Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a508678f-ac24-3326-8da9-2e70d9de4b38.roa
File:                     a508678f-ac24-3326-8da9-2e70d9de4b38.roa (raw, json)
Hash identifier:          wpxbrbqqIwSjTRWJT84x9E9T0tBVWnA0/Ni8i/C0P7o=
Subject key identifier:   64:2E:21:63:03:E5:88:7C:D5:FD:75:BC:A3:E1:6C:7D:68:4E:EF:9B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBE404756E105ADD6E6315800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a508678f-ac24-3326-8da9-2e70d9de4b38.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        150.126.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:40:47:56:e1:05:ad:d6:e6:31:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=5967dccd-1a62-496a-82e2-a77fab2c8967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:2f:12:74:fc:eb:59:7a:47:73:1a:81:b4:
                    be:24:0a:68:bf:9c:b3:37:a6:ff:9f:65:86:9c:fa:
                    e9:b7:26:39:48:d9:0a:97:cb:b0:ec:83:47:83:fb:
                    8c:56:e8:6c:84:6f:bc:aa:00:f3:28:b6:f0:06:b5:
                    a2:b9:38:ef:43:d7:49:81:ac:25:c7:21:9e:08:7e:
                    14:19:b2:04:26:e6:ef:5f:03:aa:05:32:8f:75:47:
                    f7:0a:6e:93:d4:c9:20:2d:a7:41:98:80:93:b9:18:
                    de:42:7a:e2:37:93:dd:2e:44:96:bd:a9:8b:d7:41:
                    76:14:93:6e:cb:42:42:b4:e3:e6:d8:cf:ae:90:14:
                    d6:dc:bb:8a:48:da:3a:97:0c:91:02:af:a2:c0:79:
                    47:fb:2d:e9:67:5b:14:37:37:89:4b:63:1c:a4:ff:
                    7f:0e:a6:79:2f:8f:55:5e:ea:18:45:96:59:5a:1d:
                    a8:df:23:62:15:8b:2c:c1:1d:aa:5a:28:2e:d9:d7:
                    59:58:d3:ae:6b:f3:96:d1:84:90:78:02:21:49:f8:
                    2a:4d:25:84:34:f0:70:c3:88:78:b6:6f:3c:ed:91:
                    92:99:fd:d8:9e:d0:19:e9:86:b9:e6:23:dc:77:86:
                    1b:9e:fb:f9:66:df:a0:86:c3:6c:5e:cb:71:8b:a1:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:21:63:03:E5:88:7C:D5:FD:75:BC:A3:E1:6C:7D:68:4E:EF:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a508678f-ac24-3326-8da9-2e70d9de4b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:be:18:b2:b5:2d:6f:08:3f:01:81:ab:a8:89:f5:d7:04:
         a2:8e:e4:76:ba:58:23:79:7e:a9:68:78:68:13:ef:16:a3:56:
         83:b3:d8:25:96:8c:58:b5:0e:d2:df:37:14:05:3f:95:45:4e:
         6f:cc:dc:a7:79:d1:5d:61:8c:5e:14:aa:07:7a:d9:a5:8e:4a:
         d5:74:4f:5a:63:11:7a:94:f5:6b:2f:f7:78:dc:6e:f8:a2:53:
         e2:73:6c:d3:38:33:65:fb:22:d4:c7:30:07:9c:b1:0d:88:1e:
         21:ad:76:f1:72:ad:64:69:3e:49:1f:0b:e8:9f:a2:ae:d0:ca:
         aa:81:93:83:13:fd:0d:84:35:6a:7b:08:20:20:aa:0d:9f:b6:
         71:4e:02:d4:0f:ce:15:b6:1b:ab:15:df:4f:64:5a:99:53:2b:
         91:7d:29:8c:8b:a0:7b:79:fe:ae:06:b8:4b:d8:47:2e:b7:46:
         71:30:c4:87:c5:55:c7:8a:f5:ef:c7:74:03:b6:7a:e0:f7:3b:
         56:81:97:11:6f:ed:8e:c2:e6:07:f6:cc:b9:66:38:39:fa:5c:
         d4:7a:ef:bd:6b:ee:10:fb:ea:28:34:6f:4e:28:7f:7f:61:9a:
         5d:0b:28:52:48:62:b7:ef:a7:42:d9:ec:67:2b:ff:e2:f6:cc:
         68:91:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:49 2025 by rpki-client