Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94c80d81-3056-37d3-a84c-e6b8c5212b10.roa
File:                     94c80d81-3056-37d3-a84c-e6b8c5212b10.roa (raw, json)
Hash identifier:          wivk9fn5RikpJRJPkYg3mh2rMp4BJKAdqowWzcWw9rc=
Subject key identifier:   10:B6:16:DF:20:62:01:74:EC:C8:E4:B8:41:A9:B3:A9:1E:DF:1C:CA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E1E69CA8DD820B489BF75E850
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94c80d81-3056-37d3-a84c-e6b8c5212b10.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        141.139.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:69:ca:8d:d8:20:b4:89:bf:75:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=af8360dc-6655-417c-823c-11b0087ac57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:78:53:af:64:3a:03:2e:4d:8e:d2:c5:f3:
                    48:13:d0:91:5a:6c:17:77:10:e8:9b:7c:9c:32:1a:
                    3e:c5:77:68:6c:f9:94:36:d7:9d:e2:61:21:10:97:
                    0f:a3:a2:87:55:09:56:c1:72:10:b0:72:da:b0:4b:
                    b3:cd:ad:eb:bd:cc:b2:a1:2a:5f:5a:27:37:4b:fd:
                    07:8b:62:48:e1:ca:a0:7a:32:cd:20:41:21:e5:68:
                    2a:ff:e6:01:2b:bd:f1:ae:35:e3:0d:2d:b7:80:54:
                    5c:7a:42:f6:43:2b:b5:4a:c7:24:e9:4d:49:4a:7d:
                    f0:88:4a:ac:3b:c3:b2:a0:0c:34:3f:fd:bd:93:e5:
                    ea:0d:27:a4:25:d7:79:f0:e0:fb:33:ee:01:0f:5a:
                    90:9c:17:30:23:2f:00:8f:e1:bc:5c:43:07:49:10:
                    59:c3:e8:0c:9f:7b:f8:4c:00:ac:b8:41:17:70:90:
                    32:75:25:8a:e0:04:9f:ce:dd:7a:2e:b6:9c:be:ec:
                    a6:66:fe:72:b6:e8:13:88:f5:69:cc:85:c0:c2:08:
                    74:e2:fd:9f:ec:dd:87:93:6a:46:25:ed:a8:eb:80:
                    5e:75:d7:68:6a:e1:d1:58:9f:2d:d0:31:b3:34:d6:
                    6d:80:63:fd:f0:4a:93:30:86:50:3f:67:81:b0:ec:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B6:16:DF:20:62:01:74:EC:C8:E4:B8:41:A9:B3:A9:1E:DF:1C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94c80d81-3056-37d3-a84c-e6b8c5212b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:39:9d:11:c6:fa:63:6e:32:1c:c1:7f:97:92:8b:fc:e9:a4:
         4a:ec:65:10:d3:08:9c:f1:36:48:6a:b4:5a:43:86:6b:40:0a:
         1b:9e:03:43:b4:44:74:72:5a:fb:f7:3f:ab:8f:93:10:17:ce:
         45:ab:60:97:aa:73:5f:22:3b:bd:b6:0c:1a:a9:dd:cf:eb:ae:
         41:67:44:1b:03:2d:c4:f2:65:1f:08:8b:81:79:8a:3c:2a:d3:
         27:1b:6d:a6:d0:61:20:53:38:1d:f9:3b:94:98:bd:7b:7a:58:
         fa:cd:3c:6a:a6:d6:7d:30:c4:58:f2:15:44:75:0f:af:75:c9:
         61:e1:47:17:c3:af:29:21:33:4f:12:5a:4e:17:32:22:08:00:
         28:f7:b4:c7:90:75:36:88:12:56:9b:e8:0d:82:43:87:ac:ae:
         bc:ce:87:22:b6:3e:87:da:04:cc:f4:3f:05:bf:0c:57:cb:0a:
         d0:0f:87:e9:b3:bc:ff:d0:8c:ba:a3:cd:43:6f:39:e1:b0:a5:
         96:5c:d2:4c:d9:e4:e2:e2:9c:b0:9d:51:0f:11:9a:3b:89:83:
         c6:3d:df:54:d7:b2:43:0f:f1:6a:df:32:89:dc:2c:8c:08:ba:
         af:f4:7d:0e:92:32:81:3c:97:73:d3:31:56:ad:c8:c1:50:3d:
         b3:4c:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:12 2025 by rpki-client