Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c131a534-e73e-38bc-b5c3-e72b9d108b11.roa
File:                     c131a534-e73e-38bc-b5c3-e72b9d108b11.roa (raw, json)
Hash identifier:          MtaAyMEMrTStvnuXXfw89gkuHBgDOmGGh2+VeX9pJ+8=
Subject key identifier:   FB:64:70:C1:9B:79:52:A2:3D:B6:E3:B8:91:B6:83:F5:E7:F8:A8:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D8168471564D28351C5E009C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c131a534-e73e-38bc-b5c3-e72b9d108b11.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        134.63.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:68:47:15:64:d2:83:51:c5:e0:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=6f8ace01-3f44-4c64-9703-15220a695a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:c5:38:4d:fe:fe:f3:38:a8:8e:60:dd:d9:
                    ee:c9:fb:09:fb:58:7f:17:64:6b:6f:25:38:56:c5:
                    b5:a1:9f:12:ea:98:13:fe:4e:93:d0:2c:bf:4e:37:
                    0e:6b:05:87:ca:fc:9c:90:ad:e6:39:05:4c:7c:e5:
                    95:9c:fc:6e:14:ec:09:31:69:5e:ce:71:07:3a:be:
                    57:a3:39:4b:82:96:49:40:bd:ac:91:1c:38:de:08:
                    d0:84:a2:e1:58:4e:b4:30:5e:30:85:38:38:6f:e6:
                    0a:3f:a1:26:77:4b:e2:54:25:d7:b0:38:96:c1:94:
                    25:67:6c:26:ee:b6:d2:3d:9e:e9:e4:ac:cd:65:f6:
                    c6:25:89:b5:c5:13:7a:18:88:df:05:fb:df:db:6a:
                    c8:bd:44:8c:d4:26:8d:05:32:ab:29:b2:39:ff:70:
                    95:c7:3a:7c:fe:8a:46:ba:c2:93:65:49:88:3d:d0:
                    f6:dc:94:a0:c9:a5:88:e6:92:82:fd:5e:c2:dd:f0:
                    1e:c1:fb:88:99:32:50:db:eb:13:9b:40:99:5a:4d:
                    46:7e:c5:46:7f:67:8c:58:25:03:23:e5:c5:76:53:
                    0c:e5:67:2b:3f:a6:98:76:2e:e3:85:eb:f2:6a:a1:
                    10:e8:d9:d7:36:57:f1:31:11:75:69:8b:74:3a:80:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:70:C1:9B:79:52:A2:3D:B6:E3:B8:91:B6:83:F5:E7:F8:A8:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c131a534-e73e-38bc-b5c3-e72b9d108b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:91:d3:f1:55:76:b8:15:d7:26:37:0e:a8:e0:82:3d:f2:f1:
         59:af:ec:af:35:67:b4:d8:7f:3d:b3:0f:b8:ed:11:d3:70:08:
         0f:50:76:b9:fb:35:ba:66:13:a9:b1:7a:c0:47:c8:8d:0c:6f:
         fc:3e:02:66:b8:15:fb:85:0e:1e:2f:16:db:9d:b6:91:2e:6c:
         9a:4f:4e:6f:38:73:9d:ba:1a:76:f6:ca:d5:c4:1b:27:1d:1d:
         ea:79:4f:07:47:cc:ae:18:f5:cb:ee:c1:57:b7:e0:c9:4b:ff:
         b0:d5:a9:93:c1:a6:d0:47:6d:cf:b2:09:aa:fd:56:86:08:fb:
         68:51:73:f6:8e:9b:32:c5:f1:a8:e3:7a:6b:97:2c:12:15:c3:
         07:dc:43:f4:b0:ed:92:7c:30:2e:a0:8e:60:8d:39:39:c1:83:
         d6:1e:f2:78:2f:79:d7:5a:7c:8a:96:e4:56:d2:48:1c:70:77:
         e9:41:1e:83:0b:8d:0e:1d:8b:fc:62:0d:d7:e3:dc:f1:6c:f2:
         8d:1d:97:3e:bf:07:27:ef:86:df:a5:04:f5:e8:8a:f1:fe:38:
         01:99:57:a4:71:34:24:1d:87:32:68:ac:1d:4f:a0:29:14:15:
         c9:00:cf:9e:a5:92:12:05:14:df:d1:59:ad:2b:a3:d8:51:4f:
         b0:a1:de:73
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2BaEcVZNKDUcXgCcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NmY4YWNlMDEtM2Y0NC00YzY0LTk3MDMtMTUyMjBhNjk1YTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6srFOE3+/vM4qI5g3dnuyfsJ+1h/F2RrbyU4
VsW1oZ8S6pgT/k6T0Cy/TjcOawWHyvyckK3mOQVMfOWVnPxuFOwJMWleznEHOr5X
ozlLgpZJQL2skRw43gjQhKLhWE60MF4whTg4b+YKP6Emd0viVCXXsDiWwZQlZ2wm
7rbSPZ7p5KzNZfbGJYm1xRN6GIjfBfvf22rIvUSM1CaNBTKrKbI5/3CVxzp8/opG
usKTZUmIPdD23JSgyaWI5pKC/V7C3fAewfuImTJQ2+sTm0CZWk1GfsVGf2eMWCUD
I+XFdlMM5WcrP6aYdi7jhevyaqEQ6NnXNlfxMRF1aYt0OoAxKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPtkcMGbeVKiPbbjuJG2g/Xn+KigMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzEzMWE1MzQtZTczZS0z
OGJjLWI1YzMtZTcyYjlkMTA4YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhj8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMZHT8VV2uBXXJjcOqOCCPfLxWa/srzVntNh/PbMPuO0R03AID1B2ufs1
umYTqbF6wEfIjQxv/D4CZrgV+4UOHi8W2522kS5smk9ObzhznboadvbK1cQbJx0d
6nlPB0fMrhj1y+7BV7fgyUv/sNWpk8Gm0Edtz7IJqv1Whgj7aFFz9o6bMsXxqON6
a5csEhXDB9xD9LDtknwwLqCOYI05OcGD1h7yeC9511p8ipbkVtJIHHB36UEegwuN
Dh2L/GIN1+Pc8WzyjR2XPr8HJ++G36UE9eiK8f44AZlXpHE0JB2HMmisHU+gKRQV
yQDPnqWSEgUU39FZrSuj2FFPsKHecw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:30 2025 by rpki-client