Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85490bef-8157-3854-802a-4c8ad0825260.roa
File:                     85490bef-8157-3854-802a-4c8ad0825260.roa (raw, json)
Hash identifier:          wtwbTYgZgoHFlznkwO3i076FxFVZNkHrIKqWWOxadsc=
Subject key identifier:   CD:24:74:27:D7:FB:2E:3B:41:70:44:05:33:6A:32:6C:EC:BB:4D:C8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FB75F745C4505EC43E5A99480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85490bef-8157-3854-802a-4c8ad0825260.roa
Signing time:             Thu 27 Oct 2022 12:00:00 +0000
ROA not before:           Thu 27 Oct 2022 12:00:00 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        141.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b7:5f:74:5c:45:05:ec:43:e5:a9:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 27 12:00:00 2022 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=814d0ad1-ed7f-4a09-a7f1-917ed54947d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:b4:45:a5:57:24:3b:a7:7a:26:97:07:ee:
                    b2:a8:5e:95:30:6c:df:47:2e:c8:f6:06:ae:a1:12:
                    d5:96:b6:87:bf:df:b5:45:8c:01:70:2c:04:ea:2f:
                    c6:5a:a7:56:6c:ee:6e:27:db:3e:a2:18:64:f7:94:
                    74:73:84:cf:e3:43:e6:59:40:f6:5c:19:24:c4:78:
                    37:e0:16:60:1c:36:22:e7:e4:89:87:5b:a1:1f:a7:
                    43:a7:dc:2c:13:b0:c7:b8:0f:5f:6d:51:aa:9c:96:
                    97:72:50:8b:46:a8:0f:0f:7a:d9:f0:eb:5f:be:b7:
                    d1:36:82:e0:b7:a9:3a:ba:77:de:27:77:3b:05:38:
                    17:96:e2:d9:4b:fe:21:59:4a:c2:95:de:36:98:cf:
                    7d:f6:17:b5:97:4d:97:c7:1f:3f:c7:6e:d1:0c:76:
                    0d:e8:4d:61:ea:53:e0:fc:81:d0:b2:fe:d8:a3:fa:
                    8e:01:d5:70:35:21:50:6f:15:5a:e0:d8:13:0e:0b:
                    20:58:41:c4:a9:cb:4e:93:8b:79:0c:19:c5:80:85:
                    fa:33:d4:cb:db:c1:a9:4c:22:cf:c8:d5:62:06:11:
                    5d:5f:89:a6:fe:d5:2c:e6:ae:d2:8b:28:d3:1a:f7:
                    58:dc:65:06:9e:22:5c:af:49:1b:1d:01:7d:b4:b1:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:74:27:D7:FB:2E:3B:41:70:44:05:33:6A:32:6C:EC:BB:4D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85490bef-8157-3854-802a-4c8ad0825260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:da:b2:ea:d0:ad:68:77:c9:30:9b:e9:a6:ff:9b:03:53:b1:
         46:a0:97:21:11:04:55:66:cc:81:08:80:d4:90:8e:b3:2d:49:
         0e:df:c8:93:5a:3d:3a:11:9d:80:a8:57:4c:41:36:94:da:79:
         fe:8b:fc:0c:98:94:2a:06:b1:ea:4c:7c:f3:b3:ba:12:ce:8e:
         7c:79:ad:53:90:0e:02:76:39:ab:43:08:d7:42:95:89:7a:1d:
         26:22:9d:02:b0:2e:44:90:f6:53:ce:b6:0c:7f:8d:27:ea:51:
         64:bf:e0:59:48:15:a6:c5:14:84:7a:16:e2:68:03:df:35:ca:
         4c:bc:9a:87:03:70:6d:f4:ff:2a:ca:e1:d4:15:f3:bc:1b:9e:
         93:03:bb:f6:b2:72:bf:41:12:9d:71:ee:ed:c3:46:a8:bb:96:
         a8:1a:2d:64:0b:b7:89:dd:d5:4a:fa:92:63:ca:86:7b:b7:8d:
         94:d1:c6:a7:73:b8:63:4b:0f:3b:33:84:bc:67:cd:6b:47:f2:
         44:22:74:48:f6:b9:03:15:39:98:59:00:cf:b2:5a:0b:7e:24:
         c0:0b:2c:66:bf:73:fa:b7:c7:d8:cb:6a:6e:fc:d0:0c:a2:70:
         98:94:a8:8b:ea:45:e3:bf:46:e6:78:6f:c1:0f:63:9f:5f:7d:
         1c:06:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:34:53 2025 by rpki-client