Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c22910a-39b1-376a-af02-709bb0f0f293.roa
File:                     8c22910a-39b1-376a-af02-709bb0f0f293.roa (raw, json)
Hash identifier:          iZ8xLjPFFEVkwovlKiUp9w2JiKLygsZ4rw9JdyEuXSM=
Subject key identifier:   8F:2C:C2:F3:9F:54:F8:5B:B6:2B:F1:52:7D:B9:E2:B7:43:34:3F:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD5EFF91BDD669F4B0C48E5E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c22910a-39b1-376a-af02-709bb0f0f293.roa
Signing time:             Mon 07 Nov 2022 12:00:00 +0000
ROA not before:           Mon 07 Nov 2022 12:00:00 +0000
ROA not after:            Tue 13 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d5:ef:f9:1b:dd:66:9f:4b:0c:48:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  7 12:00:00 2022 GMT
            Not After : Dec 13 05:00:00 2022 GMT
        Subject: CN=5d16be57-f689-4679-9fcc-681624b5f2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:70:df:a7:12:87:29:cd:3c:c7:e5:6d:cb:
                    d3:f4:6e:c6:f9:26:a2:69:48:01:f4:6f:d3:8c:59:
                    b6:04:d0:37:43:f7:76:10:39:b2:2b:a4:da:88:bb:
                    bb:9c:17:eb:7f:02:f8:dc:e8:9c:e6:e6:c8:9b:ea:
                    61:b5:6e:dd:7b:9f:42:66:19:71:74:fb:56:b6:56:
                    30:2c:2d:8e:6b:b4:0a:2e:ad:a8:6a:4e:94:ef:6b:
                    18:06:d4:f5:60:a5:9c:ec:34:f2:36:a4:e0:df:ca:
                    ac:86:35:ff:a6:15:34:3f:47:a0:9a:eb:a5:53:cb:
                    c4:34:95:53:13:11:53:43:3a:5a:7d:7f:c1:d8:c4:
                    6f:e5:69:98:68:73:3f:a2:46:e8:58:b1:2b:25:52:
                    3a:52:f9:99:e1:69:83:10:64:4c:03:2e:ae:49:0d:
                    32:88:87:ef:7e:2f:e4:4a:52:75:41:a8:42:ce:15:
                    74:db:96:be:0c:a6:57:d8:ad:d4:3c:93:33:f3:83:
                    d3:54:64:1a:80:3d:b8:55:68:ca:91:a9:a4:a5:09:
                    56:1c:43:e6:e2:4e:68:40:52:19:64:91:cc:d3:17:
                    ea:a8:34:f6:5e:4d:a2:09:86:6b:5d:98:5c:c8:18:
                    c7:13:47:df:a1:1c:a1:a2:e5:56:70:0c:1f:e6:32:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2C:C2:F3:9F:54:F8:5B:B6:2B:F1:52:7D:B9:E2:B7:43:34:3F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8c22910a-39b1-376a-af02-709bb0f0f293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:5d:ff:ee:1a:87:61:ac:5b:dc:28:1d:56:b2:2c:e4:5d:
         25:bb:4a:52:af:1e:b1:ac:b4:ff:86:10:84:81:52:c6:9f:b9:
         34:ed:6e:7e:f1:0c:d9:61:9d:1b:7c:50:15:11:c5:f2:13:7d:
         86:2c:db:22:09:ac:0c:53:6f:f1:82:59:7e:f5:8a:44:39:ff:
         d3:10:1a:70:7e:56:64:ce:bb:f0:72:cb:e8:08:9e:a3:67:24:
         19:ea:77:c0:b8:1a:45:ba:f5:dc:40:ee:4d:a9:c1:b7:d7:7d:
         4c:08:29:c5:f1:88:11:6c:b6:e3:e1:5e:44:b7:35:1e:df:a4:
         59:0e:78:25:01:bd:71:eb:51:2b:27:1f:ba:cf:ad:1a:3a:c0:
         07:ee:9a:d3:84:5a:cf:41:45:25:10:43:d2:b6:6d:f3:e3:1f:
         d5:e6:3c:df:9f:d2:e2:13:eb:ca:8a:6c:56:b8:19:a8:4d:e7:
         f7:57:5b:b2:8c:50:73:ae:cf:51:91:c4:34:f0:e1:97:a9:b2:
         b7:bd:cf:c3:fd:06:cb:ca:3c:47:0e:a9:f5:d7:af:81:11:21:
         ed:f5:db:9e:fb:d8:c1:f7:71:24:18:26:a9:10:33:29:16:6f:
         1a:57:b6:20:61:c1:57:3f:a1:f1:bd:33:77:11:25:1e:d1:9a:
         e1:55:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:03 2025 by rpki-client