Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/816fa5bb-4e9a-3557-90d7-9ebc55188b4b.roa
File:                     816fa5bb-4e9a-3557-90d7-9ebc55188b4b.roa (raw, json)
Hash identifier:          6QRO6nmBHoyijVBwBmcjH4+c8CPTAuiENnbygFnr5VU=
Subject key identifier:   E6:EC:E7:BE:17:37:DC:A9:DF:32:67:DC:60:FC:68:4C:FC:34:86:38
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409304E8334F7C48E154264380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/816fa5bb-4e9a-3557-90d7-9ebc55188b4b.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        170.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:93:04:e8:33:4f:7c:48:e1:54:26:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=dd73efc6-f4a5-4406-a983-d5997db5253a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:87:05:93:ee:cd:c6:7b:dc:3c:d0:51:d8:
                    fb:e2:7d:00:e1:7e:e4:f7:58:3e:02:64:31:60:69:
                    06:d1:7d:8c:28:88:fe:b6:82:df:a1:21:f7:80:38:
                    0a:9a:2e:03:df:e1:cc:5f:b5:14:10:69:61:67:d3:
                    86:7f:35:7d:8b:61:fa:be:a9:e8:e4:96:f9:16:27:
                    ea:5d:d9:23:22:e0:26:64:9c:4c:f8:1e:64:07:61:
                    46:61:63:30:4a:ff:fb:c9:d7:90:3d:1b:2e:51:1d:
                    1f:62:5d:93:8c:63:dc:fd:7a:48:e0:b3:21:1f:f3:
                    6f:c0:8b:12:ef:07:b9:e1:b5:7c:35:30:09:fe:78:
                    b2:cf:6b:c1:32:16:fe:fd:07:1c:a5:aa:9a:16:39:
                    86:4d:43:53:95:6b:2d:35:54:52:77:ff:f5:c1:29:
                    df:5c:c9:8c:3f:6d:7e:9b:f7:86:1b:5e:9b:c3:cc:
                    c4:04:0c:ab:87:61:c4:fa:e4:77:3d:93:76:4a:1f:
                    a1:ce:ae:23:dd:04:c0:57:52:76:ab:93:4b:70:99:
                    9e:d9:93:b2:3c:68:b4:93:ab:27:74:0e:3c:2d:ea:
                    e2:9b:2a:41:55:36:1a:c7:31:44:1e:c6:ca:a2:3b:
                    77:0f:2b:ff:bc:33:38:34:fd:e3:1f:13:73:ab:72:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EC:E7:BE:17:37:DC:A9:DF:32:67:DC:60:FC:68:4C:FC:34:86:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/816fa5bb-4e9a-3557-90d7-9ebc55188b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:da:d7:43:9a:9e:ec:a4:b9:13:67:03:f5:a7:8e:62:9b:
         be:3c:50:48:b5:d5:1e:27:dc:4c:80:f7:9f:a1:4d:bb:54:41:
         63:a2:98:66:16:bd:e8:65:0f:61:6d:79:97:aa:7f:dc:53:f9:
         14:cf:1e:ea:a3:bf:1e:2a:ea:23:3b:2b:95:da:34:38:34:af:
         17:dc:ff:d6:e6:92:b1:6b:5c:2e:b8:bc:c8:a3:31:7f:0a:3e:
         d7:79:0e:72:36:0a:1a:25:1b:8e:f9:f6:08:7c:c7:55:da:c9:
         3a:9e:58:21:8f:c1:d2:d4:c7:f5:c8:ca:8c:c7:48:fb:27:24:
         b6:ed:2c:87:79:0c:b4:ff:db:c8:bf:78:b2:f9:f4:77:2a:e3:
         20:80:3e:77:37:6e:47:41:0b:83:23:98:80:8a:a4:0c:4c:35:
         64:3a:c6:ad:bb:c5:73:36:56:fd:a0:b3:df:49:dc:77:c0:73:
         b1:50:41:fc:9b:08:20:3f:3a:56:fb:83:ed:99:0e:56:f1:6e:
         56:98:e9:c2:c8:7a:70:01:bc:a4:3b:5c:6e:16:05:1e:ce:85:
         d5:bd:71:e9:f6:c0:f2:c7:a5:71:b8:a3:d8:58:2f:3b:29:8c:
         cc:88:10:b8:0c:30:d4:8e:db:52:e4:9c:34:81:ff:2b:41:19:
         12:11:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:11 2025 by rpki-client