Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5a55bd5-652a-3f53-8a7a-1b8798b37f6b.roa
File:                     d5a55bd5-652a-3f53-8a7a-1b8798b37f6b.roa (raw, json)
Hash identifier:          DyXuqIfu0IQCEOrVFqNOQX0Qbjo0UA4pyopBaG4sNhY=
Subject key identifier:   A3:D0:31:4E:3D:08:EF:67:10:17:9C:07:2F:FD:48:A7:C4:23:18:4C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBBBD44554752ECACF62BC900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5a55bd5-652a-3f53-8a7a-1b8798b37f6b.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        162.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bb:bd:44:55:47:52:ec:ac:f6:2b:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=a9827b4e-fe2c-450f-9eb6-af436ee8c967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:3e:1c:26:52:5d:02:52:3c:17:40:ad:db:
                    e8:35:03:8d:05:48:1b:e8:48:43:48:6e:2a:27:6c:
                    5d:3a:19:f5:53:fa:e6:9e:c8:52:48:c1:b4:04:e6:
                    08:fb:b5:4b:94:b4:0b:6d:b1:74:5a:53:46:4d:59:
                    50:96:62:d6:f9:3d:e4:bd:7b:be:b0:8f:c5:e3:97:
                    d5:20:8b:73:3f:68:c5:55:93:ee:d7:01:e9:bf:00:
                    67:50:5e:de:21:25:9a:98:55:28:71:98:53:97:0b:
                    be:c6:fc:50:0d:9d:bc:c7:71:f9:dc:3e:d6:01:ea:
                    a0:29:de:d6:e6:6d:4f:0e:e0:1c:90:47:71:f8:84:
                    f5:77:ea:47:1a:a7:ba:60:f3:fb:d1:92:07:b8:d7:
                    0c:34:f9:55:f4:17:7d:c3:7c:90:49:02:79:a2:45:
                    ec:27:c0:32:23:0a:ba:ea:b0:d1:a1:7d:9a:af:df:
                    ef:dc:d3:04:bd:61:56:ff:f1:0e:c8:c8:ad:32:73:
                    aa:c3:c7:b2:31:3b:79:73:d7:de:4e:ce:ff:a9:d7:
                    d4:8b:6f:47:15:22:c9:4a:2f:2f:c1:82:7c:a6:05:
                    f4:37:cc:0d:49:89:1b:2a:9d:99:c3:f7:80:6f:d6:
                    27:8c:20:b8:ab:98:6e:87:7f:48:b5:d2:55:2e:d0:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D0:31:4E:3D:08:EF:67:10:17:9C:07:2F:FD:48:A7:C4:23:18:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d5a55bd5-652a-3f53-8a7a-1b8798b37f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:48:c8:08:36:be:86:9e:44:3d:79:f8:da:ab:a4:32:51:48:
         d8:57:cb:fc:4b:cc:c2:bb:53:eb:2c:0e:de:67:56:bd:7d:5b:
         21:cd:92:b7:7f:97:7e:b0:7a:0c:fc:93:17:e5:b5:15:2d:87:
         1f:06:8d:6e:aa:61:4b:18:53:3e:b5:8a:ad:a5:4f:89:38:9f:
         b6:97:bf:d4:cd:17:17:96:f0:95:11:4b:3d:70:d4:ba:67:3f:
         2b:57:a1:fc:f0:98:22:e3:4e:1a:54:70:04:b7:2e:78:d4:a0:
         50:84:2f:5d:ca:57:2d:0e:df:82:cd:f5:6f:a8:6f:49:d6:f1:
         14:63:d8:b1:96:0f:10:06:13:08:92:1e:4c:6f:59:fd:92:13:
         1c:68:52:59:bf:58:20:2a:1f:b2:83:24:8e:16:cd:c1:6c:cb:
         cf:78:10:3b:0e:db:b5:74:e8:0c:1d:16:5d:43:32:0c:af:16:
         65:8e:fb:38:d8:ec:6b:a2:81:58:9f:92:74:f7:44:51:c8:42:
         42:ee:c6:4e:4d:bd:01:1e:bf:d9:33:0d:19:4b:5b:15:a9:c0:
         cd:c2:f5:20:49:7e:50:66:53:84:59:bd:5f:a0:9b:27:90:f7:
         3d:16:b7:21:79:e9:69:f2:0b:92:50:10:90:3b:1d:a9:02:84:
         10:1c:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:54 2025 by rpki-client