Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0a46650-8ce6-3ed7-b388-af82132368f0.roa
File:                     e0a46650-8ce6-3ed7-b388-af82132368f0.roa (raw, json)
Hash identifier:          aH7No5ej8ymAF5lbE0W5n6vGKHGXr4gej//mGclXHm4=
Subject key identifier:   FC:29:80:7A:EF:71:6F:70:15:C9:A0:BE:20:08:8C:8B:E4:87:0B:6B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858407DAC51B524D14E7C1A211F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0a46650-8ce6-3ed7-b388-af82132368f0.roa
Signing time:             Fri 06 Jan 2023 12:00:00 +0000
ROA not before:           Fri 06 Jan 2023 12:00:00 +0000
ROA not after:            Sat 11 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        148.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7d:ac:51:b5:24:d1:4e:7c:1a:21:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  6 12:00:00 2023 GMT
            Not After : Feb 11 05:00:00 2023 GMT
        Subject: CN=a1e1776b-6894-4245-8e3a-8e49f4c6ea02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:3d:99:18:47:42:01:a2:69:40:97:a5:aa:
                    4e:d0:d1:4a:68:1a:f0:9b:a4:bb:91:20:15:e9:53:
                    1a:48:7b:b3:af:3b:13:4c:91:1f:ee:6a:e6:a3:74:
                    fd:32:db:87:63:b0:1e:12:f3:b2:8b:45:59:56:ac:
                    0a:4a:28:dc:df:38:23:b6:6f:ba:1c:4e:27:13:d1:
                    ad:80:9b:d8:99:3c:ed:d3:b6:43:8a:64:93:ab:e8:
                    c0:23:48:67:3b:24:f7:0d:28:63:90:e6:50:f8:54:
                    32:f0:98:8a:07:d2:c3:74:9f:c9:e8:fa:ee:e6:51:
                    d6:96:18:6f:eb:3a:96:00:28:dd:45:1d:31:fa:ff:
                    77:4c:76:18:ba:04:3c:01:ee:e8:b2:90:f1:65:e0:
                    f3:8e:19:45:74:cc:c8:c5:09:f4:d4:fc:c5:18:0c:
                    44:2a:bf:38:0b:46:dc:21:73:8a:b7:58:ab:43:e8:
                    4a:df:ad:e3:78:1b:dc:45:20:a8:4b:62:e1:f3:6e:
                    41:88:7c:1a:bf:77:55:88:28:f3:45:1e:10:3a:cd:
                    e3:13:1d:cb:f3:29:4a:28:7a:08:b1:ee:76:c1:2a:
                    c5:9a:4f:8d:2b:89:3e:40:de:d5:86:27:26:45:a4:
                    1b:18:c4:33:2e:bc:e1:67:a8:c3:ea:5e:51:51:b2:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:80:7A:EF:71:6F:70:15:C9:A0:BE:20:08:8C:8B:E4:87:0B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0a46650-8ce6-3ed7-b388-af82132368f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:49:ed:81:4e:dd:76:e9:d6:8a:e0:79:c8:a5:98:c4:e4:88:
         63:65:d0:46:16:5e:27:4d:06:a5:53:52:ae:3b:a1:a7:c8:84:
         06:a6:54:2d:54:0b:e5:50:ac:31:06:0d:16:8f:5a:07:a0:fa:
         f2:34:2e:48:61:9c:39:24:4a:f6:a9:f3:61:f7:4e:ce:d4:db:
         10:f5:c7:2f:01:5b:4f:9f:80:74:a7:db:27:16:98:86:f2:75:
         38:61:4f:54:7d:f0:5b:a4:9d:23:7e:f4:42:b4:1b:9b:19:4f:
         cb:8a:a0:fc:48:10:ee:7a:72:1d:9f:07:43:2e:45:f5:ef:a1:
         d7:5d:a3:91:a9:e7:40:30:8d:c9:d4:b1:30:10:a5:25:1c:9b:
         86:19:3c:ff:a3:fc:93:dc:8e:4c:8a:93:f8:78:46:4d:1b:08:
         8c:d6:fb:d3:32:15:8d:e0:53:98:fe:39:3c:2d:b7:bd:c3:3e:
         a8:26:c0:66:0c:74:6c:d0:68:8f:11:67:74:5a:71:8c:b2:8d:
         44:3a:fa:99:d5:26:b6:b6:b8:2d:15:77:58:df:df:ac:9c:51:
         a7:6a:ba:cd:fa:47:5f:d9:0b:25:f5:c2:fb:54:d4:ab:a7:b5:
         97:01:8d:c2:9d:3b:90:51:f7:39:fb:34:bb:4c:1f:e1:95:94:
         25:69:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:18:14 2025 by rpki-client