Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96b185f8-df7c-35b3-a4c8-b75b12645130.roa
File:                     96b185f8-df7c-35b3-a4c8-b75b12645130.roa (raw, json)
Hash identifier:          2O3vMMg+I7+otlxbjc8WBePG2y9aiHqdSUSO7mFIiUw=
Subject key identifier:   9A:93:A5:CA:8B:8C:F0:D0:D2:39:69:F2:77:FC:41:16:59:87:86:3D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE2ADB391DC5BDA296617FD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96b185f8-df7c-35b3-a4c8-b75b12645130.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        161.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e2:ad:b3:91:dc:5b:da:29:66:17:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=ce2676f1-39a2-4149-b5b0-50055a656f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:09:27:47:61:5a:99:a1:db:26:4d:46:44:
                    47:a1:8c:18:5d:e7:72:9a:c0:b1:9e:dd:14:22:7d:
                    e1:09:d7:0c:3f:e3:75:15:ab:12:aa:44:6a:43:45:
                    7e:3c:11:36:92:dd:f0:06:c6:05:92:99:93:69:e7:
                    3c:cd:3b:58:f1:e0:7e:04:5b:0e:97:77:15:9c:15:
                    ab:6b:31:7a:61:d3:eb:8b:df:3f:c7:ef:c8:77:87:
                    c4:46:b6:c0:bb:f0:37:16:8e:2d:51:88:8d:1d:64:
                    c3:2f:f6:40:b2:c3:13:32:7f:b0:9d:98:f4:0d:f7:
                    de:7e:30:c4:2b:75:07:8d:34:70:c3:f1:49:2d:35:
                    3e:8a:20:ab:d9:e3:c8:22:96:a1:b3:26:07:ae:6f:
                    87:1e:70:10:09:ca:91:60:3d:03:6c:af:f0:d1:08:
                    5e:b7:b5:34:60:df:54:7f:16:5d:7b:03:cf:ae:80:
                    ac:b5:85:63:ed:e5:17:ba:6f:a9:00:9f:43:98:c1:
                    c1:5b:b7:25:25:4d:85:b2:7f:13:de:be:6e:36:63:
                    b0:23:8b:d2:77:56:31:4a:16:74:09:c7:32:60:9b:
                    db:0f:12:34:6e:40:aa:02:d1:94:a9:d3:7f:64:31:
                    c2:bf:82:bc:34:29:f5:79:1f:ff:43:c0:79:b0:1f:
                    6d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:A5:CA:8B:8C:F0:D0:D2:39:69:F2:77:FC:41:16:59:87:86:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96b185f8-df7c-35b3-a4c8-b75b12645130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:89:52:5e:dc:92:59:9f:09:55:59:a9:5c:2b:ad:45:17:8c:
         02:43:1c:d3:7c:56:75:4f:fe:74:ff:56:42:81:10:64:df:45:
         1f:a0:11:57:8c:8f:3a:65:6b:e3:a2:60:77:20:09:8e:23:e9:
         bc:67:f4:53:71:36:47:22:23:67:ef:f6:d0:ce:e3:10:7f:35:
         0b:3f:b2:23:ea:ea:59:92:da:47:95:ad:a8:cc:23:40:7a:99:
         e6:10:3f:41:bc:15:7e:32:ae:af:cb:10:46:56:e9:9b:5b:c0:
         d6:7d:c7:15:b7:79:af:48:80:0c:61:40:3a:6b:36:d7:d7:9b:
         e9:9a:f8:a0:0e:a3:87:ae:8b:33:7c:0a:3e:b6:60:5a:d9:18:
         fa:3e:7d:d5:a2:f8:ef:fb:76:58:d5:9c:84:af:27:dc:35:a2:
         e7:3a:90:2b:10:d0:1d:2a:9c:31:0e:b7:7b:9c:03:64:8e:b9:
         89:6d:a3:04:62:c5:f4:f7:b7:aa:db:a5:c6:fb:fb:3f:b8:50:
         9d:22:fa:d4:a8:8c:d8:a8:5e:7f:46:c8:df:1e:6c:28:53:d3:
         1b:e8:ef:af:a8:c7:f3:e8:3f:29:83:26:35:fd:1f:28:7f:5a:
         05:00:9d:1d:c5:21:04:8c:21:53:6d:9a:87:87:7d:32:6f:37:
         8f:c9:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:26:02 2025 by rpki-client