Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b79af88-4a5b-3201-a276-44f2ef213a55.roa
File:                     9b79af88-4a5b-3201-a276-44f2ef213a55.roa (raw, json)
Hash identifier:          KFe0W9IyDme6RtIxI80O7pV29ujNGq5o16ZmCxF3D6o=
Subject key identifier:   44:E6:5D:7B:9F:C6:21:63:E2:B1:97:94:D8:0A:88:AC:35:EF:73:F5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840248AC37663E09E9E48419080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b79af88-4a5b-3201-a276-44f2ef213a55.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        165.208.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:8a:c3:76:63:e0:9e:9e:48:41:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=dc8666ff-f2de-4601-a2b2-e1d508ae48dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:ad:fc:e8:4c:d6:68:97:60:93:e4:ec:0d:
                    f1:cc:74:14:5c:2a:b9:88:5c:2e:78:06:5b:45:dc:
                    3d:4f:69:5d:73:d2:92:22:21:e0:8a:97:db:96:04:
                    45:5f:ff:a3:b7:d5:aa:44:37:51:79:07:00:b5:eb:
                    4d:53:89:23:13:5d:0b:19:fd:7a:3f:b2:a5:f1:16:
                    e6:9d:35:8a:b0:04:93:9c:d0:f8:48:2a:37:32:94:
                    8b:a3:fc:d5:42:64:bc:e8:92:ef:ba:e4:ba:a6:bd:
                    35:dc:74:a9:2d:66:95:28:1b:54:7c:c7:9f:f8:da:
                    d6:c3:e4:e0:2d:77:ab:16:c7:8f:14:c4:e2:74:b5:
                    f9:db:09:65:77:84:7f:a6:fc:db:a9:8d:6e:55:be:
                    23:33:e8:1c:b5:08:e7:06:6e:34:10:b0:c9:fd:ff:
                    d1:69:76:68:dc:75:7d:f5:ed:51:8d:6d:49:fa:72:
                    27:0f:59:e4:e3:94:db:79:5e:eb:1f:f0:b6:eb:b3:
                    70:38:8b:b8:90:f6:aa:2b:25:41:79:79:24:93:9b:
                    dd:24:be:1a:0f:cc:7a:85:ef:66:39:c2:d9:30:36:
                    d1:81:53:8a:8a:e2:bf:64:62:10:95:3c:e6:c4:b6:
                    69:4f:69:4b:48:91:fc:fa:9c:de:ec:23:3f:8b:89:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:5D:7B:9F:C6:21:63:E2:B1:97:94:D8:0A:88:AC:35:EF:73:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b79af88-4a5b-3201-a276-44f2ef213a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:04:47:db:a9:bf:59:c7:ab:84:e0:b1:e6:60:32:da:ef:64:
         36:3c:77:5c:2b:15:28:a2:c1:4f:58:c2:85:c5:2b:07:4f:dc:
         06:cc:5a:bf:40:08:60:79:38:dc:5b:fa:78:19:2a:0a:63:85:
         62:ba:e6:dd:7c:34:03:f8:45:87:7e:3b:64:ce:d9:47:4f:c1:
         95:d9:07:e8:3f:c8:92:5e:ae:90:fa:9e:4e:6f:1c:3d:88:27:
         e3:7b:ff:1a:c7:b1:a7:ed:0a:2b:6d:62:98:0c:f6:12:43:ea:
         f5:8e:25:52:fa:9b:cb:2f:78:f7:5e:d6:74:d2:6b:57:31:00:
         95:09:95:82:99:91:94:96:b5:08:07:e9:52:27:5c:52:69:9a:
         44:87:a2:d1:0f:3f:a5:22:29:e3:2f:58:6d:6d:bf:c7:e7:df:
         d5:13:a8:41:30:17:26:72:34:81:a3:e9:20:03:09:35:40:49:
         3b:cf:ec:fd:9e:16:d7:0d:72:a2:83:a6:2d:2c:22:29:28:30:
         c0:1e:36:25:2c:39:6b:10:41:1c:64:2b:29:81:1b:b2:40:21:
         76:fc:f3:d1:84:9d:c0:30:a5:c5:f7:7c:86:1a:4b:6a:60:de:
         7e:b4:5c:aa:84:cc:17:20:eb:96:b0:db:10:65:63:d9:52:c3:
         cf:a4:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:17 2025 by rpki-client