Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e247cee9-de8c-3064-9adb-12283745de5d.roa
File:                     e247cee9-de8c-3064-9adb-12283745de5d.roa (raw, json)
Hash identifier:          Pugex2xG4E2yuy0PSAU0G+OBG5coQkJMMq53sdCrXJU=
Subject key identifier:   A5:A4:FF:9D:9E:33:0C:89:5B:53:D9:C4:83:F3:74:00:17:FB:33:B3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCB959B4D760A28DBB97B5000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e247cee9-de8c-3064-9adb-12283745de5d.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        35.96.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cb:95:9b:4d:76:0a:28:db:b9:7b:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=8f8532c6-eb12-44ef-80d4-9053f0df1f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:fd:08:25:80:43:c5:86:84:72:e5:66:4c:
                    64:cb:d4:ea:fb:0f:f3:88:7a:54:01:d2:81:18:32:
                    f2:4a:13:35:22:2f:a3:72:2f:2e:f9:78:61:e0:5a:
                    0c:84:07:29:29:34:a2:25:88:22:33:24:15:df:f8:
                    af:b8:59:9d:34:28:fa:09:fd:5f:60:35:53:cb:83:
                    be:46:26:e6:1e:a4:a6:d6:99:5f:0a:79:65:3c:05:
                    2f:88:ff:ec:cf:89:cc:29:2f:25:e8:44:9c:8b:98:
                    8c:64:1a:e7:8e:96:aa:2e:a5:df:0a:64:34:89:4b:
                    f1:5b:fb:f2:07:df:4b:f5:23:d2:09:8d:09:93:8f:
                    8f:8e:f1:07:f9:9b:71:09:86:62:79:b5:99:96:d9:
                    72:88:05:87:ee:9f:e0:13:59:d2:1e:ee:85:23:60:
                    77:63:3d:c2:8f:8d:6e:6f:0e:ed:51:c0:f0:6f:7b:
                    29:34:83:65:e7:ca:23:65:ed:32:a0:80:0c:76:68:
                    01:e6:e4:9b:ac:61:0c:f1:a6:05:05:7c:55:1c:9e:
                    10:d4:ef:26:c5:53:5e:74:00:68:36:8f:30:ad:bb:
                    d6:cd:09:3d:dd:14:2b:c2:0b:87:0f:b1:59:78:d6:
                    bf:8e:f6:ab:12:ea:cc:e3:7e:09:89:0b:b9:2e:14:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:FF:9D:9E:33:0C:89:5B:53:D9:C4:83:F3:74:00:17:FB:33:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e247cee9-de8c-3064-9adb-12283745de5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:57:eb:1e:25:1d:be:09:51:8e:c7:f5:bb:7b:e2:29:1a:74:
         ef:68:97:b8:a4:fb:41:ce:63:f1:0b:bf:e9:a8:da:38:07:fd:
         40:7d:f5:a6:8d:7e:96:7c:2f:11:da:53:02:2e:8c:8e:ad:b0:
         8d:bd:c8:49:e9:0f:fc:db:e0:d2:05:c1:a8:b1:d0:87:7f:cc:
         9f:94:12:7d:e4:86:d7:5a:62:c0:b2:9c:5a:81:aa:ce:21:c4:
         bc:45:f7:b8:ec:62:18:a2:3a:ed:42:a3:fc:ac:f5:48:2a:15:
         1b:87:76:2c:a2:80:5c:9c:7c:fd:23:6c:a9:0c:56:3f:02:e8:
         38:e9:7a:d9:2c:ee:82:15:23:aa:d3:d7:19:26:ae:90:94:59:
         84:ee:8b:04:a9:d7:02:2f:11:96:6e:87:92:7f:9e:25:e5:03:
         66:96:85:d0:84:93:e4:11:35:eb:56:f4:8b:e1:5a:a1:83:86:
         b6:63:7b:f9:bd:7d:94:a1:92:95:64:2e:12:03:d4:18:56:82:
         04:cc:bd:f5:6c:38:ae:8a:b0:46:39:95:57:bc:a5:e7:1f:b9:
         60:79:3d:d5:6d:cb:14:77:74:d5:42:d3:0c:3e:db:04:40:7a:
         ae:7b:d3:41:df:bb:a9:78:e0:eb:e3:40:29:26:df:1d:39:83:
         9d:08:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:22:58 2025 by rpki-client