Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6b47e8f-2210-3fed-87c3-afec8ed95bbc.roa
File:                     a6b47e8f-2210-3fed-87c3-afec8ed95bbc.roa (raw, json)
Hash identifier:          dOQBTS6ZJo1wOE3sbiaCPj2ejnD5OMyBnYJuxKOVjS8=
Subject key identifier:   CE:49:DC:24:0C:59:16:69:9E:5B:BD:E7:2D:7B:9B:EF:F2:94:61:5C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D648120A8F516F978274FD080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6b47e8f-2210-3fed-87c3-afec8ed95bbc.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 03 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.11.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:64:81:20:a8:f5:16:f9:78:27:4f:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : May  3 04:00:00 2022 GMT
        Subject: CN=b08b0200-bb8a-4b68-a682-dbf48d4e43b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:62:74:0a:1b:a1:50:48:a9:ab:11:6a:0f:
                    7d:ec:df:8d:e9:b1:f2:22:25:74:15:a1:e9:f0:d5:
                    6f:9c:37:a1:70:1b:f2:da:9f:57:f8:1d:ca:b0:5f:
                    d6:d3:2d:a0:82:fa:da:d3:ad:03:35:34:39:ab:32:
                    2d:61:e9:53:82:dc:61:ce:4f:97:92:61:52:44:ba:
                    b8:c9:37:06:85:f2:4d:0b:e5:76:6d:05:f6:37:fe:
                    33:3c:76:9b:e8:8d:08:42:4c:50:c7:30:1b:43:95:
                    00:57:b5:d4:60:f6:db:2f:5d:ae:8e:ef:62:c4:bd:
                    3f:8b:0a:46:0e:a8:9d:f0:bb:2e:d9:16:5b:a8:47:
                    7b:77:5f:81:42:af:ea:40:c9:2d:bd:58:96:4d:bf:
                    29:29:5f:0d:30:85:17:56:91:c4:ed:b3:96:ee:e9:
                    44:d9:aa:92:bc:d5:7a:e9:fa:3a:24:71:1b:ef:17:
                    41:c7:cc:5c:e1:85:8c:80:0d:c9:84:b5:ce:21:d6:
                    43:4a:58:6b:bb:69:46:3e:96:b9:ff:ac:56:7d:0d:
                    18:e9:7e:33:0b:e5:5e:50:2a:be:92:25:5e:b5:50:
                    3c:b4:c9:1c:cb:49:dc:4e:20:80:00:53:aa:e5:23:
                    47:61:2b:ea:76:61:ca:00:f5:51:d3:5f:b8:34:7f:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:49:DC:24:0C:59:16:69:9E:5B:BD:E7:2D:7B:9B:EF:F2:94:61:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a6b47e8f-2210-3fed-87c3-afec8ed95bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:71:72:7b:ab:62:12:41:bd:03:e3:ad:c0:8c:68:06:e0:5a:
         2c:ff:82:fd:5c:c1:9f:46:89:44:70:fa:1b:47:52:0d:93:11:
         74:ae:93:f6:e8:3b:c6:e5:e0:f9:9a:d8:44:46:c8:bc:45:d8:
         0d:58:c5:30:ab:fa:fc:33:25:b5:48:15:0a:09:1a:9f:ee:3b:
         66:f6:6f:15:15:e4:da:f1:d9:a0:e0:a9:41:d4:6e:d0:cb:23:
         cc:c8:97:81:ed:14:8b:32:49:88:0a:57:30:94:8e:95:a8:8a:
         9c:dc:2b:af:cd:d2:a7:d0:21:99:d7:c6:e2:74:46:2f:4d:16:
         79:b1:d5:be:e9:c1:54:80:bf:9a:f3:b7:ea:07:75:e3:eb:bb:
         54:13:6c:f2:22:cc:6c:69:9f:dd:34:ad:75:5c:5a:cc:62:22:
         c8:0d:58:a0:ff:90:9c:c3:a4:24:68:17:e6:87:a7:77:63:3a:
         52:f9:8c:14:83:1a:b5:8f:7c:43:1b:07:c5:13:a6:ca:af:c6:
         f8:0b:01:b8:00:7d:a1:c2:fd:f3:ba:b3:5a:8f:0c:e0:6f:cd:
         b8:9d:7a:1f:02:01:62:f1:9b:f4:23:bb:0e:6f:04:42:9c:68:
         ff:9c:77:cc:5a:eb:9b:dd:79:01:40:57:76:d7:5c:bf:f2:d9:
         8c:6b:08:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:07:39 2025 by rpki-client