Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67f8d67d-16ea-3600-bccf-3c484923fe6b.roa
File:                     67f8d67d-16ea-3600-bccf-3c484923fe6b.roa (raw, json)
Hash identifier:          zqZiOqfFWkr4MoJCmdKpv//Dw7YCEkrNgZWSKYRaRRE=
Subject key identifier:   64:0A:94:D6:A5:3A:36:8D:C0:22:09:3C:79:C2:EE:CC:8A:27:2D:94
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F2F5D14CE5B1C4D9495F9B180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67f8d67d-16ea-3600-bccf-3c484923fe6b.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.160.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:5d:14:ce:5b:1c:4d:94:95:f9:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=3411b7cf-4064-4574-8984-0a3f22d6fbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:b5:45:a5:99:4e:a1:a4:f4:54:03:fb:e9:
                    cf:a3:f6:78:2e:b9:da:bd:1a:c8:2d:41:1d:e1:ef:
                    bd:10:50:1a:95:35:e1:df:f9:56:02:ae:e8:59:80:
                    28:72:51:fe:be:b1:2e:3e:82:ad:68:c2:6d:2c:ad:
                    30:9f:af:b6:1f:b1:1e:49:40:8d:9d:2d:e1:45:05:
                    19:ed:e1:77:91:8a:08:9f:89:49:28:17:28:1b:a5:
                    d6:e7:eb:29:2e:ce:00:6f:48:f5:31:30:c1:16:74:
                    60:3d:ea:1b:c7:16:99:1c:a1:9e:27:23:95:cd:84:
                    b0:e8:9c:86:1f:de:82:67:03:68:01:dc:e5:d5:da:
                    02:35:1c:a0:21:b5:d0:87:9d:75:bc:85:56:be:4f:
                    c5:a3:99:43:a6:84:8a:9e:02:9b:94:f4:d7:33:87:
                    2d:29:6f:75:33:44:ef:8a:58:9e:7e:c8:cf:94:2b:
                    76:6c:ba:2f:2b:82:56:dc:71:2b:75:a9:9d:04:fc:
                    f3:3c:6a:f0:8a:41:63:d7:bf:50:54:c5:b9:4e:b3:
                    3c:d9:3b:2f:68:e8:7f:b4:e7:86:eb:31:05:99:cb:
                    d1:b4:e3:9e:2d:56:84:39:5e:c0:e0:f1:61:b6:1d:
                    d7:66:44:47:0a:28:17:1c:16:89:c9:ad:c9:05:ba:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0A:94:D6:A5:3A:36:8D:C0:22:09:3C:79:C2:EE:CC:8A:27:2D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67f8d67d-16ea-3600-bccf-3c484923fe6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.160.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:08:ff:99:c2:6c:69:bf:32:c6:6a:7b:58:fd:d3:ef:a9:19:
         f8:cc:69:11:53:bc:1a:ad:22:60:be:fa:cf:99:68:0b:28:53:
         15:ed:5f:91:97:e2:f3:bd:b2:0d:e8:06:6b:f3:4e:a1:d8:36:
         ff:99:d5:24:27:e2:be:9b:ef:5e:2c:0b:0a:61:80:a2:06:74:
         16:6a:e3:4d:53:4c:56:44:2e:bc:43:d1:d4:d0:8e:d6:ec:e1:
         ab:f2:1b:bd:1e:3f:ec:23:94:14:f7:29:ef:cd:3e:3c:52:f3:
         72:da:d6:16:ab:12:f5:bb:e7:09:20:d6:d5:3a:73:21:ea:ab:
         eb:a7:f5:18:8f:a9:e8:1a:b8:4a:d3:63:e6:9e:53:70:a9:0f:
         af:9a:6d:1c:eb:37:f7:66:ea:64:85:3b:3d:4c:ce:15:6f:c3:
         c3:e0:51:70:b0:16:49:bd:ae:29:60:8a:d9:94:29:51:5c:05:
         aa:48:3e:4b:d2:a4:75:35:59:68:1d:f3:08:86:6f:86:fe:28:
         d5:13:98:aa:96:9a:e5:16:26:5f:5d:8c:d8:ed:77:20:e1:4b:
         f9:b0:bf:dd:d3:b9:82:fd:9b:82:8a:c1:5c:9f:43:c3:67:9b:
         74:9b:24:b6:57:6d:8c:9f:f4:00:2d:7e:ec:37:f1:77:f3:10:
         4d:80:5c:25
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8vXRTOWxxNlJX5sYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkwODEyMDAwMFoXDTIyMTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
MzQxMWI3Y2YtNDA2NC00NTc0LTg5ODQtMGEzZjIyZDZmYmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk21RaWZTqGk9FQD++nPo/Z4LrnavRrILUEd
4e+9EFAalTXh3/lWAq7oWYAoclH+vrEuPoKtaMJtLK0wn6+2H7EeSUCNnS3hRQUZ
7eF3kYoIn4lJKBcoG6XW5+spLs4Ab0j1MTDBFnRgPeobxxaZHKGeJyOVzYSw6JyG
H96CZwNoAdzl1doCNRygIbXQh511vIVWvk/Fo5lDpoSKngKblPTXM4ctKW91M0Tv
iliefsjPlCt2bLovK4JW3HErdamdBPzzPGrwikFj179QVMW5TrM82TsvaOh/tOeG
6zEFmcvRtOOeLVaEOV7A4PFhth3XZkRHCigXHBaJya3JBbpT7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGQKlNalOjaNwCIJPHnC7syKJy2UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjdmOGQ2N2QtMTZlYS0z
NjAwLWJjY2YtM2M0ODQ5MjNmZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENqAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEAj/mcJsab8yxmp7WP3T76kZ+MxpEVO8Gq0iYL76z5loCyhTFe1fkZfi
872yDegGa/NOodg2/5nVJCfivpvvXiwLCmGAogZ0FmrjTVNMVkQuvEPR1NCO1uzh
q/IbvR4/7COUFPcp780+PFLzctrWFqsS9bvnCSDW1TpzIeqr66f1GI+p6Bq4StNj
5p5TcKkPr5ptHOs392bqZIU7PUzOFW/Dw+BRcLAWSb2uKWCK2ZQpUVwFqkg+S9Kk
dTVZaB3zCIZvhv4o1ROYqpaa5RYmX12M2O13IOFL+bC/3dO5gv2bgorBXJ9Dw2eb
dJsktldtjJ/0AC1+7Dfxd/MQTYBcJQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:47 2025 by rpki-client