Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b795bf5-5e5b-3534-b1b6-bca452633eaf.roa
File:                     6b795bf5-5e5b-3534-b1b6-bca452633eaf.roa (raw, json)
Hash identifier:          0i5nBnI/Z7/1MpV39SMChlpYglCv7iobjggjvsn8OfI=
Subject key identifier:   41:B9:74:EC:C4:D8:05:52:DF:5B:79:DE:F7:65:A3:9B:AA:31:56:7C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DE47C227660BFFEE9888404C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b795bf5-5e5b-3534-b1b6-bca452633eaf.roa
Signing time:             Thu 12 May 2022 12:00:00 +0000
ROA not before:           Thu 12 May 2022 12:00:00 +0000
ROA not after:            Fri 17 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        148.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e4:7c:22:76:60:bf:fe:e9:88:84:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 12 12:00:00 2022 GMT
            Not After : Jun 17 04:00:00 2022 GMT
        Subject: CN=ff838db1-1958-4ccc-9430-4f5139fa080f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:60:d5:d5:a0:ae:a4:69:63:22:c5:85:1e:
                    d0:89:b6:ae:6e:7b:16:31:7a:0d:f4:0f:c5:ee:20:
                    ba:b9:a8:3a:b7:52:da:7c:2e:30:a9:1b:f5:b0:30:
                    af:39:8c:fa:15:68:1b:c5:a0:0e:21:81:36:01:43:
                    33:0d:d0:05:f0:c9:79:20:fc:dd:26:fd:79:1b:8a:
                    da:90:5c:7f:20:65:2d:80:f1:8e:2f:d8:cd:de:a6:
                    c6:27:cc:c8:09:31:17:23:27:5e:a6:9f:0b:fc:e1:
                    45:a0:87:a3:2d:36:ed:d8:6b:95:6f:c0:9b:4a:88:
                    0c:dc:16:84:2c:9c:f2:61:bf:3f:b4:e1:44:7e:9f:
                    3e:81:ea:10:b6:8c:d3:3a:48:a4:e5:0a:3d:41:87:
                    f6:60:68:98:bf:b6:db:b9:ad:4b:66:bd:c7:a3:9c:
                    33:64:e7:ae:ad:90:88:04:2b:b4:26:90:e3:96:ed:
                    67:19:81:a3:d9:9c:da:d6:b1:07:1f:fd:21:7a:50:
                    c2:1e:04:77:da:42:a2:43:fb:83:6c:60:83:1c:87:
                    10:e0:31:41:0d:ff:97:2c:d1:87:49:db:34:88:61:
                    c4:2c:f1:b7:9e:83:eb:5a:8b:dc:5f:a1:20:88:c8:
                    75:e8:7e:e9:ed:01:45:e9:d6:53:f1:09:cf:6a:10:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:74:EC:C4:D8:05:52:DF:5B:79:DE:F7:65:A3:9B:AA:31:56:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b795bf5-5e5b-3534-b1b6-bca452633eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:72:0b:15:9e:ee:11:35:24:41:01:e7:9e:8c:6d:6a:a2:
         f3:35:bb:e5:9d:63:41:fd:f8:60:7b:cb:e3:a7:eb:d8:f8:6d:
         d4:2d:be:bd:49:8c:fd:3b:7c:f6:ff:41:9c:60:81:09:2e:09:
         5b:8b:80:af:90:14:54:7a:bf:eb:30:a0:62:e6:6c:62:22:7b:
         06:92:ee:92:09:40:fc:7b:a6:c8:83:c9:bc:a9:ad:e4:b9:4d:
         f1:0f:60:d6:27:4e:8b:eb:55:86:d2:5c:c2:ae:1d:69:b2:41:
         b0:d1:3f:80:bd:77:5d:1d:a3:df:8a:c8:12:46:89:bc:43:25:
         7e:fc:ea:81:f7:58:72:ac:e1:c6:0e:00:60:cc:ec:43:fb:29:
         c2:bc:8f:35:7a:3d:ea:91:a4:51:67:d6:84:6f:19:da:03:31:
         9d:1e:55:6b:7b:62:0b:c2:0f:92:92:ae:e9:be:6c:f4:ff:f1:
         c9:46:1d:1c:27:5c:09:19:ae:0e:d6:ae:e5:75:2e:d0:ea:fa:
         fc:0e:ff:14:35:64:98:71:1b:92:7c:2c:12:5a:54:af:2e:da:
         c0:50:e7:1f:f0:ce:d6:ed:c4:84:ee:cb:8b:f8:99:6e:e9:5b:
         b3:ba:fe:3b:58:52:11:7f:53:01:c3:e9:56:fc:2c:7f:ce:2b:
         75:5e:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:58 2025 by rpki-client