Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f1a03e3-f085-366e-bfb8-d386def3ffbc.roa
File:                     8f1a03e3-f085-366e-bfb8-d386def3ffbc.roa (raw, json)
Hash identifier:          bNqpO83gGZtXOpC7+WjV5DnD3H+xBcziLmKyjLJItrU=
Subject key identifier:   5A:46:13:22:43:A2:18:53:9D:53:FA:D9:1C:20:A4:4C:53:31:08:01
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FECCB744DAF99833A87E32380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f1a03e3-f085-366e-bfb8-d386def3ffbc.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        13.228.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:cb:74:4d:af:99:83:3a:87:e3:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=281143c0-031f-48bb-8de1-90c939c23d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:bf:a7:6b:45:b2:7f:ec:02:dc:20:97:89:
                    05:02:e3:68:e5:73:a8:2b:42:c1:b4:b6:ee:e7:b0:
                    2c:56:74:b4:86:3f:fd:ea:ee:57:43:02:77:35:61:
                    d7:0d:7b:b2:ef:20:d1:50:02:23:42:7b:17:39:89:
                    a6:62:1b:7f:34:05:9c:ee:20:2f:ee:df:71:9e:9a:
                    1a:63:cf:73:e1:ce:05:23:c0:ae:36:28:10:84:a0:
                    e8:88:db:7f:16:ed:83:e2:0e:2a:45:e8:87:30:89:
                    94:80:40:57:71:ba:91:7d:18:d8:1d:ab:0e:3d:6c:
                    87:04:a3:20:20:f4:3c:20:a1:de:e5:46:4a:05:2e:
                    be:c3:8b:4e:04:a3:a7:23:eb:c8:d5:c5:87:83:c6:
                    34:69:1a:23:be:2b:e9:0b:4f:4c:cb:3d:63:c8:9e:
                    50:89:86:8e:d3:5b:dc:34:ce:33:ec:72:e0:21:98:
                    e4:be:ad:cb:ae:79:c4:fb:96:90:3b:8a:6b:c5:fd:
                    77:a4:3a:da:d2:68:d8:79:e8:9b:18:24:92:5b:bc:
                    45:94:36:54:04:66:88:ad:8a:9b:1a:e4:c5:85:e1:
                    aa:ac:07:be:f5:a6:9c:eb:15:b6:92:66:6d:fe:6a:
                    a5:40:ec:23:a4:b4:b5:dd:8d:72:ef:2d:da:0a:b0:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:13:22:43:A2:18:53:9D:53:FA:D9:1C:20:A4:4C:53:31:08:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f1a03e3-f085-366e-bfb8-d386def3ffbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.228.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:5d:25:24:8e:b7:c2:a3:40:ab:00:ce:e7:d5:4a:52:74:
         5f:42:2c:71:f4:ec:0d:84:e3:87:20:da:7b:31:4e:25:f2:00:
         9b:5e:e2:68:7b:cc:dc:4d:52:46:c0:55:7c:79:5e:de:4b:bc:
         6d:af:b0:a6:e8:e4:e7:6c:f4:b6:3d:f3:5f:3d:c1:99:3f:ae:
         fc:16:ca:1f:05:06:dc:ed:28:07:d4:b8:a1:5c:5c:6f:42:6e:
         84:11:a4:b8:a0:d5:d5:c0:a2:75:fe:72:ac:43:2a:8e:ec:f6:
         56:e7:4f:3b:d1:31:fb:65:93:02:81:66:83:e1:4c:70:39:ee:
         91:df:10:92:15:94:e1:e1:3a:b0:3a:d6:ae:7e:d9:f7:a9:53:
         3f:7e:48:90:ee:5e:9c:a1:c6:88:dc:91:c1:3d:6b:9a:ca:4b:
         a8:48:a3:78:a4:7c:fb:05:28:4a:dc:58:8f:45:e3:ea:0c:1a:
         de:f5:09:5c:ad:30:8c:d6:04:4a:66:de:c5:d1:3b:fb:eb:6a:
         d8:4b:d7:a1:95:79:e2:ce:85:d4:94:e9:80:94:05:18:18:cd:
         40:04:56:4f:e7:69:56:b9:88:79:0a:5b:8e:8a:14:e5:75:86:
         ae:1d:c2:e0:2b:83:6c:26:ad:0d:05:d3:09:56:6a:79:97:ee:
         2b:42:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:00 2025 by rpki-client