Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8add81d3-dc3f-32cb-b9c2-7bd32e2b6e8e.roa
File:                     8add81d3-dc3f-32cb-b9c2-7bd32e2b6e8e.roa (raw, json)
Hash identifier:          gEDFvfXgZLKqLB/LkS+WVAwSwGVmF6Fo71xqhsJkhiU=
Subject key identifier:   9A:FF:40:1F:90:E9:C5:85:FC:E6:2A:F0:5D:EC:F9:C9:78:17:F7:9F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DC9101937BC9A01B883A69530
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8add81d3-dc3f-32cb-b9c2-7bd32e2b6e8e.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        3.192.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:10:19:37:bc:9a:01:b8:83:a6:95:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=b9319a0c-1440-4941-8913-a7352ed7dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:91:d3:96:2b:05:02:a9:07:bd:5b:b9:96:
                    87:96:65:bd:16:a4:9e:10:ab:54:2a:f5:89:5c:68:
                    20:a4:7e:e1:9b:13:13:8b:93:7d:c5:d7:d2:b0:f0:
                    13:ba:e2:51:ff:54:26:3c:bd:14:44:77:8c:bb:56:
                    4c:c5:39:04:b6:55:f9:2e:a9:92:9f:aa:18:fb:58:
                    1e:d0:de:87:71:88:0f:06:5a:94:00:6e:8a:46:34:
                    2a:e1:79:3c:b3:47:86:a3:89:af:7a:0a:82:e9:db:
                    ca:38:68:f0:3e:7d:51:54:8c:a0:f5:dc:46:77:1f:
                    35:e5:f6:15:cc:2c:d1:2b:84:db:36:2d:fe:11:3d:
                    bc:74:b3:e5:61:7d:b2:d2:3a:1e:14:99:9b:25:6b:
                    25:86:45:dd:66:bc:47:39:fc:8c:32:d7:0c:ee:58:
                    f7:5f:1a:a0:b1:af:6c:9b:d8:53:79:2e:b6:bb:76:
                    5e:29:eb:84:d2:71:d1:73:36:3a:2a:8c:02:14:07:
                    7d:5c:58:52:d0:1b:a2:0b:b6:79:ae:5e:41:c4:38:
                    c6:2f:e3:8f:6a:2d:98:9d:19:c2:7c:af:04:dc:82:
                    c8:7b:2c:7d:12:5c:90:82:b8:f7:aa:b6:2e:c5:19:
                    65:73:85:5d:00:09:27:44:13:1f:04:54:ee:b2:6b:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:40:1F:90:E9:C5:85:FC:E6:2A:F0:5D:EC:F9:C9:78:17:F7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8add81d3-dc3f-32cb-b9c2-7bd32e2b6e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:24:6a:e0:9d:78:95:de:78:0c:a8:ba:49:98:88:13:5e:
         88:5e:1b:02:9d:e3:77:b7:ad:a9:54:ec:d1:f6:0b:70:f6:96:
         1f:f4:8f:55:73:7a:ea:d3:51:a5:7c:34:07:5f:85:13:8b:0c:
         93:d5:a2:6b:dc:c1:44:9b:74:ed:90:fa:8e:2a:24:b3:49:65:
         b0:f6:e8:ee:31:d6:dd:28:3b:a9:b4:91:aa:39:5d:9b:a2:0e:
         04:b7:8a:26:f6:1f:cd:08:f1:c6:0e:5b:8e:07:05:fc:fe:f2:
         ee:64:02:9c:6f:35:ab:e8:a8:5c:7e:0d:73:4f:a4:21:25:9d:
         39:44:8e:0f:a0:eb:74:e0:c8:8a:08:dc:58:91:28:9a:7c:c6:
         f6:81:c5:4e:b9:99:dd:48:1e:d8:ed:e4:6e:7b:84:00:0f:de:
         81:de:7e:e7:79:48:64:58:9e:78:19:ee:93:ff:02:77:0e:7e:
         22:d3:d8:fc:db:cc:d1:8c:d6:25:f4:74:2e:6b:aa:09:9e:df:
         dc:ad:db:a6:d9:6a:29:3f:df:e0:d9:10:f3:4b:26:cb:ea:e1:
         46:3a:17:f7:5f:00:43:d0:5c:83:64:b7:98:e6:6b:2b:15:b9:
         f0:9f:4f:11:cc:ef:79:8c:34:5b:ad:9d:27:ed:6f:2a:65:d8:
         db:ba:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:12 2025 by rpki-client