Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7bc369c-9be9-32d0-8b7f-e29b416de58d.roa
File:                     e7bc369c-9be9-32d0-8b7f-e29b416de58d.roa (raw, json)
Hash identifier:          bbuQUzu1v63T7hUTs5HOMy90KZu82cv0VZdl/hY3wwc=
Subject key identifier:   8B:C1:1A:2F:80:72:84:D4:68:E5:43:1C:EB:99:6E:8E:58:4A:51:E9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD2DC820DD280617E321A8A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7bc369c-9be9-32d0-8b7f-e29b416de58d.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        35.112.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:dc:82:0d:d2:80:61:7e:32:1a:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=aa21d5ba-c0c5-4f24-8e50-a0593fc3d37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:0d:06:7f:09:93:21:67:91:54:f2:9f:56:
                    c3:f5:40:6f:e0:62:6b:36:23:fe:dd:4a:01:94:50:
                    b9:5c:02:ad:ac:4c:c1:d2:a0:41:55:af:04:44:0e:
                    ef:77:18:df:7b:ca:7f:31:80:5e:f5:f5:41:72:3a:
                    60:15:80:40:3f:bc:6b:bc:43:93:61:f4:62:48:00:
                    a1:22:96:3b:cd:b1:59:23:9b:7b:3b:c0:f0:c4:83:
                    df:38:97:b0:dc:78:a0:c4:37:02:ed:7c:95:78:df:
                    06:7b:9a:36:b1:96:56:c7:aa:d1:0f:50:1d:6d:0c:
                    09:77:f1:26:fd:f9:de:72:dc:c9:ab:4b:dd:05:10:
                    a5:fd:93:a3:18:18:ab:21:3f:c5:5b:9f:a1:a0:8a:
                    ee:fa:08:4c:a4:ed:8a:e4:a6:14:c8:8a:8b:f9:6b:
                    9b:59:ae:0a:96:19:c9:ab:b3:c3:5f:6d:2c:0a:1b:
                    7f:de:45:c6:a3:c9:8d:d9:57:d9:d6:3e:a8:e1:1f:
                    18:7a:45:52:2a:28:5d:a2:95:dc:6e:71:1f:e4:f5:
                    21:75:ea:54:60:72:8c:3b:bb:86:d3:69:79:4b:4c:
                    12:c6:ba:96:5d:0a:06:e8:30:96:13:1a:9a:af:d9:
                    b4:96:f3:b1:9a:f9:6f:a0:e1:05:62:eb:27:b2:14:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:1A:2F:80:72:84:D4:68:E5:43:1C:EB:99:6E:8E:58:4A:51:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7bc369c-9be9-32d0-8b7f-e29b416de58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.112.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:e1:ef:f3:61:8b:9e:93:b8:be:0f:b7:62:eb:41:be:ba:
         ad:3f:86:87:fd:12:1d:c2:be:3a:b2:21:1c:f4:b7:a4:04:30:
         9c:56:e8:6b:b6:5e:96:d4:28:a3:d7:ea:67:27:f7:ed:46:bc:
         c9:73:0e:6e:d9:c0:28:aa:f7:23:e8:dd:7e:e2:4a:2f:b1:d4:
         c4:2f:56:0f:24:bb:81:d5:d5:fc:d9:2f:fa:2d:99:5f:80:44:
         47:f8:15:ba:59:a5:d5:30:8f:fc:6e:60:bf:d8:96:2a:e7:d2:
         d5:ff:79:6d:aa:25:3a:17:8c:02:86:92:58:1d:d2:f9:a2:d1:
         7a:90:0c:ed:bf:d8:cc:26:7e:cd:b2:30:6b:81:da:33:cc:79:
         a8:8d:32:70:f7:ce:d3:da:85:73:13:28:3f:30:80:cb:be:47:
         2f:8b:26:09:d5:c1:18:c0:f2:a4:79:05:f4:ea:5e:7a:48:9e:
         a8:f4:1e:46:db:d6:ac:2a:f3:ba:ef:e3:0f:4f:89:f6:77:c0:
         71:ae:86:c8:ca:64:73:06:5f:7e:00:b3:b6:31:95:6d:34:0a:
         07:92:f2:89:06:18:f6:e3:01:5a:2d:24:c4:39:f9:e2:77:aa:
         5e:0d:6a:7f:dd:05:f2:fb:4e:ee:db:59:2e:58:75:d5:97:af:
         74:83:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:08 2025 by rpki-client