Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71485feb-4dbb-3939-96d9-b2d5c3a535d7.roa
File:                     71485feb-4dbb-3939-96d9-b2d5c3a535d7.roa (raw, json)
Hash identifier:          LVrYWyA6FrcemZMKmNjH6NHQw51l8Rnx3z0pUh6sS2c=
Subject key identifier:   C4:BE:5B:CB:DC:D7:98:D3:A3:06:37:67:47:8B:2B:98:5E:E9:E7:26
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E32AE92DEE7409B60CC528080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71485feb-4dbb-3939-96d9-b2d5c3a535d7.roa
Signing time:             Thu 09 Jun 2022 12:00:00 +0000
ROA not before:           Thu 09 Jun 2022 12:00:00 +0000
ROA not after:            Fri 15 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        157.241.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:32:ae:92:de:e7:40:9b:60:cc:52:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  9 12:00:00 2022 GMT
            Not After : Jul 15 04:00:00 2022 GMT
        Subject: CN=7cfc226a-5f32-476b-9785-b4f7c92a9d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:ea:44:62:82:e9:fe:9e:56:79:0a:25:fb:
                    ef:cf:67:56:26:19:67:54:38:8d:6c:85:d8:cb:3a:
                    6f:63:94:3a:63:97:c1:1a:cd:53:61:dc:07:87:cf:
                    cf:fb:25:3d:fa:97:f0:1c:26:30:85:01:da:6c:70:
                    42:a1:bd:29:48:86:42:f1:b4:00:d4:4e:fb:c4:51:
                    4c:f7:96:7c:fc:0a:6c:db:c6:7c:07:55:48:a4:81:
                    7b:0e:a4:8e:ff:90:5c:b1:43:c4:1c:66:71:60:97:
                    ee:b1:b0:7c:b3:6f:82:5a:0b:a0:35:2f:db:2e:6d:
                    2c:35:a3:27:a7:8e:d1:0c:42:f8:8c:72:b5:2a:82:
                    41:5d:8d:fe:d6:b7:55:6b:4d:dd:3d:98:7e:45:95:
                    5d:4f:51:6e:d6:f8:97:f1:24:70:d2:47:58:cb:68:
                    df:c5:1a:4f:f1:02:4e:b9:9b:70:8e:fe:4d:05:2d:
                    bb:2c:4a:69:76:46:81:3c:0b:99:b9:f2:18:6a:50:
                    66:0a:3b:19:49:0d:a4:cb:b7:21:fc:3c:8d:2d:c3:
                    90:2f:ad:fe:a9:38:24:d3:fe:51:7e:c3:22:e0:c0:
                    cf:8e:e3:32:e2:e0:64:d9:29:55:ca:61:1c:82:78:
                    01:f1:a1:b9:7c:ea:24:3c:47:40:55:88:63:86:69:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:5B:CB:DC:D7:98:D3:A3:06:37:67:47:8B:2B:98:5E:E9:E7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/71485feb-4dbb-3939-96d9-b2d5c3a535d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.241.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:f8:e7:b5:79:bf:84:a7:3d:be:cf:05:bf:c3:51:af:e4:
         65:fb:70:58:cf:cf:13:dd:45:6e:83:95:b6:0f:aa:43:4e:03:
         f8:96:ec:dc:45:4f:70:45:ae:04:bd:54:fc:b6:c4:9d:0c:1c:
         ce:41:65:91:36:89:a6:4a:ad:41:f4:3c:c4:b2:68:6a:5c:47:
         21:8c:b3:7f:be:90:3a:5d:73:c6:4c:f7:bb:47:5f:2a:91:18:
         9c:54:af:79:0d:d6:ce:97:9b:1d:10:7a:fb:39:18:29:0e:90:
         e0:c6:a1:aa:72:af:7c:5a:a7:f0:b2:e1:3d:0c:a1:c1:2c:0c:
         c5:b6:0c:e2:3a:98:d2:67:42:22:aa:6b:a7:c8:c5:be:83:1e:
         89:66:a9:50:6a:c0:00:91:05:19:9f:8e:54:c1:ef:fa:4f:0d:
         de:a0:36:8f:34:a3:53:72:2a:20:0b:e2:35:32:38:1e:94:2b:
         d1:ef:c0:17:00:bb:1b:a2:71:a7:07:49:d3:5c:01:bf:e0:25:
         8c:e3:8c:51:83:8e:aa:c7:79:4c:79:34:db:84:09:eb:e3:c3:
         bd:d7:43:ef:08:c6:21:4f:37:51:3d:36:bb:88:fe:d3:01:dd:
         ab:f9:95:67:1d:26:14:8f:15:7f:af:83:f5:5f:e1:7c:99:9a:
         c0:91:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:27 2025 by rpki-client