Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/742afa51-bac0-3448-897a-1b2187ef1b25.roa
File:                     742afa51-bac0-3448-897a-1b2187ef1b25.roa (raw, json)
Hash identifier:          cc7EO1Yasflhvb3hBWkoAOFDp6kY24zW0q21hCR3DPo=
Subject key identifier:   0A:75:DF:67:A7:C0:7A:F7:27:6E:B5:4C:75:59:2D:EE:EF:82:4D:B5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F903B1098642114518F9E0900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/742afa51-bac0-3448-897a-1b2187ef1b25.roa
Signing time:             Thu 13 Oct 2022 12:00:00 +0000
ROA not before:           Thu 13 Oct 2022 12:00:00 +0000
ROA not after:            Fri 18 Nov 2022 05:00:00 +0000
asID:                     203
IP address blocks:        161.188.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:90:3b:10:98:64:21:14:51:8f:9e:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 13 12:00:00 2022 GMT
            Not After : Nov 18 05:00:00 2022 GMT
        Subject: CN=d3ca05f5-4bfa-43dd-a22f-dff6508a0132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:55:0f:1d:32:f6:d7:7c:d4:ba:e7:f6:6f:
                    9f:2d:69:0c:ef:bf:61:f4:5a:70:a3:19:6d:af:fa:
                    f6:c8:bf:fa:bf:83:b0:19:66:fd:24:b6:a8:15:fd:
                    95:4b:b2:45:30:e5:99:a8:b4:cf:e2:89:86:43:d1:
                    81:c0:d8:a7:a8:f8:e4:71:78:1e:09:bb:1c:df:5d:
                    3f:95:16:25:30:54:ef:1d:2a:43:5f:f3:e7:1a:54:
                    c5:1e:45:6d:4c:62:f8:a5:b1:a2:38:6e:b1:0a:f9:
                    c7:e9:a5:ae:64:61:b0:06:40:0c:5d:94:4c:55:ae:
                    71:9d:fb:4a:d8:fc:b7:59:5b:1c:42:2a:6c:17:0c:
                    17:53:c8:d6:fc:43:1c:38:45:60:63:94:33:28:44:
                    18:c7:1f:fa:fc:9a:06:27:0b:f8:77:e3:4d:2d:3a:
                    73:2a:66:83:06:4c:38:dc:2c:3e:29:97:ba:9f:61:
                    88:aa:60:fb:5a:eb:f1:2a:fd:9c:24:8d:a6:7f:01:
                    cd:9c:53:48:dd:44:9d:b0:8e:ec:48:9b:4a:9e:c3:
                    15:5b:94:37:71:9b:14:e3:ea:af:2a:5e:44:7e:88:
                    bc:e7:47:ed:22:97:14:58:bc:76:88:0a:71:4f:83:
                    e6:1f:04:03:e5:e4:0b:c6:67:84:9f:ad:e5:28:56:
                    ea:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:DF:67:A7:C0:7A:F7:27:6E:B5:4C:75:59:2D:EE:EF:82:4D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/742afa51-bac0-3448-897a-1b2187ef1b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:77:7c:1b:c6:d4:6b:c4:fd:39:2e:39:3d:83:cc:22:7e:85:
         f9:c1:e6:55:c1:a7:95:8f:61:3d:6a:fc:52:df:71:62:58:13:
         02:49:11:62:f2:e2:5a:4a:3d:41:89:e5:a7:49:44:16:1f:2a:
         e9:36:17:2b:80:f1:e6:99:71:9b:9a:6d:e7:5f:b8:5a:20:3a:
         32:a7:90:8e:a2:42:b4:0c:67:91:be:a5:aa:28:a7:37:4f:b7:
         78:54:0e:bf:4b:f1:6b:88:c7:4b:14:ca:1d:ed:ae:27:75:48:
         7a:8d:5f:1a:d1:44:3e:8f:59:c6:11:ef:67:a0:5c:91:71:a7:
         f5:6b:06:c0:9d:23:44:50:a3:ea:60:b4:cc:d1:59:6b:02:5d:
         3e:bf:5c:fb:c1:61:52:23:5f:02:84:3d:69:31:ac:14:a6:c1:
         ec:0c:d6:a9:8b:c7:06:4a:41:78:75:34:09:56:d9:29:2c:9a:
         08:0c:1a:1c:5b:d7:9f:b6:70:ea:2e:41:52:66:e4:1f:0b:ef:
         6d:c9:04:94:d8:9c:1b:dd:33:57:ea:4a:91:e5:9e:b2:10:cd:
         ae:fa:48:5b:24:38:69:62:c4:c0:57:89:2a:4d:d2:a9:d0:61:
         a7:0c:ab:59:bc:bb:89:f5:18:94:87:e0:8b:14:1b:93:17:d8:
         55:14:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:10 2025 by rpki-client