Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72b274b1-6546-3ecb-bbf7-dcf78fa7f6d1.roa
File:                     72b274b1-6546-3ecb-bbf7-dcf78fa7f6d1.roa (raw, json)
Hash identifier:          hy9o/jArDrhGTvzysuDUIXpdGyrke5ePmfvOnwMCvT8=
Subject key identifier:   DB:36:19:9E:00:AD:87:0C:CA:F6:B0:4A:A8:2F:0A:A2:03:43:8C:1C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF03BCD57CDCD6B1408201D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72b274b1-6546-3ecb-bbf7-dcf78fa7f6d1.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        13.36.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f0:3b:cd:57:cd:cd:6b:14:08:20:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=1ad14a6d-06c6-4b4f-90c4-8c3e02fca800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:88:f9:3d:4f:f4:89:fc:5b:13:49:ec:4c:
                    87:88:f9:c9:ed:85:30:dc:b8:8f:60:7a:04:04:d5:
                    5b:01:2f:da:fe:81:6d:07:7b:00:00:c4:80:8a:bb:
                    9b:c7:59:1d:71:62:a3:93:33:55:4a:a2:78:0f:d9:
                    44:53:d8:2d:4a:87:6b:4a:50:fa:04:e4:a0:26:eb:
                    94:06:25:66:5d:07:3f:a7:a8:ae:51:ed:09:58:e7:
                    37:ab:b3:20:9d:d3:94:84:dd:a8:25:16:65:33:a8:
                    1c:83:d8:67:46:de:97:7d:23:f6:99:44:c0:1c:2b:
                    15:91:49:0d:80:db:81:b5:78:e5:f1:d4:06:7c:85:
                    5d:4e:bc:aa:b2:6c:87:33:0b:62:c7:85:0f:78:1b:
                    a3:72:4c:b3:8f:66:8b:92:d1:0c:f5:17:4e:85:65:
                    12:31:95:93:82:98:5d:85:23:28:a6:21:03:a4:ec:
                    14:89:28:1e:a3:ee:43:6a:d9:7a:ab:22:df:ad:8b:
                    11:1f:aa:d1:54:0a:d6:c4:c3:4c:54:e4:cd:f3:3a:
                    1d:1d:d9:f5:40:4b:31:59:21:ae:31:36:d8:e3:96:
                    80:d3:fa:63:5d:96:a7:42:5b:de:2b:f8:7e:a0:ae:
                    5c:64:e8:c6:3a:1e:c6:e2:77:62:bc:cb:ea:b7:e7:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:19:9E:00:AD:87:0C:CA:F6:B0:4A:A8:2F:0A:A2:03:43:8C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72b274b1-6546-3ecb-bbf7-dcf78fa7f6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:ca:c7:49:80:17:b9:e0:6e:30:98:fe:ae:9a:db:00:eb:
         41:53:f6:af:74:a7:dd:21:5f:57:87:0d:58:67:67:b9:8d:bc:
         7e:b0:2d:d9:a7:a3:cd:14:60:d0:b3:46:9b:3e:97:a2:4b:11:
         20:62:3a:c5:ea:83:a5:19:31:20:14:8f:a2:82:09:8f:74:2f:
         81:f3:b8:6f:ff:f6:00:9b:72:40:a1:e5:ab:2c:9b:81:62:0b:
         4f:04:34:5d:ff:13:fc:b2:7b:7a:3e:81:55:27:cd:13:81:38:
         d5:99:2c:58:e8:82:a6:5a:1a:29:93:39:c1:72:50:f7:ad:30:
         7e:58:62:87:30:3f:b8:51:fb:a6:32:09:69:73:3a:7c:4a:16:
         65:6f:ae:9b:cb:9d:25:10:7a:d5:bf:ff:6b:b6:b7:f1:51:4f:
         65:83:4a:34:52:3f:ac:12:bc:fc:bf:c9:5a:ba:00:2f:cd:0b:
         8d:f4:31:20:cd:3d:e4:01:8b:11:19:c6:48:73:5c:97:25:f1:
         8e:61:2b:1c:e6:58:83:dd:91:e0:d0:35:d2:aa:e5:08:0a:9c:
         96:22:25:66:ef:0d:d8:45:0d:df:e2:89:ab:22:a9:f5:6e:8b:
         54:92:70:31:9a:2a:15:16:cb:57:58:a8:b0:9e:51:bd:67:66:
         90:e9:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:22:22 2025 by rpki-client