Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3bb9aa4-f9f0-37dd-a1f2-4f3f5f696d36.roa
File:                     f3bb9aa4-f9f0-37dd-a1f2-4f3f5f696d36.roa (raw, json)
Hash identifier:          +daVNPf75ou/02VWvi7ssKCIoRVPYz0t3e6QnzLj/Pk=
Subject key identifier:   54:67:7D:9D:1A:F8:C8:4A:CA:7B:FF:1D:93:1F:EF:F3:AB:5A:CF:9A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCCB0576AF2E67A594EBBC500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3bb9aa4-f9f0-37dd-a1f2-4f3f5f696d36.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        47.10.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:b0:57:6a:f2:e6:7a:59:4e:bb:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=abccc6d5-b5cf-4efb-8b50-d3e7883f5d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:32:92:38:75:e6:93:76:ec:10:a2:9b:7b:
                    0d:fa:a7:2a:44:ba:2d:0a:eb:10:e8:65:0b:b5:64:
                    d7:70:03:6f:1a:94:cd:30:49:cc:03:e0:30:32:e0:
                    7e:1e:ad:81:86:a9:a3:dd:a7:43:ab:9d:1a:fb:2d:
                    5a:8d:c0:fb:d5:08:0b:eb:ca:1e:32:b9:d7:68:29:
                    ea:80:46:a6:d9:29:45:fb:40:c0:54:66:ed:5f:cc:
                    88:21:3f:09:cd:74:04:aa:34:8d:44:e3:29:5b:e7:
                    c0:b8:50:61:ed:c4:37:d7:37:7f:7d:bc:44:1d:d8:
                    8e:59:9b:7f:d5:95:22:81:66:75:c0:c9:fe:11:94:
                    1c:d1:56:95:f9:14:6c:ba:11:cf:a3:7e:bf:86:71:
                    d1:94:de:89:db:6e:62:a1:77:6c:ad:c0:97:40:bc:
                    c2:4d:7f:e4:5a:30:a9:06:ef:b9:9e:33:81:91:3e:
                    a8:d7:29:0f:5f:9a:c0:e6:f2:d9:4b:35:7b:32:eb:
                    bb:3f:ea:78:45:98:1d:a4:d7:a1:2a:57:a8:24:03:
                    83:78:b6:8f:c3:c7:ba:a2:b2:01:29:e5:48:b6:74:
                    25:af:3f:f1:84:4b:f7:8a:23:b7:cb:56:bd:5a:89:
                    fa:67:cb:df:4d:e1:78:d3:4f:04:c2:7a:70:1f:c7:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:67:7D:9D:1A:F8:C8:4A:CA:7B:FF:1D:93:1F:EF:F3:AB:5A:CF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3bb9aa4-f9f0-37dd-a1f2-4f3f5f696d36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:87:d5:9d:3c:8d:b5:1c:18:e1:80:2e:6d:67:96:7c:5d:
         3e:e3:37:cc:3b:72:25:9e:6e:c5:9a:7b:7a:2b:0c:18:e1:05:
         a2:e1:1a:08:fc:63:a3:7e:c2:f9:e4:96:58:8d:b0:bb:12:c6:
         43:8c:e8:78:ec:9f:c2:b2:4c:72:56:c7:c9:9c:8b:e5:d4:48:
         39:1c:ef:77:2a:63:db:86:39:87:04:c7:67:75:58:de:49:24:
         63:05:2f:c9:e3:4c:b9:5e:9d:ae:c6:ff:4a:da:93:7b:3d:f3:
         35:da:a4:94:03:aa:9d:39:1f:d7:8f:98:4c:29:f0:78:48:b5:
         94:9f:e7:ce:72:59:e6:bb:6a:36:db:53:b1:59:2b:54:38:ac:
         56:71:86:65:1f:58:6e:b9:9c:56:bf:32:17:cd:d3:c8:db:8a:
         3f:b8:c2:55:d6:24:b5:81:b0:2c:19:0d:5c:0e:6f:e4:1a:34:
         f9:fa:a5:29:09:38:92:20:0b:89:0e:04:b8:b7:74:db:76:bb:
         d9:d2:b5:95:9d:17:84:63:d5:0e:13:7b:09:bb:57:c1:90:b1:
         11:36:e8:cf:de:26:55:42:69:88:47:c3:82:13:6f:1e:17:4f:
         fa:b5:49:ca:04:b2:f4:a6:6a:ed:09:42:ab:ea:b4:dc:cb:4d:
         57:9d:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:24 2025 by rpki-client