Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74422f9f-f2b4-3956-bf54-3c6455b0f9cb.roa
File:                     74422f9f-f2b4-3956-bf54-3c6455b0f9cb.roa (raw, json)
Hash identifier:          xaS7GigXXXVeiLC2/DcKy0Q1XYce5n0f7RPwhXD7SAc=
Subject key identifier:   C6:50:16:DC:F4:1C:2D:38:B3:4F:2B:5A:6F:53:A3:10:87:85:38:87
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E3069F65E207E55F064BD7100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74422f9f-f2b4-3956-bf54-3c6455b0f9cb.roa
Signing time:             Thu 09 Jun 2022 12:00:00 +0000
ROA not before:           Thu 09 Jun 2022 12:00:00 +0000
ROA not after:            Fri 15 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        13.24.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:30:69:f6:5e:20:7e:55:f0:64:bd:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  9 12:00:00 2022 GMT
            Not After : Jul 15 04:00:00 2022 GMT
        Subject: CN=f2349441-5a69-451d-a9b3-1f63637d22c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:10:c0:49:e0:ec:bb:e7:9c:6b:58:e3:af:
                    fd:9d:2a:73:eb:86:43:17:2a:3b:a1:50:f6:ea:45:
                    4a:8a:c5:18:f0:f8:e6:32:8c:75:8f:e7:ef:bd:34:
                    07:3e:ce:b5:03:f4:d8:e5:7a:6b:af:4a:05:73:5e:
                    03:23:da:f8:04:9d:cf:2f:5b:17:49:63:19:7c:ec:
                    58:0e:ec:6f:9e:18:87:d0:66:83:29:76:96:80:cf:
                    9f:21:ac:21:ee:cd:3a:20:80:aa:68:b4:15:fd:73:
                    59:26:b3:20:70:ff:b0:34:e2:1e:4d:50:fe:10:9d:
                    54:1f:bf:e8:c3:bf:93:30:f4:1a:e9:ef:92:fa:92:
                    12:78:e1:d5:9a:5f:c0:f0:23:f2:15:c7:10:23:d9:
                    ae:f3:ee:2e:56:ca:21:c7:a3:c4:73:cf:f2:01:01:
                    5c:06:d3:d7:73:d7:95:cd:9f:e6:c7:89:71:34:d7:
                    3a:19:22:f6:d6:12:1e:dc:8a:e4:78:d9:db:1a:17:
                    b5:c2:12:03:b2:6c:07:1e:cc:14:17:97:ee:c5:5a:
                    b4:ec:c0:48:5a:c7:37:5a:32:71:44:2b:31:b9:af:
                    8d:22:f8:71:ab:19:9a:9c:72:a3:ec:73:e7:3f:77:
                    b3:cb:9c:ca:03:19:26:31:66:d8:51:99:65:6d:0d:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:16:DC:F4:1C:2D:38:B3:4F:2B:5A:6F:53:A3:10:87:85:38:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/74422f9f-f2b4-3956-bf54-3c6455b0f9cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:63:87:26:7e:10:9e:9d:70:41:2e:42:01:a4:1f:ac:67:dc:
         75:89:40:a9:d5:90:fe:bb:2e:52:bb:04:bb:f5:fe:86:11:ea:
         82:1c:4d:a5:20:df:35:77:f7:43:3d:fb:d0:6d:73:6f:e2:76:
         9e:38:27:96:15:ec:43:21:f9:72:e6:eb:ed:34:7c:b6:52:85:
         33:2d:0f:79:ad:87:07:82:c5:4c:d7:66:70:6b:4e:fa:56:ba:
         7c:e5:9e:06:93:47:28:fb:75:06:d2:11:fa:67:50:e8:49:6c:
         9b:b6:49:de:c6:66:44:46:87:20:47:06:14:8b:21:b9:68:1c:
         c3:6e:7c:ac:7d:e0:63:11:25:c7:59:68:6e:f5:87:bd:53:a4:
         90:3d:bc:f3:0c:b3:93:1f:44:46:bb:2e:9c:64:58:52:7a:a3:
         b2:3d:be:27:33:f1:73:d6:8e:d7:80:ab:15:53:4e:3e:e0:0c:
         36:37:0f:57:9b:26:78:c0:6c:d9:2e:c1:3a:46:ce:6e:8a:c5:
         60:56:bc:96:c1:eb:95:f4:5c:14:30:fc:ce:6d:a7:be:bf:1e:
         cb:25:e9:9b:60:86:74:67:6a:8d:40:5b:5c:e4:55:d0:04:ec:
         8b:c2:fc:d0:99:8b:20:e1:5a:36:27:7c:96:c0:35:13:3d:1b:
         a0:ee:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:37 2025 by rpki-client