Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/866ad738-9abb-36ad-a2cc-756987d4058a.roa
File:                     866ad738-9abb-36ad-a2cc-756987d4058a.roa (raw, json)
Hash identifier:          lCMAV+UHyi1PH3SYbcVY4alGlsG1M75BQzxiKhvGsAc=
Subject key identifier:   DA:07:13:F9:27:58:A9:2C:25:58:0D:77:6D:29:8A:12:DA:47:E1:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0C7A941D9FE50E9278E61610
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/866ad738-9abb-36ad-a2cc-756987d4058a.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        150.126.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:7a:94:1d:9f:e5:0e:92:78:e6:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=0a42f0db-fb92-42b3-b1e8-02bc0b27f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:35:ad:84:29:3a:b5:aa:ee:0a:2e:02:32:
                    a6:44:e0:5d:11:f9:21:72:e4:1a:c6:ba:d2:86:58:
                    fe:9e:2b:b5:56:4d:2b:5b:57:18:0c:ac:1c:40:11:
                    72:f4:c9:81:0b:ed:b7:8f:96:d6:ec:e5:a7:67:87:
                    96:15:1b:1d:ab:c4:d4:13:c0:ef:d7:68:09:a7:c0:
                    77:37:0b:fe:49:ab:a8:bc:7b:e5:ce:b1:c9:67:92:
                    47:90:88:b5:55:27:3f:54:94:53:fa:d3:40:df:7a:
                    b6:27:f7:38:99:4d:f1:4e:e6:18:85:45:c7:45:9f:
                    81:ea:a7:62:a9:3d:f6:ef:3a:b2:b2:26:ec:27:fa:
                    a4:38:85:69:a1:bb:00:74:6b:6b:7b:a7:24:2c:16:
                    15:63:21:78:0b:5b:b9:6b:57:58:51:e3:2f:cc:98:
                    f6:25:07:0f:bc:8a:13:21:d1:c0:d4:0c:23:89:57:
                    00:d1:db:ed:5e:88:5d:11:a7:a4:ae:f7:9f:51:0c:
                    76:66:3a:3e:07:81:01:fa:85:9d:c8:7b:72:10:23:
                    60:49:0e:cc:35:43:b8:b9:08:5b:80:09:06:50:ca:
                    4c:2d:68:a5:eb:c9:f1:21:6f:cc:15:1a:24:1f:bb:
                    13:a0:15:94:83:f3:31:b9:d3:49:5a:49:df:fd:89:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:13:F9:27:58:A9:2C:25:58:0D:77:6D:29:8A:12:DA:47:E1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/866ad738-9abb-36ad-a2cc-756987d4058a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1a:49:b5:c2:de:1a:2e:7f:ee:eb:56:bf:ec:df:f9:9a:24:
         89:cc:f3:54:f0:30:d9:c2:23:90:4b:f7:17:30:bf:20:ed:1a:
         ab:07:2a:09:ee:ab:53:52:8b:d7:ab:46:d8:d1:39:d5:a2:e6:
         f9:86:ae:ef:c9:ea:d1:a9:83:a5:1d:b7:f4:54:8e:74:b2:ed:
         c4:2b:8b:dd:a8:aa:b2:ad:de:7d:3b:77:cf:9e:c6:f1:70:1a:
         35:f1:31:93:97:da:cb:40:85:34:8f:47:18:58:e7:52:d7:92:
         64:0a:b8:c8:85:45:ae:95:94:bb:fb:25:22:9d:37:5c:69:27:
         e8:e6:e8:6e:59:71:9b:eb:2f:4a:db:8e:8a:98:59:0b:c4:dc:
         74:0c:09:90:4b:77:cf:cd:80:60:37:c9:a2:a9:a0:c9:fb:21:
         b3:40:91:f1:85:d7:f9:32:0e:e0:47:05:d9:e5:51:fc:cd:84:
         58:92:ff:de:91:72:3e:7d:ca:d9:41:e1:2e:84:00:8f:ce:ff:
         5c:a6:90:86:f3:7c:f6:e0:f8:5f:e6:a9:14:1a:10:be:23:e1:
         47:2d:3f:27:a2:de:a3:ca:ad:9a:ab:22:aa:a3:8a:55:09:7c:
         e8:88:63:c5:1d:8a:e4:3f:30:65:e6:dd:05:22:06:29:d6:5c:
         b4:79:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:24 2025 by rpki-client