Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569f95c1-5884-30cf-8d40-05f549accb3b.roa
File:                     569f95c1-5884-30cf-8d40-05f549accb3b.roa (raw, json)
Hash identifier:          d3aWOnmZDHDjq7D+T1bjprYysRRUK4OQRqxu5P3vyCQ=
Subject key identifier:   99:86:C2:1E:26:86:DF:44:BD:67:A0:E6:32:A3:D1:13:B6:D5:11:59
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F906029852B8C50AD2B8CD880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569f95c1-5884-30cf-8d40-05f549accb3b.roa
Signing time:             Thu 13 Oct 2022 12:00:00 +0000
ROA not before:           Thu 13 Oct 2022 12:00:00 +0000
ROA not after:            Fri 18 Nov 2022 05:00:00 +0000
asID:                     6167
IP address blocks:        161.188.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:90:60:29:85:2b:8c:50:ad:2b:8c:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 13 12:00:00 2022 GMT
            Not After : Nov 18 05:00:00 2022 GMT
        Subject: CN=bcbd68c8-d245-4777-ae4b-874b09471809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:ce:bd:0c:d8:c7:02:b1:9f:65:c0:45:53:
                    d8:4b:70:3c:90:b8:be:99:d1:31:d5:ac:a9:49:a4:
                    27:a7:06:72:5b:20:50:73:25:1b:db:25:2e:27:5e:
                    b7:ba:be:5e:b2:48:81:a1:47:1a:f0:74:a3:dc:1a:
                    0e:39:61:23:2f:28:0c:1e:58:d0:11:01:85:d0:c4:
                    24:46:f7:a6:97:d1:a3:8f:5c:de:9d:56:b1:99:a4:
                    8d:c4:4f:91:e9:9e:63:39:e4:23:af:2b:8e:36:57:
                    b2:02:3a:44:8b:d1:ea:1e:83:ea:f6:62:0f:5c:bd:
                    a5:43:da:73:e0:f4:04:f2:08:a4:a9:f8:2c:a8:a2:
                    f6:85:ac:71:df:c5:65:3a:55:5e:5f:ad:29:5a:af:
                    d5:e4:77:1e:d0:9c:34:d4:eb:02:39:9d:b7:b1:31:
                    d1:20:5c:90:f7:40:7c:a2:ba:82:1d:11:c8:62:42:
                    b0:19:c6:0e:fd:78:38:6e:6a:05:24:ea:ab:13:df:
                    40:50:21:12:19:23:7c:36:db:9d:09:1a:d6:40:aa:
                    54:a0:f6:75:24:52:22:c9:8a:b3:db:d4:8a:9a:2a:
                    ac:52:52:50:b5:4e:22:cc:c0:ac:59:8b:85:7b:fd:
                    7e:60:35:fb:24:ea:d3:34:f0:06:6a:13:99:80:a1:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:86:C2:1E:26:86:DF:44:BD:67:A0:E6:32:A3:D1:13:B6:D5:11:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569f95c1-5884-30cf-8d40-05f549accb3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:ac:52:86:fe:e0:d0:55:c5:0c:d8:81:2b:dc:df:35:04:
         55:0e:47:2d:f9:6c:15:b6:76:ae:30:ef:55:83:b5:55:99:31:
         f6:0b:fc:57:7b:ed:2d:d0:9e:38:5b:10:0e:2c:c1:ae:be:40:
         c2:69:06:7a:ee:38:44:85:76:b2:93:29:c9:56:b5:46:dd:4a:
         ce:40:91:7e:02:97:ff:37:d0:df:0e:b9:3a:ae:1e:ab:7c:ad:
         7f:4e:c4:bc:b9:69:81:e0:a8:6b:89:96:6c:51:fa:86:1b:3b:
         3f:a1:aa:21:f1:ca:75:16:b4:1e:9b:d1:ae:aa:a7:ef:6b:a4:
         c5:c9:63:36:28:eb:05:49:39:59:6f:f6:79:e4:b1:05:4e:8a:
         00:bb:30:53:37:96:29:98:34:b5:d2:ce:3c:99:a2:be:69:49:
         4a:37:f5:9e:3b:cc:fb:ad:df:1a:37:d9:a6:92:4e:b9:7a:95:
         e0:87:27:98:e7:cd:b9:ae:2a:f9:13:aa:b0:1a:fe:1d:dc:70:
         a4:37:f6:d7:f3:3c:16:44:04:3c:41:38:f3:ed:e6:b7:0b:05:
         2a:cf:99:0e:71:60:05:81:e9:fd:77:6f:73:e2:2d:97:92:fe:
         78:06:2a:b2:23:f2:f2:93:09:33:23:4a:43:ff:20:cf:4c:ee:
         a5:45:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:32 2025 by rpki-client