Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6811e073-3b40-3d83-8244-b21fb59e05e1.roa
File:                     6811e073-3b40-3d83-8244-b21fb59e05e1.roa (raw, json)
Hash identifier:          wu25BxpIGGtw3ZTtA0fqzcVOmnmHInsYVFwGsEfyoI0=
Subject key identifier:   CE:50:D6:32:B6:39:C5:81:04:AD:B2:95:BB:7F:50:8C:45:5F:01:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584099CB44E7E368CFCD0ED2A080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6811e073-3b40-3d83-8244-b21fb59e05e1.roa
Signing time:             Mon 16 Jan 2023 12:00:00 +0000
ROA not before:           Mon 16 Jan 2023 12:00:00 +0000
ROA not after:            Tue 21 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        136.13.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:99:cb:44:e7:e3:68:cf:cd:0e:d2:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 16 12:00:00 2023 GMT
            Not After : Feb 21 05:00:00 2023 GMT
        Subject: CN=73dcef7b-8985-4fa9-a662-ffafe457b011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:f4:0b:97:0b:a2:43:9e:fc:1f:b6:da:c7:
                    32:e9:5e:3a:94:f4:4f:7e:37:56:37:4a:6a:21:b9:
                    a6:50:78:f9:c6:da:96:d3:d4:c6:1e:53:41:33:c8:
                    a9:26:5a:9f:c7:9b:6d:13:c7:39:9f:4f:23:b3:3b:
                    fc:f9:f3:09:da:aa:71:f1:2c:5e:e5:42:63:55:6f:
                    eb:90:b6:ec:89:6d:ca:15:75:ff:fc:1e:e3:18:88:
                    c1:24:b6:66:80:6d:35:44:20:f5:7d:5c:f9:30:89:
                    b1:d9:eb:99:d9:5e:3b:df:13:cb:57:d3:55:e2:d0:
                    ad:b2:d5:e8:50:4d:69:c4:7b:cd:c0:62:40:05:6a:
                    89:c5:36:bd:78:83:79:2c:b9:6b:be:4c:05:d4:ae:
                    78:ce:05:81:7e:5d:18:f4:ba:7c:17:a7:99:f7:0c:
                    d1:60:e6:e4:53:c8:52:76:1d:1a:02:3c:75:2c:03:
                    78:b5:9f:40:a6:34:88:e2:50:9c:32:fb:e8:d4:15:
                    9e:4e:d0:0d:db:bc:6b:08:2b:56:ea:36:15:78:97:
                    1c:72:a7:a7:ee:41:ea:3a:d0:9f:df:f7:e8:d3:fb:
                    bf:6b:6f:85:57:c0:ef:c3:6f:b2:07:8f:4e:fe:79:
                    95:ee:4f:18:2e:e2:f2:b5:d3:5e:65:3b:9a:de:82:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:50:D6:32:B6:39:C5:81:04:AD:B2:95:BB:7F:50:8C:45:5F:01:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6811e073-3b40-3d83-8244-b21fb59e05e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:a8:a1:65:ef:29:9a:b6:4e:e8:3b:05:ed:ec:dc:7c:cb:62:
         4b:ad:11:a4:8b:da:0d:7e:dc:ff:62:8e:a7:92:f6:31:e6:8c:
         f7:f1:a4:dd:12:a1:39:09:5b:44:ba:f7:1f:44:27:f3:ab:a2:
         81:64:5c:c8:ef:dd:02:40:77:5a:b9:d6:cf:af:bc:01:33:9b:
         d1:c3:0a:59:b9:9c:f5:b3:9e:97:49:df:dd:49:42:19:fe:db:
         ce:c2:0c:0f:d9:89:70:8d:37:e9:52:ac:e9:41:e2:61:8b:c7:
         60:9c:18:ca:bc:f9:17:3b:28:82:aa:57:8e:17:61:4b:43:e7:
         74:30:be:23:23:92:f8:d8:4e:78:af:92:ff:9e:3b:3a:94:6e:
         75:1b:65:75:01:1a:15:06:23:6a:f9:cd:cc:5b:7b:38:ef:35:
         c8:85:85:64:72:1d:56:07:4a:15:8a:bf:a0:1e:c7:35:f3:0a:
         94:4e:e4:68:6f:5a:d7:77:54:64:6b:ef:62:12:0a:1f:aa:f0:
         7d:cf:53:0a:8f:8d:79:41:26:f8:51:82:e3:47:3b:53:54:ef:
         71:13:56:be:d4:9c:d8:fa:ad:49:b1:cc:b5:5a:12:83:cf:fc:
         76:28:bc:a9:99:6a:b8:69:18:79:e1:fe:f1:21:24:84:9e:a6:
         f7:40:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:54:36 2025 by rpki-client