Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7166058a-29b0-301b-a741-de1f30e56f98.roa
File:                     7166058a-29b0-301b-a741-de1f30e56f98.roa (raw, json)
Hash identifier:          VTqqajSVjW102ZIeFv0S3hIGk/pX9teflGhV8Lt8TD0=
Subject key identifier:   AE:5E:33:CD:E5:5E:B4:B4:A6:A2:5F:E7:24:A5:D4:09:96:46:F0:A6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CF7982F3AF70AD72429D57F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7166058a-29b0-301b-a741-de1f30e56f98.roa
Signing time:             Fri 18 Feb 2022 05:00:00 +0000
ROA not before:           Fri 18 Feb 2022 05:00:00 +0000
ROA not after:            Fri 25 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        141.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f7:98:2f:3a:f7:0a:d7:24:29:d5:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 18 05:00:00 2022 GMT
            Not After : Mar 25 04:00:00 2022 GMT
        Subject: CN=f3087a66-af14-42b2-abfc-652854c98406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:84:9c:c7:5e:ba:6c:4e:71:cf:67:91:22:
                    57:db:8f:2a:e3:57:de:d1:3f:48:5c:67:87:fb:a6:
                    d7:48:38:07:d0:64:f4:83:b0:7c:95:11:1b:62:37:
                    2c:da:9a:45:12:7e:53:a4:5c:0d:d7:fa:c6:74:2c:
                    88:b8:23:b5:05:d3:77:74:c4:74:90:ae:c3:19:3f:
                    ff:50:6e:a5:f3:09:7a:eb:58:b1:5f:e1:4e:5d:a4:
                    8e:51:29:9b:79:c0:7e:fe:e4:fd:8b:60:7e:d4:ea:
                    7f:8e:e8:e2:b8:db:83:cd:4b:b0:84:c4:92:92:91:
                    fd:6f:0d:02:8c:be:58:99:e3:22:38:a6:0e:b7:b1:
                    b3:bf:d5:57:e1:7e:65:fa:a4:6b:e3:f8:20:73:43:
                    8d:65:c4:a1:7e:8c:84:68:66:e6:4f:1c:06:e0:6b:
                    76:6c:f9:ae:e1:65:9e:aa:2e:b3:41:5f:e6:0a:07:
                    6c:a4:61:2e:f7:25:96:f6:6a:72:0f:e5:b5:cf:e4:
                    47:65:e2:b2:aa:43:9a:df:df:76:e2:08:ee:02:1e:
                    d8:9e:be:00:e3:3d:d4:8d:3b:76:51:23:4e:f3:13:
                    54:9d:13:41:7f:10:49:b3:7d:e4:28:84:32:da:a3:
                    4f:c2:b2:04:b5:37:86:aa:8b:40:35:77:fb:1d:ca:
                    c5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5E:33:CD:E5:5E:B4:B4:A6:A2:5F:E7:24:A5:D4:09:96:46:F0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7166058a-29b0-301b-a741-de1f30e56f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:f0:1b:9b:90:c6:93:b9:de:0c:72:f4:d7:2e:e1:9c:c9:
         c4:82:74:05:60:da:df:eb:9e:1e:37:21:87:41:b5:e0:18:84:
         de:e4:38:98:43:aa:cd:b8:40:69:85:27:4d:5f:62:33:8d:04:
         7a:4d:85:86:8f:d3:72:f8:f0:45:69:09:00:81:ed:c9:cd:38:
         b2:0b:cd:b8:20:08:6c:a2:59:2f:11:07:71:2f:c4:d0:a9:d9:
         26:42:6c:2c:1a:21:68:0a:e1:37:57:86:69:80:ff:12:52:a1:
         5a:be:ef:94:09:bf:5c:bb:4e:d1:b4:59:aa:94:00:f3:78:d8:
         79:50:c8:a3:b4:46:71:16:9c:e2:80:50:2b:06:82:5c:d2:18:
         3e:7b:99:77:28:57:96:8b:53:5c:aa:db:b2:43:bc:8c:87:92:
         34:75:9b:8a:60:33:8d:57:0e:a0:67:80:04:2a:7e:8d:08:20:
         4b:f3:5e:89:5a:ea:1e:c6:77:05:fa:4b:ee:8d:69:84:9a:e0:
         bf:20:9c:e8:0a:d2:15:b1:9a:6b:a1:8b:e2:a4:da:e0:24:d7:
         ee:7f:6c:fb:ec:c9:cd:a1:a3:ac:71:fd:d3:c5:84:0b:bc:2b:
         25:f1:19:9c:72:93:00:03:a9:e9:11:c0:6f:af:ba:60:f7:18:
         e7:ca:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:06 2025 by rpki-client