fe:90:5a:f8:7e:de:c2:
         aa:1a:b4:c2:60:21:b1:06:3a:14:15:52:f2:04:13:42:90:34:
         5c:63:46:7f:d3:fa:d1:cb:af:fc:1d:55:aa:2b:42:6e:aa:a1:
         6a:17:55:6f:b4:63:57:c0:2c:3c:25:8d:7f:ee:59:ab:3d:86:
         7c:95:97:69:c8:39:41:bf:95:71:5b:80:27:ed:5d:c4:e3:e2:
         c5:b9:46:c0:99:6c:c5:6c:ad:e2:ef:d3:82:98:99:d3:83:b3:
         e8:c5:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:17 2025 by rpki-client