Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5064740-d0d7-311f-9959-549a93d38309.roa
File:                     a5064740-d0d7-311f-9959-549a93d38309.roa (raw, json)
Hash identifier:          0VONki2OqDDId6F2QmbQV0O26Fx7J9ua8p+h4VGjK1Y=
Subject key identifier:   3A:80:FA:0F:4D:79:B9:10:4D:F6:7F:77:0F:6A:86:95:6A:65:6E:AB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C7005FF09949972F7F7C56F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5064740-d0d7-311f-9959-549a93d38309.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        144.40.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:70:05:ff:09:94:99:72:f7:f7:c5:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=a618d1bb-4ba6-4e4e-a6dd-0d694da94ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:c8:6b:ce:23:ed:6a:e7:53:92:77:a4:e9:
                    75:17:3c:5d:35:48:80:a9:2e:0c:aa:62:f0:4d:6b:
                    d6:65:1c:3a:da:1d:e7:0a:06:b5:22:fe:94:8f:a1:
                    0a:25:ad:b3:da:77:1b:ee:28:0f:88:60:dc:df:9a:
                    d8:64:87:af:6b:41:ea:f6:f3:86:3e:c0:57:af:7e:
                    7d:6a:db:71:08:66:57:e7:51:b4:a6:14:a1:51:62:
                    d7:2c:ae:9f:91:2a:b3:91:ba:a9:03:1a:9c:b2:3e:
                    b3:33:83:e0:26:ec:ff:27:da:db:ad:ef:42:bd:ac:
                    8c:42:cc:1f:b5:ed:41:62:57:81:53:e2:ea:a5:91:
                    a1:22:9f:f5:56:71:d9:08:fd:53:2b:36:9b:1f:18:
                    94:27:f9:b0:6f:9a:d1:66:df:de:a6:3e:81:54:33:
                    50:a4:b0:79:f5:d8:c2:3d:0c:a4:dc:a1:78:01:45:
                    84:72:99:47:9d:84:6d:74:ff:b2:07:94:f2:7a:e8:
                    74:48:2d:23:e2:3c:0c:fc:3a:7c:fd:f9:43:65:3a:
                    fb:8e:e6:2a:b7:db:59:d8:3b:3f:5a:b0:b1:d4:58:
                    3d:9a:28:86:cd:7b:26:47:9c:41:a6:4e:3f:65:3f:
                    cc:4f:cb:75:ff:1a:f8:d2:07:35:d4:91:4b:6d:fb:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:80:FA:0F:4D:79:B9:10:4D:F6:7F:77:0F:6A:86:95:6A:65:6E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5064740-d0d7-311f-9959-549a93d38309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.40.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:3b:e7:ee:5b:16:ec:e1:f8:29:35:11:97:13:4f:1d:79:
         5a:88:3b:ef:74:19:77:7b:a9:28:09:b1:29:1f:d6:c3:03:f4:
         ac:72:4b:84:b3:af:91:a1:86:35:1e:21:fe:db:eb:65:5f:eb:
         3f:70:e1:15:4e:47:6a:7b:1a:83:91:2d:b6:45:51:ed:45:1e:
         d7:07:e3:a3:41:be:e3:1a:bc:27:10:70:69:d4:c6:73:3b:e2:
         ec:ba:0b:d2:d2:5f:ec:e6:9f:49:12:e2:de:b9:ec:67:99:30:
         16:0c:e1:00:48:a4:7b:6f:ab:ec:43:96:8c:29:12:f0:38:e1:
         d3:cf:8c:77:64:0d:f0:8d:25:c5:da:8a:dc:8b:64:f1:01:33:
         e4:ce:31:14:ae:70:1c:46:d5:82:71:d5:8b:67:e5:8f:83:0f:
         a7:59:f7:5f:69:4d:e9:da:ac:4c:cd:16:3b:a3:9a:85:d3:22:
         e5:4a:4e:74:f4:fb:16:66:9f:b5:db:d6:16:7e:2d:90:af:90:
         b0:50:7c:db:1a:b6:8d:b5:f3:28:10:c0:d7:39:65:0e:9a:e3:
         79:0c:d2:27:7a:35:7a:08:1b:46:63:66:04:bc:97:96:4c:ea:
         11:35:3f:b2:26:35:4e:b7:74:12:54:b8:dd:2a:78:88:95:c0:
         38:dc:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:33 2025 by rpki-client