Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc387b21-7dc4-3016-a13d-277a02039555.roa
File:                     dc387b21-7dc4-3016-a13d-277a02039555.roa (raw, json)
Hash identifier:          hfUchvZxU6vhU1GrLje28ulLXDznHwQugjNRDR3Xdvk=
Subject key identifier:   31:52:09:07:37:58:7F:30:82:8A:BB:9F:ED:77:4C:AC:56:AE:33:C8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584061A3BC3D967F5FE1C65B3A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc387b21-7dc4-3016-a13d-277a02039555.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        13.212.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:61:a3:bc:3d:96:7f:5f:e1:c6:5b:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=c5d10c63-1496-4489-84f1-d6440d656bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:96:e8:2c:f6:6f:0b:2b:73:9e:a1:f4:f0:
                    1c:62:33:11:90:85:9c:70:59:c9:f1:32:a7:21:1f:
                    f9:78:8a:69:ed:fe:15:c3:21:3b:71:53:7b:5a:15:
                    15:7b:3e:03:ad:37:01:a9:09:f7:7c:d9:47:d9:63:
                    e7:21:29:c3:55:4a:ef:01:ed:a1:83:67:5e:a0:3e:
                    69:6f:c5:31:4d:69:f5:2d:3d:10:91:58:ab:cb:4c:
                    8b:60:33:46:2e:b8:2c:6c:cd:6a:5d:10:a7:e7:40:
                    2c:88:a5:eb:ab:68:95:6f:87:7d:c2:27:37:e3:b3:
                    c9:f2:0e:21:9c:bd:b2:12:e6:48:05:b5:17:29:39:
                    a5:ee:4b:02:ad:e1:e8:c9:3f:fb:27:bf:4e:46:f3:
                    41:2a:03:c8:fe:be:c3:03:08:be:4d:ad:21:d3:b1:
                    57:95:4e:52:2f:6f:2f:91:b0:6f:88:db:0f:8c:20:
                    75:00:7e:9d:13:96:f0:07:0d:fa:5c:33:fb:d1:72:
                    38:42:b0:6e:fb:6a:0f:1a:68:58:87:3a:d6:69:dd:
                    9a:2c:a1:87:67:ca:7c:a0:f8:52:cc:48:06:5e:32:
                    ef:8a:84:86:66:95:94:16:04:3b:bb:f7:b4:6f:37:
                    b2:a6:a0:d3:5e:31:0d:c1:24:a4:0a:e3:0d:b7:c2:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:09:07:37:58:7F:30:82:8A:BB:9F:ED:77:4C:AC:56:AE:33:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc387b21-7dc4-3016-a13d-277a02039555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.212.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:e1:38:85:a1:11:f9:8d:d2:98:a4:e4:1a:9d:ac:d8:50:
         ae:0a:35:9a:b9:29:94:98:9c:c0:91:1c:24:88:b7:ba:f9:88:
         92:4a:5b:3a:0d:70:28:9e:01:1b:16:7b:e6:47:5e:0d:1d:7e:
         d4:f5:86:03:f6:06:82:28:83:0e:48:1d:6c:b0:e9:75:b2:fc:
         78:b9:57:15:23:03:f0:a4:08:7a:38:93:80:e4:3b:0f:d4:3c:
         13:98:9d:8c:4a:58:1d:c2:7d:f1:56:e9:97:0a:d7:42:53:1a:
         44:12:06:d9:ad:2f:3b:8d:93:84:8f:c5:b6:db:4a:58:9c:63:
         07:7f:72:41:11:c7:cb:12:b0:7d:fa:0f:ae:4e:e8:c7:78:c0:
         c1:d2:73:b6:03:43:cb:30:33:10:d2:24:01:be:76:15:2b:60:
         3e:ad:20:dc:25:46:18:76:e9:1e:e7:cf:bf:c7:ca:08:b6:c2:
         c4:64:2a:44:89:9f:6d:1e:18:e5:a8:63:1f:e4:43:4e:01:79:
         90:8d:1f:e5:63:01:a3:88:d8:73:37:4d:e0:87:4e:d0:a6:e9:
         5b:97:2d:d4:96:82:ac:47:c7:c7:1b:c6:f5:15:7d:11:2e:a5:
         35:7d:54:3b:c0:aa:80:dc:b8:67:28:9f:40:dc:c3:5f:a5:7a:
         a0:7b:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:17:00 2025 by rpki-client