Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a3db13b-50d8-36c1-9d5d-3435a73d5382.roa
File:                     6a3db13b-50d8-36c1-9d5d-3435a73d5382.roa (raw, json)
Hash identifier:          uPrtVR3S7FDgFEkQ7sOrq3nal1Oj5pQ+Z6SDp+bF+1E=
Subject key identifier:   1A:96:6E:9E:95:89:8C:7C:6E:1B:EF:EC:DB:06:FB:98:3F:FE:15:D8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6FF7575EA6BF83FA562B0A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a3db13b-50d8-36c1-9d5d-3435a73d5382.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        156.7.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:f7:57:5e:a6:bf:83:fa:56:2b:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=3da900d1-7020-4889-82ce-466862f45dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:89:ad:e7:41:6e:b9:6c:d6:54:2d:be:dc:
                    94:14:05:15:b3:32:e8:70:25:80:38:cc:dc:a3:56:
                    04:d2:58:1e:61:fd:9c:96:e2:34:43:84:35:72:0d:
                    70:a4:09:83:2f:e7:8e:ea:9f:74:58:03:e1:66:d6:
                    30:fc:86:c7:e7:37:e6:45:f2:d1:ff:82:5c:6e:79:
                    58:0d:41:68:ff:aa:6b:55:4d:76:fe:30:9e:9c:6a:
                    90:2c:df:30:86:ac:18:7d:73:d5:5a:ac:60:ee:89:
                    e2:d9:21:16:ca:74:83:fd:a8:e6:cc:7a:ce:4a:ee:
                    7c:e7:b1:cd:b7:55:0b:cf:49:3b:f3:e8:b2:28:ba:
                    7b:11:e7:95:63:90:94:8d:70:12:12:b6:9e:e9:2f:
                    74:33:d7:e4:f1:d7:4d:f5:b7:9c:6a:38:5d:08:c2:
                    68:36:47:58:e4:eb:4d:de:79:71:14:1c:76:e5:e8:
                    e3:f3:59:ec:87:54:f9:70:ac:4e:17:25:e1:d5:e2:
                    61:ee:6b:9b:8c:de:b1:8f:cc:92:3b:d2:0c:19:10:
                    f0:0d:d0:50:b1:d5:42:e6:47:84:69:78:07:36:9f:
                    45:42:b4:ca:3e:0d:09:f7:8d:15:ff:50:0e:f7:5d:
                    5c:f6:67:5f:95:49:ca:4b:c6:40:fe:88:fb:1d:8b:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:96:6E:9E:95:89:8C:7C:6E:1B:EF:EC:DB:06:FB:98:3F:FE:15:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6a3db13b-50d8-36c1-9d5d-3435a73d5382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.7.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:b6:ab:d6:7c:4e:7b:c5:cd:fc:4f:26:4f:e3:c0:98:c1:
         8a:6d:c8:3b:10:1b:1f:77:04:e5:e2:e4:0d:38:21:d7:c5:11:
         eb:cd:51:1a:c7:95:20:9e:d9:c7:b6:81:d2:61:15:48:9e:bb:
         c5:7b:35:cd:aa:40:f2:89:4d:0e:25:68:b6:20:ed:20:c2:3a:
         e2:b2:56:b5:bb:30:4c:df:5c:dd:70:b9:af:6e:8f:c8:82:c1:
         e9:6f:62:0a:e2:1d:f2:e3:f7:c7:01:3e:1c:63:39:40:be:f3:
         f3:de:77:35:63:3f:c9:9e:be:64:8d:46:c6:d6:11:4c:5d:ce:
         a1:2d:d5:6e:54:f5:80:97:be:4d:ba:53:59:09:0e:09:12:24:
         e1:05:7e:11:83:6a:e7:48:8c:b6:08:57:59:fd:99:06:5a:64:
         ae:8c:9d:e3:89:cb:bc:1f:35:86:cb:21:46:b6:28:a3:42:12:
         10:f3:a2:55:87:98:79:af:57:5f:d9:ca:e9:dd:86:eb:4e:85:
         99:5a:46:97:f0:24:7f:81:78:f6:b7:37:15:e5:af:90:94:3e:
         50:3c:85:9d:24:5f:47:55:07:8c:b8:6f:bf:15:bf:fc:cb:49:
         d7:6d:35:50:f2:87:f5:45:44:81:48:03:92:c6:10:f1:e4:a4:
         51:a1:28:3c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxv91depr+D+lYrCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
M2RhOTAwZDEtNzAyMC00ODg5LTgyY2UtNDY2ODYyZjQ1ZGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E6JredBbrls1lQtvtyUFAUVszLocCWAOMzc
o1YE0lgeYf2cluI0Q4Q1cg1wpAmDL+eO6p90WAPhZtYw/IbH5zfmRfLR/4JcbnlY
DUFo/6prVU12/jCenGqQLN8whqwYfXPVWqxg7oni2SEWynSD/ajmzHrOSu5857HN
t1ULz0k78+iyKLp7EeeVY5CUjXASErae6S90M9fk8ddN9becajhdCMJoNkdY5OtN
3nlxFBx25ejj81nsh1T5cKxOFyXh1eJh7mubjN6xj8ySO9IMGRDwDdBQsdVC5keE
aXgHNp9FQrTKPg0J940V/1AO911c9mdflUnKS8ZA/oj7HYvr2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBqWbp6ViYx8bhvv7NsG+5g//hXYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmEzZGIxM2ItNTBkOC0z
NmMxLTlkNWQtMzQzNWE3M2Q1MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAD362q9Z8TnvFzfxPJk/jwJjBim3IOxAbH3cE5eLkDTgh18UR681RGseV
IJ7Zx7aB0mEVSJ67xXs1zapA8olNDiVotiDtIMI64rJWtbswTN9c3XC5r26PyILB
6W9iCuId8uP3xwE+HGM5QL7z8953NWM/yZ6+ZI1GxtYRTF3OoS3VblT1gJe+TbpT
WQkOCRIk4QV+EYNq50iMtghXWf2ZBlpkroyd44nLvB81hsshRrYoo0ISEPOiVYeY
ea9XX9nK6d2G606FmVpGl/Akf4F49rc3FeWvkJQ+UDyFnSRfR1UHjLhvvxW//MtJ
1201UPKH9UVEgUgDksYQ8eSkUaEoPA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:58 2025 by rpki-client