Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c1a3fe-fcad-3346-89c3-20c46da6cf72.roa
File:                     65c1a3fe-fcad-3346-89c3-20c46da6cf72.roa (raw, json)
Hash identifier:          rJ5Ichayxis0Uq7g6JEgom0/jF6enoSjZxr/3PfaVX4=
Subject key identifier:   B8:DF:F9:8A:30:AC:52:B3:DF:0A:C0:0E:49:F7:12:48:77:23:26:76
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F834A21316114BBF9AAECB680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c1a3fe-fcad-3346-89c3-20c46da6cf72.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        54.176.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:4a:21:31:61:14:bb:f9:aa:ec:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=6258e38d-029d-4be5-81d9-a38e3f10b1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:3f:27:12:2a:f9:20:ab:bc:90:6f:19:d0:
                    76:1a:7f:6e:98:bf:85:80:5a:5e:79:cc:11:c1:e4:
                    79:fa:ff:a2:58:ad:64:4f:f7:5a:42:f7:cf:e9:51:
                    f3:11:ed:e7:30:ee:2c:8d:55:5a:aa:fd:8f:aa:6c:
                    31:99:8b:75:a7:8f:ad:48:ad:bd:5f:92:3f:ab:90:
                    06:37:97:d1:f6:4f:b1:c9:1a:c5:91:5c:93:52:12:
                    81:9d:28:e1:6b:89:19:11:2b:a4:82:7c:b1:37:85:
                    60:1d:45:4b:c8:19:f1:7a:86:4a:e2:6a:6d:d2:b8:
                    95:94:73:97:c9:25:02:9c:69:87:54:72:97:d8:9e:
                    13:ba:5a:bf:0f:27:c4:fa:a4:d8:24:db:f9:d4:1c:
                    e7:03:ab:b7:b5:92:72:64:72:e8:55:e6:9e:dc:c2:
                    20:3f:23:69:75:2a:ba:4c:28:37:0e:a8:01:7c:6e:
                    ac:35:2d:22:70:bd:ec:1f:e7:65:d7:41:ee:35:5d:
                    89:58:3d:6c:21:a4:c2:d4:88:c9:18:9b:d1:ae:5e:
                    c5:ab:84:7e:31:08:7c:32:45:ac:d9:80:e5:a4:ee:
                    c4:48:eb:e3:20:21:4b:6b:7d:df:2c:50:e7:cf:81:
                    19:32:ad:20:85:fa:b0:b1:3c:bc:cc:40:f7:dc:2e:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DF:F9:8A:30:AC:52:B3:DF:0A:C0:0E:49:F7:12:48:77:23:26:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c1a3fe-fcad-3346-89c3-20c46da6cf72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.176.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:1a:c8:ce:6c:71:cb:86:b0:af:7d:d7:8d:cd:9c:10:71:
         91:13:23:ad:81:e4:ca:64:c4:83:92:52:06:a8:f5:1f:f5:76:
         c8:6d:b3:88:e3:d8:92:93:6c:93:f3:42:a8:1f:a8:f1:d3:d8:
         f4:1d:33:40:da:68:c8:47:4e:59:97:65:69:b6:fb:ed:bd:2d:
         4d:fb:5e:2c:dc:77:cc:d6:c4:ae:a3:07:53:07:f5:c7:ae:37:
         d4:93:c9:a3:df:19:98:67:5a:37:39:4e:7b:4e:ab:07:b3:fb:
         ea:df:7e:cc:fa:6c:95:d9:02:d4:3c:a7:f9:4d:38:c7:fd:f5:
         b8:f7:34:49:7c:22:af:51:10:58:3f:86:3b:0d:ba:b8:fa:66:
         18:9a:cc:d3:79:3e:7c:73:e0:b2:52:50:94:a0:02:ce:a2:36:
         51:83:11:e8:01:89:08:1e:45:39:89:dd:37:6c:c9:f5:44:67:
         be:f7:4e:48:5b:14:0e:aa:65:aa:f8:24:9e:05:68:a7:2e:ae:
         c0:ba:96:6f:21:ba:9e:99:46:57:66:db:83:be:23:c2:79:60:
         70:be:93:cf:35:81:80:79:d7:c3:01:9e:1d:22:72:d1:7f:82:
         d8:5b:9c:3c:df:99:e0:32:dd:89:11:b0:93:00:d2:f0:5e:6a:
         7f:10:bc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:04 2025 by rpki-client