Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac317161-6127-31d7-897f-7753fead20e7.roa
File:                     ac317161-6127-31d7-897f-7753fead20e7.roa (raw, json)
Hash identifier:          Edv/OVzUj1PtnjJutjETxHDexQlFJqtbgiGMK4A3LAM=
Subject key identifier:   06:2E:2C:A5:00:03:DC:F6:7B:31:D4:1D:AD:F6:1D:EC:5A:07:D1:8C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DA8C0E046E6F61860D5626480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac317161-6127-31d7-897f-7753fead20e7.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.94.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:c0:e0:46:e6:f6:18:60:d5:62:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=0ca0e5c8-9260-45ca-84bf-6651eaaeb7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:93:93:0b:e7:27:7e:af:0f:73:26:dd:7a:
                    f1:34:92:87:35:dd:2b:b2:53:7d:c8:49:45:3e:a0:
                    66:32:57:c7:b8:5c:70:30:8c:32:77:f4:14:be:f8:
                    49:b1:5c:21:73:de:c4:2a:60:ab:3e:ee:57:1e:19:
                    5b:9f:c0:12:4b:43:b7:5c:7e:5a:c9:ca:38:a1:7c:
                    db:2e:05:e9:07:58:97:9e:73:de:4c:89:29:93:06:
                    0b:bb:7c:32:e7:11:2a:d6:4d:cf:9b:e1:c6:bd:ff:
                    6c:68:18:5b:4e:84:f7:e3:1d:2c:d0:66:7b:73:b6:
                    55:74:53:e1:4a:7f:8b:5e:4e:a2:a3:e2:07:fa:2f:
                    65:22:64:43:1e:7d:dd:06:73:a6:cc:ef:5a:04:3b:
                    91:fc:bf:77:e2:79:a2:0c:69:df:fd:e0:7a:78:66:
                    c0:e2:9b:6f:2e:40:58:2a:be:a3:a8:24:82:df:92:
                    62:43:04:b7:5a:ad:1c:e6:e5:d1:89:82:7a:7c:e2:
                    10:85:e8:43:6e:47:bc:c2:03:03:fe:df:f5:a5:c1:
                    e2:f5:d5:ca:4d:66:e1:45:6c:a7:8f:2a:ec:1f:ca:
                    f4:b2:80:cd:74:72:7e:89:05:1e:73:35:a7:22:c1:
                    1e:71:32:f7:78:2a:48:98:c0:9a:c6:a0:ed:7e:9f:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:2C:A5:00:03:DC:F6:7B:31:D4:1D:AD:F6:1D:EC:5A:07:D1:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ac317161-6127-31d7-897f-7753fead20e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:df:a7:34:32:0b:5b:7f:23:42:c0:45:17:40:38:b5:0f:
         3a:00:36:d2:12:a1:61:ec:62:a8:00:1e:15:39:dc:07:1c:a8:
         08:f1:cc:77:0f:d6:23:9e:4b:3d:62:a7:8d:85:20:17:4c:64:
         f5:52:ba:20:cc:10:54:bd:5d:94:19:57:fa:32:90:97:2d:d3:
         19:3c:19:cc:65:4d:06:11:03:54:f3:ea:34:ad:5f:d7:54:c9:
         11:1c:59:af:34:9d:cc:4b:a1:70:45:32:e7:65:2b:46:0c:65:
         a3:6d:1c:40:39:6b:4b:91:ba:f3:3e:b5:39:ee:2d:37:d3:72:
         8d:24:79:04:04:b9:df:fb:65:2f:b2:36:88:91:36:a6:2d:33:
         51:21:ec:00:6d:7c:2b:33:9c:cb:7c:85:e3:ee:f1:03:e9:62:
         8f:10:3e:be:bb:7b:9e:54:2b:90:1f:40:55:a7:ed:07:8c:05:
         35:a1:87:0a:a7:20:cb:4b:d1:e8:0a:4a:0a:44:7c:db:55:ef:
         d4:06:99:8d:3c:96:4a:2c:5e:75:29:b6:b5:a3:a5:25:d1:d0:
         3c:04:10:21:9a:b6:2b:6f:e3:47:a7:13:c3:d7:d9:45:38:9b:
         0d:df:4f:e3:72:98:92:7b:1e:3f:68:74:26:1a:45:1f:1f:ac:
         36:36:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:40 2025 by rpki-client