Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6da09087-9a7c-3364-957f-3722d430c9cf.roa
File:                     6da09087-9a7c-3364-957f-3722d430c9cf.roa (raw, json)
Hash identifier:          fNLsOY5ud+abXo6gXOM9a5RHc1U7jzQ+uydN/VZq7gk=
Subject key identifier:   AE:0E:B4:E6:E3:D2:9C:D5:ED:1E:52:40:B0:68:BC:0A:1C:6F:38:D5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7FE353095552E9E204048600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6da09087-9a7c-3364-957f-3722d430c9cf.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        167.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7f:e3:53:09:55:52:e9:e2:04:04:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=058677c3-2bd4-4ce5-aa8d-0db45da1bc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:f6:ad:2b:03:7e:83:9f:b1:be:24:13:9b:
                    c5:2e:c7:cd:e6:19:43:8a:c8:43:d2:31:2c:9a:66:
                    b6:07:14:66:02:14:37:3e:31:75:a3:0b:88:91:d5:
                    69:40:7f:f5:34:81:2b:f3:29:69:da:e8:9e:1b:27:
                    aa:63:41:a7:b8:21:97:ec:8b:91:b9:76:c2:eb:d1:
                    e7:ec:e4:7b:17:d5:85:bc:cd:db:7c:92:f0:70:eb:
                    3c:ef:4b:e6:4b:14:b2:70:46:2a:d7:de:b5:58:6a:
                    5e:36:77:95:ed:61:24:99:8b:0c:a2:f4:3e:6d:cf:
                    94:e9:6b:42:ec:08:4b:06:02:de:b8:b6:0d:78:fa:
                    28:e2:af:25:1a:29:e0:71:c7:7b:96:f2:bc:64:d8:
                    68:93:f0:ea:86:28:e4:2c:3e:b7:4f:cc:0f:38:e2:
                    a7:cd:ce:bc:4c:fb:da:d3:cf:21:d8:ed:58:2c:3d:
                    96:79:77:20:36:82:7e:30:3c:4a:f0:83:2b:2a:6e:
                    7b:20:f4:d9:f4:80:a3:98:e6:84:36:cb:ba:8c:f5:
                    c9:df:e7:f7:13:80:f9:6b:e8:ee:15:99:31:b6:81:
                    80:dd:3f:f2:17:b7:20:6f:9e:d3:c6:00:fb:0e:6a:
                    c9:28:01:0b:b9:96:ff:7d:2a:24:12:0e:59:f4:b2:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0E:B4:E6:E3:D2:9C:D5:ED:1E:52:40:B0:68:BC:0A:1C:6F:38:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6da09087-9a7c-3364-957f-3722d430c9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:bb:31:2b:1f:6d:b1:a4:dd:e9:1c:ad:41:b4:93:32:81:
         c7:70:e4:56:af:68:e3:f3:80:a0:5e:8e:79:ce:a9:ac:d3:15:
         a8:ab:af:06:22:fc:03:cd:99:28:83:2b:b4:9b:2c:8b:b0:1a:
         1c:2e:9f:90:11:36:70:ed:f0:aa:ea:c6:2e:01:02:9d:58:f5:
         65:1b:9f:63:a4:46:fc:12:78:50:2d:0f:b2:f3:26:81:6b:98:
         df:0c:73:1d:5a:2a:b7:5e:ab:33:fc:0d:06:a6:70:c1:d2:ff:
         02:34:34:26:b2:76:3a:70:34:82:99:24:bc:96:88:c4:d3:ac:
         16:bf:78:0f:fd:d6:16:9d:03:cb:bf:7b:6f:9d:aa:7e:1a:f1:
         dc:2c:cd:43:6e:60:f4:08:98:8b:2c:9d:9f:09:ac:0f:40:9e:
         a8:73:cb:29:9c:f6:0e:4c:aa:3e:80:0d:3c:80:cd:be:06:01:
         1e:75:d8:c9:e3:7d:88:bf:3b:04:1c:d1:8d:55:73:ab:a2:32:
         ce:79:b8:8b:c3:b6:a0:c7:a6:8f:78:7e:66:eb:83:7b:06:d5:
         81:31:7e:84:6a:17:d1:14:b0:9b:39:2a:59:4d:cf:53:66:5c:
         3d:82:61:10:0e:44:73:eb:03:b0:1f:1d:17:5c:c1:ea:79:1e:
         0e:ef:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:03 2025 by rpki-client