Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7260643b-bfa5-3707-a609-6efb1ac37bf7.roa
File:                     7260643b-bfa5-3707-a609-6efb1ac37bf7.roa (raw, json)
Hash identifier:          MZGnPjq4HA/oXYCp/CDEPthkcJGgdmooOlJfh8vpz6U=
Subject key identifier:   DB:D9:8A:27:0D:21:76:1C:2B:09:A4:7A:1F:FD:60:DF:5F:12:23:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5AB8E394C4CC4EC032F83C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7260643b-bfa5-3707-a609-6efb1ac37bf7.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.176.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:b8:e3:94:c4:cc:4e:c0:32:f8:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=995124ed-fe57-4fef-9459-b0d60b3af7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:28:d6:f8:43:cb:fe:c9:cf:82:86:52:4d:
                    39:17:cd:43:69:b7:64:fc:4e:e8:e9:ff:ec:bf:21:
                    f5:f8:39:cf:df:d2:74:af:d6:86:75:f6:b5:90:fa:
                    4f:64:ce:52:e9:64:8b:a0:a3:fb:ac:6b:bd:6b:74:
                    4b:56:d1:44:0c:d0:df:8a:a9:5c:f7:fa:5f:41:5e:
                    65:f3:63:9c:af:9e:17:0c:4f:e7:9f:d9:38:9e:4c:
                    34:28:98:fd:0d:e6:7b:f0:b6:6b:ef:aa:d0:d5:d5:
                    5b:c9:12:0e:67:16:4a:54:37:f6:20:45:d5:bc:56:
                    bd:16:d5:24:0e:78:59:90:1f:3e:a3:b0:e4:3e:c7:
                    16:54:9b:de:a6:26:92:33:88:b1:6e:69:6a:32:df:
                    4d:af:be:4f:af:e3:aa:5d:18:78:6e:cf:de:00:b3:
                    e3:fa:87:02:f2:01:53:e8:3b:b8:7e:e5:e2:02:51:
                    2f:f8:c7:98:44:c7:db:04:6e:14:e7:e4:82:cc:70:
                    f8:3c:e7:72:92:78:f0:4f:1c:62:b2:b4:68:bc:13:
                    10:c6:80:08:d8:7d:75:5f:af:35:57:85:63:d4:29:
                    bd:b0:67:60:c3:57:23:fd:ea:4c:9f:af:b5:72:cf:
                    05:c1:72:46:b9:29:c4:ce:6f:77:3a:6c:37:a2:99:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:8A:27:0D:21:76:1C:2B:09:A4:7A:1F:FD:60:DF:5F:12:23:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7260643b-bfa5-3707-a609-6efb1ac37bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.176.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:16:c3:42:b8:cb:a2:6d:ad:aa:4d:23:4c:fa:03:95:34:b6:
         c2:1c:b7:5d:cc:95:d3:ee:72:01:b9:0a:9b:0a:f6:ce:b0:36:
         d3:5b:3c:1b:42:33:82:d7:08:d1:4d:04:8d:f9:f8:9c:51:17:
         70:41:74:e6:fe:62:dd:9e:b0:b6:84:f1:a2:f4:cd:a3:86:84:
         23:13:69:23:6c:ff:3a:0f:0b:6a:56:01:63:05:83:7b:3c:f6:
         05:34:2e:2f:ef:db:47:62:21:22:a1:d1:7f:bd:e7:22:c2:bd:
         bb:56:70:d2:4d:81:53:b9:36:ee:14:c6:19:46:85:c8:2a:a0:
         65:a5:17:d6:a8:18:cd:c2:0f:b4:c4:a0:d3:a2:ab:b7:81:b5:
         0d:4c:ba:75:15:7f:a9:2f:dd:19:b5:f9:c4:ab:b4:fb:e8:d3:
         13:fe:39:e6:02:5d:d8:63:05:be:00:d9:ec:c5:71:b2:1e:9c:
         d5:f1:6c:cf:7f:14:fa:30:90:89:2f:14:34:1d:a5:bd:19:f1:
         b7:29:1a:bf:c5:01:51:7c:f1:0b:12:36:77:6d:b8:bd:c7:de:
         c6:84:07:1a:28:c9:9f:f9:75:0b:29:7d:92:62:5e:18:0b:d1:
         1a:60:7a:c9:c3:4c:ab:ca:c4:ca:85:76:61:fa:ca:19:88:8c:
         68:b0:e7:fc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9auOOUxMxOwDL4PAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTk1MTI0ZWQtZmU1Ny00ZmVmLTk0NTktYjBkNjBiM2FmN2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprco1vhDy/7Jz4KGUk05F81Dabdk/E7o6f/s
vyH1+DnP39J0r9aGdfa1kPpPZM5S6WSLoKP7rGu9a3RLVtFEDNDfiqlc9/pfQV5l
82Ocr54XDE/nn9k4nkw0KJj9DeZ78LZr76rQ1dVbyRIOZxZKVDf2IEXVvFa9FtUk
DnhZkB8+o7DkPscWVJvepiaSM4ixbmlqMt9Nr75Pr+OqXRh4bs/eALPj+ocC8gFT
6Du4fuXiAlEv+MeYRMfbBG4U5+SCzHD4POdyknjwTxxisrRovBMQxoAI2H11X681
V4Vj1Cm9sGdgw1cj/epMn6+1cs8FwXJGuSnEzm93Omw3opl1wwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNvZiicNIXYcKwmkeh/9YN9fEiNVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzI2MDY0M2ItYmZhNS0z
NzA3LWE2MDktNmVmYjFhYzM3YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENrAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABRbDQrjLom2tqk0jTPoDlTS2why3XcyV0+5yAbkKmwr2zrA201s8G0Iz
gtcI0U0Ejfn4nFEXcEF05v5i3Z6wtoTxovTNo4aEIxNpI2z/Og8LalYBYwWDezz2
BTQuL+/bR2IhIqHRf73nIsK9u1Zw0k2BU7k27hTGGUaFyCqgZaUX1qgYzcIPtMSg
06Krt4G1DUy6dRV/qS/dGbX5xKu0++jTE/455gJd2GMFvgDZ7MVxsh6c1fFsz38U
+jCQiS8UNB2lvRnxtykav8UBUXzxCxI2d224vcfexoQHGijJn/l1Cyl9kmJeGAvR
GmB6ycNMq8rEyoV2YfrKGYiMaLDn/A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:31 2025 by rpki-client