Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5fe3a94-c341-3e67-bf3b-3093294436d6.roa
File:                     e5fe3a94-c341-3e67-bf3b-3093294436d6.roa (raw, json)
Hash identifier:          cBoVX/7Fyix4YjRowMfYQTs3/bhpKnxtCFxYxfr2yS0=
Subject key identifier:   9D:10:72:6B:D3:E2:32:88:30:34:FC:CD:1A:E0:BC:F4:EE:D0:79:8F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CD0B6D2726343BF93B33EAF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5fe3a94-c341-3e67-bf3b-3093294436d6.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Fri 11 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d0:b6:d2:72:63:43:bf:93:b3:3e:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Mar 11 05:00:00 2022 GMT
        Subject: CN=b249bd51-93fa-4b6c-b560-d246d017aeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:55:aa:70:8d:c0:20:b9:f1:94:80:c6:76:
                    96:2b:28:03:88:dd:83:59:1b:a3:3f:b4:e4:2a:5d:
                    de:66:0a:00:94:47:94:92:a9:d3:b1:e3:cd:83:6f:
                    79:e3:a2:92:bb:b9:ec:9d:bb:2d:a5:34:82:2e:ad:
                    66:48:e3:bb:e9:52:e6:19:5b:fe:7a:28:22:51:c9:
                    20:0a:3c:15:41:36:98:9e:5f:57:16:32:b1:ec:e2:
                    8c:dc:cd:ca:42:41:ba:86:6c:89:28:6a:7b:74:6c:
                    4c:b0:02:ce:4a:ed:6b:0e:ac:73:3b:49:a3:b8:44:
                    31:f8:b2:3d:ab:db:35:67:77:60:bb:d5:76:6a:cd:
                    e6:84:df:c0:1e:34:e9:3f:d7:4d:14:f0:27:72:88:
                    4f:b6:02:ee:cb:c9:ac:58:97:46:fd:a7:f8:0e:ef:
                    a3:91:6b:58:ed:e5:f5:a4:6f:12:5b:de:cf:aa:f3:
                    8a:41:26:92:12:a3:81:ce:ce:54:55:ea:48:b3:c6:
                    4c:31:67:bb:66:d6:ec:5a:36:15:3e:a6:24:65:ee:
                    37:03:82:84:d1:ca:c5:98:6d:40:be:dd:bf:a6:b7:
                    49:7a:fd:eb:a8:a5:fc:78:73:f3:ac:60:e8:54:8d:
                    59:fd:6f:df:33:3d:0e:f8:f5:0c:bf:2b:cb:32:5d:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:72:6B:D3:E2:32:88:30:34:FC:CD:1A:E0:BC:F4:EE:D0:79:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5fe3a94-c341-3e67-bf3b-3093294436d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:00:57:f7:ed:f8:07:9c:b4:0b:f3:01:80:71:96:2f:aa:bc:
         e1:7c:d1:b4:e8:14:63:02:06:0f:ee:f6:9c:da:b2:04:3d:45:
         a1:d6:d8:d0:f6:e3:34:36:03:f3:c6:43:af:de:0a:cd:c6:07:
         e7:01:52:0d:bc:19:53:46:56:40:ba:d5:e7:68:cf:32:92:49:
         b4:f3:4b:db:78:a7:fd:80:66:f8:b3:b2:05:81:c4:0c:81:4e:
         34:ba:56:a1:04:10:6a:17:8a:ba:ac:c2:02:b0:37:0d:c7:92:
         3b:d0:25:e3:15:b8:57:b7:de:9b:85:b0:36:2f:e1:ba:21:92:
         20:46:b9:14:f1:aa:27:d6:47:d7:35:05:65:df:a7:67:fc:f7:
         80:55:17:ce:fc:cf:32:30:3b:b7:05:65:a9:ec:cd:64:56:66:
         d6:db:d6:f2:c4:1b:ac:13:3f:b9:12:6e:14:e2:74:30:dd:31:
         2d:5e:fc:a0:13:b5:9f:89:a6:e3:cb:00:68:f1:02:01:a0:1f:
         5d:ee:30:45:9f:73:c1:32:ce:61:c6:86:69:11:1c:89:73:af:
         d3:d9:ce:67:df:a5:31:65:39:a7:26:ed:cf:6f:54:1a:15:e0:
         22:24:9b:b3:1f:4a:62:8b:75:36:57:6e:36:10:03:39:3a:5e:
         ae:a8:86:79
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzQttJyY0O/k7M+r0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwNDA1MDAwMFoXDTIyMDMxMTA1MDAwMFowLzEtMCsGA1UEAxMk
YjI0OWJkNTEtOTNmYS00YjZjLWI1NjAtZDI0NmQwMTdhZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWpVqnCNwCC58ZSAxnaWKygDiN2DWRujP7Tk
Kl3eZgoAlEeUkqnTsePNg29546KSu7nsnbstpTSCLq1mSOO76VLmGVv+eigiUckg
CjwVQTaYnl9XFjKx7OKM3M3KQkG6hmyJKGp7dGxMsALOSu1rDqxzO0mjuEQx+LI9
q9s1Z3dgu9V2as3mhN/AHjTpP9dNFPAncohPtgLuy8msWJdG/af4Du+jkWtY7eX1
pG8SW97PqvOKQSaSEqOBzs5UVepIs8ZMMWe7ZtbsWjYVPqYkZe43A4KE0crFmG1A
vt2/prdJev3rqKX8eHPzrGDoVI1Z/W/fMz0O+PUMvyvLMl0yXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ0QcmvT4jKIMDT8zRrgvPTu0HmPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTVmZTNhOTQtYzM0MS0z
ZTY3LWJmM2ItMzA5MzI5NDQzNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARABX9+34B5y0C/MBgHGWL6q84XzRtOgUYwIGD+72nNqyBD1FodbY0Pbj
NDYD88ZDr94KzcYH5wFSDbwZU0ZWQLrV52jPMpJJtPNL23in/YBm+LOyBYHEDIFO
NLpWoQQQaheKuqzCArA3DceSO9Al4xW4V7fem4WwNi/huiGSIEa5FPGqJ9ZH1zUF
Zd+nZ/z3gFUXzvzPMjA7twVlqezNZFZm1tvW8sQbrBM/uRJuFOJ0MN0xLV78oBO1
n4mm48sAaPECAaAfXe4wRZ9zwTLOYcaGaREciXOv09nOZ9+lMWU5pybtz29UGhXg
IiSbsx9KYot1NlduNhADOTperqiGeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:12 2025 by rpki-client