Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ecbb4ac-fe2c-303d-9de1-3734af9e1065.roa
File:                     6ecbb4ac-fe2c-303d-9de1-3734af9e1065.roa (raw, json)
Hash identifier:          vWpbWm5z96e87MpmO2msGOR0/MQ8x5hUCuGYPxNM/a4=
Subject key identifier:   F2:4F:B1:19:ED:D5:2B:B4:FC:2B:C6:9B:3A:F2:98:00:A5:38:80:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F022BF99DA02018D2CA3F3080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ecbb4ac-fe2c-303d-9de1-3734af9e1065.roa
Signing time:             Tue 23 Aug 2022 12:00:00 +0000
ROA not before:           Tue 23 Aug 2022 12:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        13.48.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:02:2b:f9:9d:a0:20:18:d2:ca:3f:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 23 12:00:00 2022 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=7636df9c-3d8c-4f10-a163-a423ba433d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:39:fd:3a:51:57:da:4a:20:4b:9b:67:16:
                    3d:0a:50:05:86:d9:e6:f8:f7:f2:07:04:18:01:0e:
                    fe:43:80:cd:2b:af:29:0b:75:5c:c8:0b:d3:d8:10:
                    07:53:1b:65:c6:c0:83:37:91:ae:5c:11:53:7c:a1:
                    7e:b0:30:05:7f:db:d5:2d:76:2c:0a:45:b7:1e:99:
                    f5:bd:7b:48:04:dd:5f:6e:37:b4:ee:57:da:22:c4:
                    3f:06:01:6a:f2:d8:8e:bb:0e:fb:82:9a:78:95:e6:
                    5c:93:c7:e1:6f:c8:cb:73:5b:07:f9:92:dd:7e:92:
                    b0:ff:16:fa:17:f7:da:d0:57:c7:bc:c0:1f:87:4f:
                    33:89:03:f2:13:3f:e6:33:45:dc:b6:d9:e1:3c:cf:
                    19:b2:4f:4c:f0:80:eb:3e:b1:e9:74:ba:93:5c:f3:
                    61:71:5a:f6:6c:19:71:3d:df:24:ba:c1:5d:75:85:
                    95:37:d3:56:41:16:15:42:85:3c:24:be:da:8c:72:
                    e9:28:8f:be:3d:60:06:63:5f:53:e5:03:65:16:83:
                    8d:12:e1:f4:95:ae:3c:6d:70:9b:94:df:7b:0c:08:
                    e6:55:f4:07:6d:eb:fd:9f:68:35:c1:29:5f:00:7d:
                    69:8e:fe:54:2e:22:e0:d2:75:cd:b3:fc:cd:e6:6f:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4F:B1:19:ED:D5:2B:B4:FC:2B:C6:9B:3A:F2:98:00:A5:38:80:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ecbb4ac-fe2c-303d-9de1-3734af9e1065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.48.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:74:97:40:c6:76:28:15:66:ce:5a:51:8c:2a:06:c1:60:
         1e:92:0e:36:2d:3e:f9:6b:13:39:91:46:d6:e8:8c:70:00:ba:
         54:c0:41:c1:35:ba:65:f5:2c:e2:79:52:42:59:7b:97:6e:6c:
         3f:e5:5d:4b:c9:06:ea:76:90:22:87:c0:8c:d5:1e:56:c5:fd:
         7b:ec:64:01:dd:7f:3c:3e:13:fa:8e:77:20:91:51:41:aa:cc:
         9c:5d:37:da:88:e6:14:33:06:cd:29:80:be:d9:46:6c:f1:e4:
         0a:7b:9a:d7:11:22:99:86:d7:ec:17:51:1a:4d:8b:41:d9:48:
         f6:b3:66:30:86:80:d2:ce:0e:03:ff:67:be:a5:cd:95:20:96:
         42:fe:f0:5b:de:e3:b0:58:66:d6:1f:98:46:7d:95:51:25:59:
         58:1b:d8:7c:b5:dc:fa:12:ef:68:85:01:56:98:41:75:6d:ce:
         18:ee:c1:9c:93:05:0f:33:c9:d7:41:20:db:71:b8:57:6b:8d:
         ed:48:ff:3b:c8:40:cf:ba:83:19:67:60:33:42:dc:74:ec:2e:
         85:3b:bd:85:34:4f:62:eb:e1:1a:d7:7a:e9:a7:c1:36:6b:e4:
         c6:b8:a5:cd:f1:d4:21:ff:f0:9f:e9:28:c9:7c:d1:c8:d4:28:
         38:9c:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:43 2025 by rpki-client