Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be500385-e233-3d99-afb9-5ec0b9952ce9.roa
File:                     be500385-e233-3d99-afb9-5ec0b9952ce9.roa (raw, json)
Hash identifier:          NgtKeJ1zMg45O1HlRhahR13/7fuwKIDAdam434dEUg0=
Subject key identifier:   EA:26:41:51:FB:73:B9:CA:B9:E6:DD:E4:03:FA:B2:E1:26:A9:27:55
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA6F8DF0273A8CB812B744780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be500385-e233-3d99-afb9-5ec0b9952ce9.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        167.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a6:f8:df:02:73:a8:cb:81:2b:74:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=6b2be723-2a4b-4bae-9167-c69f0faa064d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:d3:d5:37:24:06:ce:a1:d0:b8:6c:e0:a8:
                    30:47:69:b7:bd:93:52:f6:71:32:0c:fc:f1:22:27:
                    88:11:c5:bf:81:65:b0:48:2e:ed:02:8c:8f:f7:3c:
                    e6:06:9b:e2:69:82:0c:23:63:d1:d9:b4:26:03:59:
                    be:32:ad:2e:35:55:b4:2c:34:eb:47:19:a8:f4:eb:
                    b7:c2:ed:1b:d4:34:f5:f4:76:dc:ee:7f:4b:d4:31:
                    37:70:54:4f:af:59:c6:9d:6b:e7:57:a2:ab:e6:4d:
                    34:21:e5:9f:e5:ea:91:09:f1:95:2b:03:a9:c3:25:
                    33:dd:40:59:7f:f7:cd:0f:e0:cf:26:c7:8e:fa:a9:
                    94:3a:08:ec:22:af:c6:ce:c1:9d:8c:e6:73:51:7e:
                    bd:50:cb:d7:26:40:29:54:de:68:31:8d:8d:92:2e:
                    c3:8a:60:22:44:8e:c2:88:42:ce:b5:65:07:cd:64:
                    ae:9b:54:5a:87:f2:94:d4:77:ba:60:b8:b6:9a:1e:
                    1d:69:e5:d9:ac:f9:a0:11:b6:a7:9e:6e:53:b7:8c:
                    c7:1d:dc:54:eb:a0:85:20:1f:01:5b:64:52:3e:1c:
                    24:08:d6:4f:34:21:b4:f5:24:a5:6c:8d:55:0c:55:
                    41:8c:97:06:49:06:e3:5b:71:89:a7:bb:5b:92:eb:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:41:51:FB:73:B9:CA:B9:E6:DD:E4:03:FA:B2:E1:26:A9:27:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be500385-e233-3d99-afb9-5ec0b9952ce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:5a:96:4b:68:ba:17:c1:81:ab:e0:86:ac:bb:89:37:37:
         73:5c:a7:c8:a1:83:aa:22:eb:7d:f4:b2:81:5c:ce:e6:8d:af:
         52:14:d3:21:df:b2:d7:9d:65:5e:7a:b3:be:83:35:1c:b2:cd:
         38:40:98:1c:59:10:12:85:d5:d2:2e:55:25:dd:18:96:eb:65:
         25:24:ac:5f:c2:62:e8:8d:78:72:ab:d0:84:4a:6f:69:39:c3:
         24:6e:9e:77:1e:35:31:1d:e1:16:1d:f6:d1:8a:1c:bb:b6:aa:
         37:06:d7:68:2e:8b:2f:80:84:d1:19:ea:94:ef:1b:a2:ea:90:
         ab:63:a9:f1:37:ba:66:28:cb:12:56:7a:5d:4a:4c:0c:8b:0e:
         d5:57:27:5c:86:73:84:be:12:17:14:ac:bf:a2:a3:09:b9:a3:
         18:f5:14:a3:dd:c0:5c:48:43:93:b4:61:b1:ca:61:ad:a2:0d:
         bb:75:ca:5f:8a:4a:2e:06:23:5f:ab:74:8d:37:b6:23:a6:12:
         e2:a1:c4:4b:2f:a1:6b:1b:af:6d:28:1d:26:0e:b1:24:be:f8:
         1c:42:71:51:67:b0:b4:30:99:00:3a:09:9a:4d:72:56:87:2c:
         ce:f1:1d:9b:65:cf:62:0c:ab:d4:67:95:04:3c:a7:df:06:47:
         27:ff:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:29 2025 by rpki-client