Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef4960ab-dc81-3b18-8bc9-429dbf0bcdad.roa
File:                     ef4960ab-dc81-3b18-8bc9-429dbf0bcdad.roa (raw, json)
Hash identifier:          xFEAhmEQb/IC9KeB5bXKIhiNxD5diis0HRDMyfItzLo=
Subject key identifier:   CE:05:ED:F2:2A:0A:0D:AC:0E:FB:65:CA:3E:AD:05:9D:2C:EB:4E:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E2116D3680B21CCF751FCAE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef4960ab-dc81-3b18-8bc9-429dbf0bcdad.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        35.72.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:21:16:d3:68:0b:21:cc:f7:51:fc:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=b3304db9-4c10-4fb3-955b-70f2e3415bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:a2:51:cf:7c:eb:6a:de:60:60:44:60:4e:
                    7f:ec:1a:09:4b:e7:8e:31:65:c2:9c:78:89:57:71:
                    ee:14:f9:28:63:60:ff:53:79:4d:09:87:b9:b1:e0:
                    21:26:29:61:50:aa:d4:9f:9a:b7:41:4a:5f:d2:a9:
                    43:83:95:38:ab:06:70:60:10:2c:2a:26:60:7b:2c:
                    bd:00:67:b4:03:f9:1a:8b:b5:ea:14:da:48:57:b7:
                    88:00:0d:c6:64:b4:79:ec:30:03:2e:10:96:69:a9:
                    05:a9:2c:f7:b0:61:b4:a1:24:6e:1e:33:02:ed:f6:
                    9a:60:c4:1f:fa:b1:1e:ea:03:fd:a4:46:6c:54:50:
                    8d:93:5e:e1:26:c2:eb:c1:f5:fa:f5:ff:41:f0:34:
                    5f:1a:2c:fd:91:f0:b3:ae:8b:01:58:4e:1d:2f:25:
                    7b:84:06:e5:a6:a8:d0:e1:67:27:c4:8f:d5:e2:63:
                    08:6e:2a:d9:55:d7:45:6f:00:38:41:3c:8d:75:c6:
                    45:5f:91:22:16:84:e5:96:99:e3:2d:1a:8f:80:b2:
                    a4:91:4f:78:ee:55:46:2a:e8:e9:db:15:b2:5c:1c:
                    5c:ec:b2:53:b7:85:6b:6c:54:ad:09:ad:56:18:98:
                    bc:f2:29:cd:9f:18:02:87:5c:fc:53:48:47:1f:7b:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:ED:F2:2A:0A:0D:AC:0E:FB:65:CA:3E:AD:05:9D:2C:EB:4E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef4960ab-dc81-3b18-8bc9-429dbf0bcdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.72.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5b:e0:60:de:ba:24:5d:a1:b9:ad:be:80:92:45:7f:39:1c:
         e3:2c:c8:40:8a:fb:84:e1:af:cc:e6:14:24:a0:aa:7e:63:67:
         16:3e:a6:33:33:e4:e4:ff:6d:19:21:48:f9:2e:24:f9:92:3f:
         09:a9:72:3f:5b:36:cf:71:61:59:c6:f6:b2:b8:b1:b5:d0:90:
         9c:96:0d:2d:53:8a:d5:0a:73:6c:3f:0e:2e:54:24:f5:e9:07:
         b0:46:b2:8a:f0:92:50:a0:ba:81:33:30:2b:b2:0b:92:c9:00:
         87:a7:b5:8e:0b:81:e7:7e:f4:5b:ba:c1:78:bc:9b:5c:a3:2c:
         4a:8e:60:67:39:0c:5c:a9:02:ed:31:ab:d8:b4:fd:1e:ba:9d:
         9d:92:bc:77:53:78:88:11:99:9a:b4:8a:1f:bb:0d:5e:2e:a8:
         80:4c:21:ae:e9:e3:ff:76:89:93:6a:01:7f:45:89:3b:0b:59:
         af:50:fa:df:17:ca:84:36:b2:07:7d:39:5c:82:32:4f:77:c0:
         46:f0:f0:8e:35:43:ce:ee:30:31:6c:3b:a7:ca:b1:41:a9:c5:
         4b:8a:5e:10:b4:ab:6f:49:07:95:58:98:15:fc:53:e7:5a:06:
         30:1b:7d:9c:ad:89:7d:b9:9a:01:65:63:24:47:99:12:23:9d:
         d5:ea:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:41 2025 by rpki-client