Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66e316a3-9cb5-36d9-b554-904466537d2f.roa
File:                     66e316a3-9cb5-36d9-b554-904466537d2f.roa (raw, json)
Hash identifier:          7u/qMimdPeDXDy+0AiYnOsgNH7B3DCxN3rfyXem+O3Q=
Subject key identifier:   14:21:52:29:4C:69:2C:59:44:5B:14:02:B5:9B:36:29:26:DC:C9:93
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E9D60EA027FAEB4BBAEAEA900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66e316a3-9cb5-36d9-b554-904466537d2f.roa
Signing time:             Mon 18 Jul 2022 12:00:00 +0000
ROA not before:           Mon 18 Jul 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        136.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9d:60:ea:02:7f:ae:b4:bb:ae:ae:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 18 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=e9350b0c-b3e3-4f8b-9697-ae6ee54280a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:8a:3e:20:09:c7:d1:b7:17:f7:ed:fe:da:
                    16:ac:f8:5d:41:11:11:ca:ce:b4:e2:12:ac:22:cc:
                    26:d3:5e:f8:b1:59:31:b0:f4:14:42:70:89:62:26:
                    13:47:01:ba:ce:f5:fd:67:66:5f:4b:ca:05:49:54:
                    37:bf:7b:25:d8:12:e4:eb:87:6d:67:84:13:df:a7:
                    69:0e:60:eb:65:43:b0:64:4d:b5:9a:09:de:40:66:
                    90:b8:33:23:54:3b:46:df:8a:08:75:f5:74:e5:fe:
                    c0:81:3e:b1:df:2a:f2:e3:08:83:0f:29:35:12:6e:
                    9a:f4:4c:60:5c:0d:b0:49:02:20:74:cc:7d:db:db:
                    90:63:45:83:2a:e3:d1:59:77:14:57:55:03:a2:f2:
                    91:13:d0:7d:d3:ad:78:31:fb:69:ef:ff:c4:6f:d1:
                    19:d8:c7:b1:de:47:46:0f:af:83:eb:64:27:84:4d:
                    d3:5e:09:42:ce:77:c3:b1:0b:7c:ca:08:01:5f:1c:
                    01:96:35:0f:f2:5a:1f:6b:b9:3a:2e:8f:2b:d0:1c:
                    60:93:41:f2:f3:38:55:73:55:52:7b:a2:f5:fd:78:
                    06:d1:09:a0:16:b3:eb:87:60:4f:ad:90:bf:99:3a:
                    03:ec:73:53:62:e4:5f:ac:2d:2b:24:07:de:94:84:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:52:29:4C:69:2C:59:44:5B:14:02:B5:9B:36:29:26:DC:C9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/66e316a3-9cb5-36d9-b554-904466537d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4f:6c:6c:bc:bb:98:7a:a3:a8:ec:6a:10:ac:2c:ed:12:ce:
         aa:7b:fe:30:f2:b6:96:ac:da:ff:ac:d2:59:0e:9d:ba:27:54:
         c6:b5:0c:7a:7f:af:1c:9e:c3:d4:b1:cc:08:6a:e4:83:66:02:
         94:e7:44:34:f9:57:67:60:11:00:7a:49:de:9f:27:bc:3f:0d:
         08:4e:3c:14:bc:e4:57:6a:45:73:33:b0:e0:39:27:1d:68:42:
         8b:3a:37:9e:7f:50:9d:c9:49:8b:0a:09:b3:4b:a5:1a:2f:c4:
         55:1f:0a:70:6b:99:8a:d1:bb:e5:f9:f0:23:81:58:50:e7:9f:
         fb:a9:1b:df:f0:7d:35:dc:69:f9:4f:ad:16:aa:10:d9:0a:fa:
         e4:48:d0:b4:69:ba:6a:52:23:ce:67:cd:90:45:80:d6:34:f9:
         ca:6d:af:ce:17:88:86:2b:73:fe:ad:28:0e:9c:73:41:f8:80:
         09:3f:fd:28:f4:18:57:36:62:cc:ec:65:0a:7f:d6:50:e2:32:
         48:df:78:86:4f:66:b3:5a:0a:b3:fb:9b:10:33:9a:81:b4:af:
         c5:bf:ab:24:53:2a:c9:45:d5:78:2b:67:70:5c:ff:13:e7:e6:
         8e:cf:c0:3b:7b:1e:b5:15:fb:fb:d5:af:e3:1b:c4:a9:77:52:
         ff:27:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:35 2025 by rpki-client