Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5686361-49c6-3649-8b2c-9f0953aeeae9.roa
File:                     e5686361-49c6-3649-8b2c-9f0953aeeae9.roa (raw, json)
Hash identifier:          w0x5on3B2cQ+1Oq7oH1Ro8XNPXmpI6Os3A1qSX4wzdM=
Subject key identifier:   F9:9E:A3:75:6F:D3:F2:C8:F0:AA:DC:6B:2E:85:C0:52:EC:CD:B1:DB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F771AFFC580627BE7018AAC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5686361-49c6-3649-8b2c-9f0953aeeae9.roa
Signing time:             Tue 04 Oct 2022 12:00:00 +0000
ROA not before:           Tue 04 Oct 2022 12:00:00 +0000
ROA not after:            Wed 09 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        13.200.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:77:1a:ff:c5:80:62:7b:e7:01:8a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  4 12:00:00 2022 GMT
            Not After : Nov  9 05:00:00 2022 GMT
        Subject: CN=80f3fb18-4d58-42cc-9c7f-aebf16fe9150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:bb:fc:61:42:6a:32:19:64:11:57:22:d4:
                    b3:a3:a9:17:8f:16:ee:61:46:e1:5d:48:67:f9:89:
                    b6:0e:fb:ab:fb:58:ea:84:f5:2e:f3:bb:33:08:ea:
                    90:6d:a8:74:43:31:17:9a:71:b2:71:fe:48:c6:9c:
                    a5:22:15:31:63:f5:9a:16:40:90:ff:47:5a:81:b4:
                    bc:99:94:d5:f2:75:ba:b4:de:25:77:98:fd:c2:b1:
                    dc:ce:bc:b1:45:94:45:a4:88:27:c4:bc:a7:48:6a:
                    c6:e0:e5:cb:6c:40:93:af:96:a8:5e:f6:ab:ba:0f:
                    8e:b1:76:e0:d6:ba:bc:31:59:de:aa:8c:fc:53:41:
                    b9:d5:db:0f:51:b5:8d:ac:fe:cf:fb:a4:7e:62:6d:
                    e2:dc:f4:c5:fa:23:25:b4:25:19:0c:8c:f2:f5:97:
                    e2:47:11:48:73:8c:db:28:45:74:6b:9c:1a:04:8a:
                    5b:15:15:ca:8b:2c:a6:9e:d6:a9:6b:48:ff:dc:c7:
                    14:d4:13:d9:a6:d5:1a:12:2e:3b:21:4f:7a:e1:28:
                    3c:3b:88:4d:41:b2:89:58:63:13:fd:c7:d2:fb:17:
                    ff:b3:b5:fb:2e:ae:45:86:ee:6a:42:80:e1:f6:43:
                    09:b8:55:ef:b0:15:81:f0:36:a2:44:c8:bc:07:f5:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9E:A3:75:6F:D3:F2:C8:F0:AA:DC:6B:2E:85:C0:52:EC:CD:B1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5686361-49c6-3649-8b2c-9f0953aeeae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.200.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:43:9b:49:18:09:2a:81:0e:94:ac:01:77:e4:08:ce:c2:7b:
         fd:a2:73:a3:fa:9a:5b:db:7f:b2:51:18:d9:90:8e:c6:86:50:
         a8:a9:f6:f0:da:6f:fa:98:39:47:6f:e0:03:1f:35:d5:b1:63:
         d8:5a:e8:aa:34:63:64:c2:fa:fe:ef:f8:b0:02:e5:06:2b:0b:
         87:2a:dd:41:6d:31:2a:5a:2b:35:a7:e0:cc:84:5a:45:1d:f2:
         38:88:45:e4:b5:87:ac:a6:c6:95:7b:2c:02:36:46:bc:d3:db:
         fb:69:12:12:b7:7e:24:91:62:51:7a:67:c8:df:24:92:09:0d:
         78:3d:1f:b8:0b:d1:e3:78:63:69:3b:cd:05:12:ec:49:ed:68:
         5e:34:9a:5c:eb:8b:0b:60:6e:00:5c:4d:43:d3:12:dc:e6:b0:
         5d:0f:13:63:e1:b4:d4:c3:4b:92:2e:0d:88:a1:1c:73:f0:99:
         e0:7b:88:8f:10:4e:8e:57:28:5f:91:93:6f:c3:d0:bb:13:f2:
         5e:6c:d1:87:d9:aa:33:2c:5f:ed:1f:e2:82:c1:b9:9b:10:da:
         a2:f5:9c:40:5e:b1:82:79:ce:7e:6a:39:0d:ce:3d:7c:af:f3:
         24:e8:d5:0a:92:ff:bf:07:5c:e6:d8:e8:b9:5b:99:77:78:bf:
         55:b7:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:04 2025 by rpki-client