Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62da9a4e-d96f-3fb0-9248-378ade3decc2.roa
File:                     62da9a4e-d96f-3fb0-9248-378ade3decc2.roa (raw, json)
Hash identifier:          7BRWeD5Qo2QW9+IcJVQRAIboNvUgXRZ1ms2x/qDhvcg=
Subject key identifier:   A3:1F:64:96:EA:EE:4E:90:4A:CF:C6:EF:9A:7E:CC:2E:8F:5A:AF:3F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FEC8100161B5316EE449329C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62da9a4e-d96f-3fb0-9248-378ade3decc2.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        3.192.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:81:00:16:1b:53:16:ee:44:93:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=efb9f849-e3ce-4f9a-b367-f30fe853abf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:e3:60:b5:52:5d:a2:36:f9:03:7b:cd:11:
                    d8:e1:eb:ba:55:5f:75:b3:c5:57:20:8e:a6:e0:57:
                    54:53:07:db:ec:16:82:bb:93:a7:2a:61:ca:04:d5:
                    e6:63:d3:03:e5:d7:36:5a:66:0b:5f:d1:eb:2f:2b:
                    5c:13:99:a9:c1:79:28:a5:93:e4:a0:77:0c:70:76:
                    aa:ea:32:1b:fe:cf:55:94:47:61:90:5c:53:20:c8:
                    a2:c6:af:cc:e3:60:79:bc:03:cf:c4:cf:6b:0d:fa:
                    82:6c:f5:95:4c:1a:8b:67:60:e6:a5:c7:aa:7e:d3:
                    23:00:33:a7:cb:a2:15:06:e6:60:1e:ed:bc:8c:ec:
                    b9:3b:77:18:0d:af:70:16:32:31:78:7f:26:86:2e:
                    e4:75:67:d8:67:dd:c5:22:7b:f8:71:41:c5:85:31:
                    63:c7:71:b3:a7:2a:fa:17:43:e3:e1:51:28:95:11:
                    56:53:92:10:9b:75:f4:d8:a9:07:1b:c6:18:39:21:
                    df:35:51:0c:1e:c1:4b:c9:ee:27:fb:1d:a6:95:dc:
                    07:63:00:2a:13:3d:d3:6a:f3:78:d2:0f:fc:0d:ad:
                    7f:62:94:2b:c2:34:48:2b:f9:9c:3d:85:6c:c0:fb:
                    e8:b0:7b:23:18:53:7c:5f:56:9b:85:f8:ed:f9:1e:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:64:96:EA:EE:4E:90:4A:CF:C6:EF:9A:7E:CC:2E:8F:5A:AF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62da9a4e-d96f-3fb0-9248-378ade3decc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:e6:fa:02:81:1b:4a:f2:80:91:d2:f7:fd:b0:7f:77:42:
         91:a1:4d:f6:c1:a7:96:75:30:1b:4f:7b:ea:40:fd:c0:bc:d1:
         c6:15:7b:db:c2:d2:5b:f3:ea:bd:38:26:5b:50:b4:a3:5a:b3:
         27:9f:d6:af:69:9b:0b:3a:87:13:21:c4:15:06:f9:9b:13:13:
         d4:07:f2:5b:0c:d5:7f:27:5f:a0:be:05:88:16:78:9b:16:61:
         fb:92:8a:0d:1f:1e:94:99:0d:e1:db:91:63:00:88:8d:2e:76:
         d0:29:aa:54:7c:78:ce:38:a3:ee:92:e7:fd:e2:ec:3a:42:cc:
         d4:ad:9b:f9:00:38:93:24:62:bd:ba:82:23:7d:71:14:5c:f1:
         68:c3:95:c5:c0:7d:d9:89:5b:4f:3c:7e:10:4e:e5:ed:7b:7f:
         0d:ca:ca:d9:d8:8e:e1:9d:93:e1:c0:f6:fd:df:c3:5b:49:0f:
         cb:41:41:01:84:db:eb:21:4c:1c:09:d9:55:d3:9c:f8:a3:c8:
         3e:77:22:1b:16:95:28:ad:b0:0d:66:80:20:fe:bb:e0:46:a7:
         b0:14:8a:6c:31:9c:f3:e3:92:e4:8e:e4:5d:79:14:4b:6c:60:
         b9:f3:dc:fe:39:3c:00:d7:d0:35:9b:ea:81:75:e4:91:69:19:
         c8:c8:c4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:43 2025 by rpki-client