Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d577d631-2577-3bab-a23d-aec1e2381585.roa
File:                     d577d631-2577-3bab-a23d-aec1e2381585.roa (raw, json)
Hash identifier:          IE11lQQqksSmd4WF2B4v/Dbo7cvK4oGG5iexsXhAQzI=
Subject key identifier:   7C:A7:FF:B1:0B:56:79:C1:4F:87:C1:ED:F8:24:D2:11:96:32:CC:E5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408FD977C358198577462F9A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d577d631-2577-3bab-a23d-aec1e2381585.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        149.80.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:d9:77:c3:58:19:85:77:46:2f:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=0937f9a2-b320-4087-8073-ff8f656df6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:1c:e8:7c:f5:36:94:d7:1c:76:72:a2:19:
                    f0:2e:69:f4:db:42:d5:51:c3:e9:23:e7:c0:d9:be:
                    1f:5c:34:6e:7a:f0:11:cd:c0:3d:5e:ec:be:1c:aa:
                    50:d1:33:4e:df:f4:cf:f5:1e:54:d6:d3:6c:2a:72:
                    c1:d7:0e:45:f9:2b:c4:df:a6:cd:f7:59:32:5b:d2:
                    df:b3:90:9d:06:0b:d3:58:f5:39:0e:9a:59:68:79:
                    68:8e:7b:17:6b:3e:db:6d:44:79:bf:4b:1a:6e:a0:
                    50:ff:52:c6:57:d0:c6:6c:c1:fd:ec:e6:04:58:af:
                    5a:30:ee:3d:db:f0:1e:83:e9:bd:87:2c:a0:f1:5a:
                    9d:cd:64:7b:fa:8d:ad:ef:be:1a:93:56:24:82:b4:
                    ee:6e:e8:c9:ae:0c:78:7f:24:a0:3f:e2:dd:bd:56:
                    02:f5:2b:58:89:43:de:92:cf:1d:e0:a7:92:9d:44:
                    91:ab:f8:35:97:3c:f9:95:d8:91:a2:05:6d:cc:ac:
                    2a:de:2c:e9:a3:32:75:c1:22:2f:92:50:28:db:24:
                    34:60:cd:ec:fb:c0:07:e5:4c:52:6a:31:57:a5:c8:
                    1b:fc:a7:0b:5b:8a:97:a4:e4:95:6a:e9:71:ca:07:
                    37:81:41:ab:cb:dc:73:8f:09:91:4a:cc:d0:06:1f:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:FF:B1:0B:56:79:C1:4F:87:C1:ED:F8:24:D2:11:96:32:CC:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d577d631-2577-3bab-a23d-aec1e2381585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:e8:97:d8:cb:0c:c6:49:60:cf:a8:02:b8:84:00:5d:2f:
         80:2a:a9:d0:7d:a3:db:d1:05:90:46:86:49:50:72:3a:13:26:
         64:2c:5f:ff:eb:ac:7f:31:f5:49:bd:1c:f3:9a:5c:28:ab:e8:
         76:10:2c:e2:40:bf:b6:11:32:57:cb:76:c2:ce:26:09:3e:b8:
         ba:58:dd:c2:57:2e:c9:7c:3b:61:e2:f1:2e:26:36:37:ad:93:
         98:d3:a8:ed:b2:f6:ea:10:93:e5:f1:19:c9:ee:a1:9c:5a:a1:
         71:9b:37:50:a0:ad:6e:c5:ab:b6:a0:e9:81:8e:39:7d:7a:bb:
         49:d6:6e:47:80:f9:5b:45:56:55:79:30:0e:1e:5d:ac:6d:ef:
         16:39:e2:0f:29:37:6f:5e:93:70:87:b3:fb:42:44:b2:e0:58:
         a4:f1:31:7a:5a:6c:56:98:18:72:ec:c8:10:d1:ac:49:4b:22:
         c6:70:ee:64:70:d9:00:23:e9:46:d2:2f:ae:cb:0c:8a:b6:ed:
         33:9c:e9:ae:79:25:07:b7:26:c3:0b:13:bc:e1:fb:58:0f:2c:
         6c:e8:5c:fc:47:f6:f4:6f:a9:73:8f:35:c9:c6:b4:10:b2:78:
         78:c6:c1:d1:8f:79:01:f8:f9:8e:48:b6:5b:69:e1:0c:f0:59:
         18:d3:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:04:23 2025 by rpki-client