Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7cd3846-19bc-3f30-9a9e-7cd7f76f465d.roa
File:                     c7cd3846-19bc-3f30-9a9e-7cd7f76f465d.roa (raw, json)
Hash identifier:          y1Hqmi6gRqHXv4fPjmQq957Whi8Jv38jwItVvwHXmUc=
Subject key identifier:   C0:07:EB:F7:A7:1B:07:1F:89:18:F1:C3:9A:C0:90:4B:B7:1F:15:67
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E0CD1A23ABE1DBB091CF58580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7cd3846-19bc-3f30-9a9e-7cd7f76f465d.roa
Signing time:             Fri 27 May 2022 12:00:00 +0000
ROA not before:           Fri 27 May 2022 12:00:00 +0000
ROA not after:            Sat 02 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        151.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0c:d1:a2:3a:be:1d:bb:09:1c:f5:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 27 12:00:00 2022 GMT
            Not After : Jul  2 04:00:00 2022 GMT
        Subject: CN=0ba5dba9-94d0-4475-85cb-f4902c6fc1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:38:53:d7:bb:9d:fa:d9:de:d7:b2:c4:33:
                    d7:ae:b5:36:c2:ef:84:12:9e:fb:e7:1c:a4:37:a3:
                    2f:6b:04:f0:8c:6c:9d:23:a0:f3:da:df:62:bd:a8:
                    a2:49:77:73:d2:15:c0:cf:8b:9e:93:6c:9e:39:78:
                    a0:a3:d9:78:ce:51:6d:06:5d:52:76:23:fe:7b:08:
                    6d:16:de:8d:05:2c:02:22:b2:5a:96:d3:69:1e:c3:
                    45:49:ec:ec:94:8d:c5:7e:e4:a7:f9:18:0a:4d:c0:
                    7f:34:2c:00:88:af:22:05:2d:3e:2d:76:15:0b:3a:
                    90:bf:d3:62:b7:3c:3b:57:53:3a:1f:85:b9:e0:6f:
                    f5:ca:da:79:c9:46:34:c1:46:7f:c8:c5:2a:6e:f4:
                    a5:9f:bd:8a:f4:30:fa:d6:f6:26:40:10:e4:68:b0:
                    62:85:61:e8:d9:09:f5:ad:7b:6d:03:e2:f8:99:bb:
                    cc:8c:53:81:57:6a:f5:dc:e5:91:cb:4e:e8:7b:b9:
                    87:99:39:b0:e2:8a:3e:9c:5a:cc:0a:dc:e2:41:8d:
                    2f:3e:e8:42:48:b0:0a:6d:df:2d:db:4c:1c:f3:bf:
                    1d:35:d5:fc:67:37:8b:af:aa:fe:94:19:72:42:09:
                    35:d3:8e:e7:37:c5:89:3e:9a:e5:6a:95:51:ba:76:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:07:EB:F7:A7:1B:07:1F:89:18:F1:C3:9A:C0:90:4B:B7:1F:15:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7cd3846-19bc-3f30-9a9e-7cd7f76f465d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:20:71:76:93:d2:48:91:3d:0d:3a:97:c0:21:ab:23:d9:
         9e:e2:e1:64:e7:f0:f6:ff:06:9d:23:de:08:32:11:fd:76:6e:
         98:63:97:4d:10:46:e0:cc:4b:6f:04:b7:66:ca:6a:d8:f6:db:
         ce:f5:2b:4e:04:d1:7f:c7:ad:af:44:b0:d8:79:11:59:8d:29:
         28:78:f1:15:0f:fa:4e:8b:39:b1:37:51:b1:61:e8:69:1d:91:
         02:ba:8b:bb:78:5e:84:4d:fa:8b:c5:2c:0c:09:1d:3f:bb:0e:
         4c:e5:df:16:fd:a8:99:52:c1:bc:2b:79:9a:7e:01:d5:9d:65:
         17:bf:5f:20:31:1d:1b:82:b4:7f:e0:b7:87:d5:af:7a:1a:f6:
         06:24:a2:0c:21:2c:ea:7c:3c:3e:6a:83:00:40:1f:30:d9:fc:
         1e:b3:ea:c0:32:c3:22:f5:6d:0e:42:b1:ef:5e:8d:30:cf:f6:
         37:59:98:77:0a:81:30:25:95:e7:df:f1:e2:83:88:36:69:c6:
         9b:ab:0e:bf:c5:15:b3:28:5c:07:16:7d:01:49:d5:29:8d:b9:
         af:53:d7:dc:8a:34:06:d9:6f:43:83:9d:9c:e3:ca:c8:13:a4:
         a3:ad:95:1a:c8:eb:2e:aa:6d:f1:3d:7b:4d:60:a0:0a:4e:3d:
         b4:31:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:52 2025 by rpki-client