Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61012633-831a-37eb-ae70-aa109a2da506.roa
File:                     61012633-831a-37eb-ae70-aa109a2da506.roa (raw, json)
Hash identifier:          cdUnHI39oAHnQrS+ywrWB7l+I+qdDG88MwgLgjct6Ec=
Subject key identifier:   79:A3:81:1B:30:35:29:37:2D:19:A0:E7:BE:C9:A9:A4:AA:72:F3:C8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C971B6A7C971E2B7E2F21F140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61012633-831a-37eb-ae70-aa109a2da506.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        153.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:1b:6a:7c:97:1e:2b:7e:2f:21:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=29b07f01-1abb-4517-912b-ee382cf10d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:53:b8:bb:e5:6e:10:fe:54:0b:a5:4a:15:
                    e3:69:fd:80:cd:0c:c5:b9:9c:37:27:ce:0e:f7:45:
                    03:f1:c2:c0:b1:02:70:1b:b9:4d:11:83:4c:ee:83:
                    ab:c9:2e:a4:11:7a:ee:ad:60:8e:25:8d:56:84:3f:
                    f9:cc:69:4f:42:b0:45:e2:d5:c7:0b:ee:47:56:4d:
                    fe:71:d4:b8:6b:86:1c:7a:16:97:30:e7:fe:a0:60:
                    f4:76:5b:66:76:8a:2a:ef:12:e9:ad:8b:4f:c4:36:
                    fe:58:36:20:7d:cb:f3:97:92:64:6d:07:9b:21:ad:
                    a6:1a:58:ef:9e:a9:a9:e7:b9:31:05:1c:66:c3:e3:
                    8b:b1:83:80:c3:01:cc:1a:90:48:4a:76:ad:07:34:
                    96:08:a1:77:70:4f:57:53:b1:0f:93:06:54:ef:fe:
                    d9:63:27:79:c8:28:b3:d5:08:7d:9d:3b:15:dd:72:
                    32:68:9e:e7:eb:54:bc:0b:67:14:b6:79:7e:a3:1c:
                    2a:b8:e2:f4:ad:ed:cf:f4:d9:73:a9:c5:2b:b4:87:
                    20:30:c8:55:35:33:60:3a:3b:fd:f3:70:f8:98:ae:
                    5d:8a:6b:d8:6f:8c:3b:81:48:c0:bf:4e:e0:f2:b2:
                    d0:f2:86:7e:c9:f0:a3:c4:38:c4:37:ae:2c:e3:99:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:81:1B:30:35:29:37:2D:19:A0:E7:BE:C9:A9:A4:AA:72:F3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/61012633-831a-37eb-ae70-aa109a2da506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:d7:d8:1f:0d:de:12:76:b3:e4:26:30:a4:f6:44:90:70:
         a0:ce:64:65:e0:6b:dc:1c:d6:03:30:6f:81:e8:c8:de:fa:39:
         6e:fa:f2:d8:32:bd:bf:d3:2b:7e:c1:e6:d0:fc:0c:83:74:3e:
         6a:37:73:40:2c:2c:38:33:e4:f8:92:ce:3f:22:52:07:51:ae:
         bc:ed:25:4a:8a:7b:3b:cf:80:35:6b:49:cd:b6:83:c2:0e:ee:
         61:d5:ad:f8:7a:c4:ab:55:f9:a9:8b:c2:64:48:e5:3c:37:f6:
         cd:f9:37:b3:f0:41:b1:a3:62:80:14:0c:3a:bc:26:52:54:5c:
         06:0c:d3:d1:fb:62:d9:e1:f4:cb:d4:96:e8:36:d2:08:9f:44:
         1b:c5:32:f4:c0:61:f7:90:3a:93:9a:6d:bc:53:db:d9:18:11:
         b7:28:5c:8a:32:03:3f:d8:f8:2b:44:c4:9d:06:3d:83:df:92:
         ce:aa:37:26:dd:ab:50:27:70:92:cf:88:83:53:9f:15:ef:07:
         f9:ac:d1:f3:bf:19:40:a1:f6:a7:77:b0:47:9c:9c:20:bd:ac:
         a1:01:3f:84:5c:8c:f1:ec:0b:99:09:73:7b:ee:ce:67:a6:ab:
         56:22:a7:05:05:f4:42:8e:b5:c8:42:d7:07:49:e5:5e:0c:9a:
         fe:67:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:59 2025 by rpki-client