Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4c0d613-b5e8-3e15-b328-b2a51dcabf5d.roa
File:                     c4c0d613-b5e8-3e15-b328-b2a51dcabf5d.roa (raw, json)
Hash identifier:          HNfNiCrAa8KV3f2E4R/2RyzyE1Q0z/UOMm/I/ctp/kI=
Subject key identifier:   94:C2:D2:E0:2E:D5:7E:F3:69:8F:31:85:D0:7D:75:50:F3:C5:71:11
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBF32FA412D5520D1F51164C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4c0d613-b5e8-3e15-b328-b2a51dcabf5d.roa
Signing time:             Sat 30 Jul 2022 12:00:00 +0000
ROA not before:           Sat 30 Jul 2022 12:00:00 +0000
ROA not after:            Sun 04 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.240.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bf:32:fa:41:2d:55:20:d1:f5:11:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 30 12:00:00 2022 GMT
            Not After : Sep  4 04:00:00 2022 GMT
        Subject: CN=98521533-7938-459b-9508-f9937256d50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:05:08:73:12:da:c8:1a:14:09:f4:26:4a:
                    f0:97:e5:23:60:1a:43:94:27:03:fd:2a:c5:14:7f:
                    c9:72:38:1f:2a:8a:67:55:d3:78:0b:41:e6:a1:e5:
                    50:93:79:6a:6e:cc:58:c4:11:ca:91:80:3e:97:43:
                    93:b1:44:ff:ae:b9:f4:9d:aa:61:9d:d1:b0:bc:08:
                    12:ad:75:c4:8d:5c:09:34:d5:05:27:22:e6:6a:a0:
                    5b:2d:b3:9c:8a:38:67:9f:a2:a1:1b:71:c6:3e:82:
                    38:28:57:1a:02:76:75:01:46:01:5d:66:f8:78:39:
                    e6:8f:ea:22:5d:df:ae:2b:d8:f7:e8:32:ef:5e:4a:
                    38:a2:e3:8d:22:67:92:f5:85:b8:32:04:74:08:d4:
                    16:21:60:27:77:6b:e4:b0:94:69:15:ce:8c:6d:1f:
                    a3:0d:15:ba:5e:98:2e:05:cc:a2:87:30:85:3b:9c:
                    ca:38:cc:50:61:e4:22:bc:94:22:28:b5:27:d6:68:
                    a5:ca:3e:97:2d:96:14:05:5c:72:fa:c5:4d:85:cf:
                    5f:25:a1:96:33:71:6d:bf:44:8f:f6:29:b8:43:09:
                    01:7f:86:fe:67:3c:0b:ac:6a:6b:b1:b7:0b:f2:64:
                    6d:5e:d2:5c:cc:6c:a1:9b:3a:06:32:80:5e:e2:df:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:D2:E0:2E:D5:7E:F3:69:8F:31:85:D0:7D:75:50:F3:C5:71:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c4c0d613-b5e8-3e15-b328-b2a51dcabf5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.240.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:a4:1a:e0:a3:12:72:15:02:ef:9b:99:6f:0f:13:92:22:
         db:c9:f0:b6:81:49:a2:c5:0f:90:16:87:4b:02:52:40:88:83:
         d7:e5:71:10:15:b5:d7:72:13:f7:cc:4b:ab:4e:5d:34:df:7d:
         41:9c:cf:f4:68:65:26:c1:4b:0e:bd:20:e3:ea:fc:f9:35:d0:
         95:87:96:b8:e1:87:f2:a0:bc:b8:61:8e:47:a4:65:94:36:93:
         33:b1:28:e1:42:99:d7:38:1d:a6:5a:53:22:60:f9:e1:cf:9a:
         5e:4b:f6:6d:05:a8:9d:16:ca:64:7c:cc:5b:6f:8d:06:29:33:
         ec:77:07:61:51:dc:e8:f7:1c:02:5f:b7:aa:d7:4b:64:ea:4e:
         a4:d5:31:49:4e:48:eb:6a:0c:53:86:51:4c:8f:b6:d7:6c:e0:
         6b:16:64:b4:e2:cf:58:1b:0c:78:0c:7e:35:90:c7:d0:ed:cd:
         ae:d8:bd:a6:13:f3:13:71:9a:92:ff:40:92:cd:dd:d3:cb:9e:
         48:6e:28:be:e0:63:5b:41:b8:62:66:85:ed:38:ad:d9:44:e7:
         b7:92:ad:cf:ea:29:e9:f0:05:40:cf:8f:f8:3b:06:b8:ff:16:
         2d:dc:2c:a0:3d:e2:f9:e7:96:8d:44:43:ec:8b:f3:2a:bc:b4:
         37:c5:52:c3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6/MvpBLVUg0fURZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDczMDEyMDAwMFoXDTIyMDkwNDA0MDAwMFowLzEtMCsGA1UEAxMk
OTg1MjE1MzMtNzkzOC00NTliLTk1MDgtZjk5MzcyNTZkNTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjMFCHMS2sgaFAn0Jkrwl+UjYBpDlCcD/SrF
FH/JcjgfKopnVdN4C0HmoeVQk3lqbsxYxBHKkYA+l0OTsUT/rrn0naphndGwvAgS
rXXEjVwJNNUFJyLmaqBbLbOcijhnn6KhG3HGPoI4KFcaAnZ1AUYBXWb4eDnmj+oi
Xd+uK9j36DLvXko4ouONImeS9YW4MgR0CNQWIWAnd2vksJRpFc6MbR+jDRW6Xpgu
BcyihzCFO5zKOMxQYeQivJQiKLUn1milyj6XLZYUBVxy+sVNhc9fJaGWM3Ftv0SP
9im4QwkBf4b+ZzwLrGprsbcL8mRtXtJczGyhmzoGMoBe4t/x2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJTC0uAu1X7zaY8xhdB9dVDzxXERMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzRjMGQ2MTMtYjVlOC0z
ZTE1LWIzMjgtYjJhNTFkY2FiZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMENvAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMvakGuCjEnIVAu+bmW8PE5Ii28nwtoFJosUPkBaHSwJSQIiD1+VxEBW1
13IT98xLq05dNN99QZzP9GhlJsFLDr0g4+r8+TXQlYeWuOGH8qC8uGGOR6RllDaT
M7Eo4UKZ1zgdplpTImD54c+aXkv2bQWonRbKZHzMW2+NBikz7HcHYVHc6PccAl+3
qtdLZOpOpNUxSU5I62oMU4ZRTI+212zgaxZktOLPWBsMeAx+NZDH0O3Nrti9phPz
E3Gakv9Aks3d08ueSG4ovuBjW0G4YmaF7Tit2UTnt5Ktz+op6fAFQM+P+DsGuP8W
LdwsoD3i+eeWjURD7IvzKry0N8VSww==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:32:41 2025 by rpki-client