Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/934584fe-fceb-34ed-92f7-acb5474d9896.roa
File:                     934584fe-fceb-34ed-92f7-acb5474d9896.roa (raw, json)
Hash identifier:          j6z50TN7y5j9UIIKWAhERYzvW1qCMbsCOLr5W/IGdJs=
Subject key identifier:   BF:60:04:D2:87:AC:2E:17:B4:BA:6F:4B:70:93:3F:5C:01:76:2A:C4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584044A589551A3BE0EC532F6380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/934584fe-fceb-34ed-92f7-acb5474d9896.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        169.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:a5:89:55:1a:3b:e0:ec:53:2f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=731aa060-e080-42ef-9f47-a39f8882efa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:06:36:ba:91:84:bf:9a:90:22:52:d9:00:
                    df:6b:f1:13:36:82:05:8c:af:bc:0e:9a:7e:0e:63:
                    6d:85:3e:32:59:06:1b:5f:0e:8f:6a:f7:49:22:69:
                    27:2c:4c:d6:6a:cc:4e:96:1b:82:af:c1:71:b5:82:
                    cc:f9:21:f5:f6:24:b4:46:f5:42:b7:14:56:1a:0a:
                    a9:0a:f3:65:1f:0c:0e:53:39:3c:6f:6c:44:d1:f8:
                    3d:1b:c5:b4:7e:75:ef:15:60:42:f4:f1:0d:cc:61:
                    6d:b8:fd:f1:d4:9a:64:1f:2b:d7:12:fd:93:a9:9e:
                    97:6c:f9:03:0a:21:c8:f2:55:27:cf:44:2b:e9:c1:
                    ca:f6:44:ac:ae:3a:0c:b7:69:22:ef:61:7d:29:89:
                    39:b1:25:27:df:f9:8e:19:11:30:79:5c:f3:90:5d:
                    2a:6e:50:e2:39:ec:cf:b4:db:fd:0b:11:5a:60:49:
                    47:9b:25:92:52:cf:0c:09:70:40:0e:6e:be:92:51:
                    17:c7:34:50:b5:5a:a0:4c:63:51:27:51:dc:ba:10:
                    36:90:d7:1a:c3:d2:26:89:45:59:c1:00:03:5d:ee:
                    b8:dd:2a:9e:07:4d:29:3a:6e:4f:0c:ce:66:89:23:
                    9a:d5:b9:3e:fa:b2:6c:8e:41:cd:fb:c1:0b:4e:34:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:04:D2:87:AC:2E:17:B4:BA:6F:4B:70:93:3F:5C:01:76:2A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/934584fe-fceb-34ed-92f7-acb5474d9896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2d:b4:b0:b2:30:7a:c8:d8:cb:fe:41:ee:61:7b:61:de:3f:
         66:d0:23:5a:d8:68:9b:15:a4:d6:98:4f:cf:d5:56:a9:42:4f:
         c2:e7:3f:b5:dc:96:72:e4:f7:94:a5:16:85:4f:fd:a9:d9:65:
         2a:b8:59:8c:9d:76:6c:53:17:8c:7c:37:d5:de:ae:79:de:b6:
         47:f5:c3:f9:5e:96:fe:29:f4:f6:6f:96:fe:08:f1:72:25:ed:
         e2:ff:31:36:6e:30:80:8e:12:04:e7:c1:63:db:a3:02:8e:88:
         28:66:9e:3e:12:f6:73:40:e4:13:15:40:c1:29:10:c0:d6:ae:
         f7:4b:31:4c:f2:64:5d:a3:7a:63:ad:5f:41:5b:67:1b:99:6d:
         c0:43:c9:be:1d:5f:e0:ed:c1:c4:e7:43:8a:ff:63:21:e6:3f:
         42:c3:fc:25:b2:3f:79:93:8b:62:f2:53:82:ab:f3:c3:84:44:
         ee:b8:ab:a5:6d:a5:5b:62:49:b2:f5:2d:52:28:39:eb:8e:d3:
         6e:fc:54:b8:cc:09:b2:db:b2:f5:c0:e3:e4:51:dd:f5:fa:5a:
         f4:02:8c:0c:43:cd:be:e6:6c:ed:2d:46:a9:8e:24:06:a2:9b:
         df:f2:b2:c9:ae:e7:18:ec:ed:8f:b2:64:1b:2c:82:59:05:98:
         51:37:fb:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBEpYlVGjvg7FMvY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NzMxYWEwNjAtZTA4MC00MmVmLTlmNDctYTM5Zjg4ODJlZmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrEGNrqRhL+akCJS2QDfa/ETNoIFjK+8Dpp+
DmNthT4yWQYbXw6PavdJImknLEzWasxOlhuCr8FxtYLM+SH19iS0RvVCtxRWGgqp
CvNlHwwOUzk8b2xE0fg9G8W0fnXvFWBC9PENzGFtuP3x1JpkHyvXEv2TqZ6XbPkD
CiHI8lUnz0Qr6cHK9kSsrjoMt2ki72F9KYk5sSUn3/mOGREweVzzkF0qblDiOezP
tNv9CxFaYElHmyWSUs8MCXBADm6+klEXxzRQtVqgTGNRJ1HcuhA2kNcaw9ImiUVZ
wQADXe643SqeB00pOm5PDM5miSOa1bk++rJsjkHN+8ELTjQuSQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL9gBNKHrC4XtLpvS3CTP1wBdirEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTM0NTg0ZmUtZmNlYi0z
NGVkLTkyZjctYWNiNTQ3NGQ5ODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqc0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAny20sLIwesjYy/5B7mF7Yd4/ZtAjWthomxWk1phPz9VWqUJPwuc/tdyW
cuT3lKUWhU/9qdllKrhZjJ12bFMXjHw31d6ued62R/XD+V6W/in09m+W/gjxciXt
4v8xNm4wgI4SBOfBY9ujAo6IKGaePhL2c0DkExVAwSkQwNau90sxTPJkXaN6Y61f
QVtnG5ltwEPJvh1f4O3BxOdDiv9jIeY/QsP8JbI/eZOLYvJTgqvzw4RE7rirpW2l
W2JJsvUtUig5647TbvxUuMwJstuy9cDj5FHd9fpa9AKMDEPNvuZs7S1GqY4kBqKb
3/Kyya7nGOztj7JkGyyCWQWYUTf7mQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:39 2025 by rpki-client