Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6f4dcd6-ec44-3626-94e1-7dd4a20896eb.roa
File:                     f6f4dcd6-ec44-3626-94e1-7dd4a20896eb.roa (raw, json)
Hash identifier:          wlCeh9SgS7nY//LzbYfQRwRk8XmiWdtH8ycJ+hW//Ys=
Subject key identifier:   8A:B7:6D:0A:9C:09:C4:18:F4:66:B1:92:90:C0:88:17:08:7B:66:AC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DC8EA893BDC3365278B89E264
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6f4dcd6-ec44-3626-94e1-7dd4a20896eb.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        13.112.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:ea:89:3b:dc:33:65:27:8b:89:e2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=5df3f98e-1e45-4038-86fc-66d87a3935cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:fc:e4:11:5f:db:0f:95:33:85:f8:3d:ec:
                    8d:36:32:0d:b2:5a:7a:84:26:ab:01:fb:44:60:17:
                    a0:49:df:25:2e:ab:f2:02:28:30:a1:fa:da:10:85:
                    be:04:65:7a:b0:2a:91:ef:29:22:5d:a7:32:a2:d0:
                    3c:76:7f:df:98:dc:35:89:0c:5c:31:d3:46:0a:0b:
                    c6:dd:48:86:4d:77:e3:56:e1:64:36:18:18:f7:d8:
                    ec:4e:fe:6d:dd:2f:91:e7:57:ff:12:72:64:9f:a7:
                    e7:94:d9:9f:e6:d1:9b:17:2c:be:6e:89:84:47:86:
                    4d:94:49:e2:e6:0b:03:fe:3c:47:b7:03:e2:dc:6f:
                    63:09:88:4a:d5:1a:94:bc:77:53:52:22:ca:1d:16:
                    ef:c5:db:0d:a7:6c:af:99:55:21:34:26:82:ee:64:
                    eb:11:5f:10:45:44:4a:dd:15:27:19:ee:5e:5e:47:
                    2d:bd:8c:56:3b:61:0e:20:c7:e8:aa:f1:b4:63:9c:
                    75:c9:59:8f:b5:c8:36:21:6c:b3:15:6a:31:de:aa:
                    d6:f8:c2:15:4b:df:93:20:37:ec:e2:74:ef:8e:74:
                    aa:df:a9:b5:90:34:15:3d:b5:5e:0c:2c:2d:6e:75:
                    f9:2d:51:f4:89:ae:e6:dd:cb:da:6d:7f:ae:ea:8e:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B7:6D:0A:9C:09:C4:18:F4:66:B1:92:90:C0:88:17:08:7B:66:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6f4dcd6-ec44-3626-94e1-7dd4a20896eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.112.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:01:15:69:68:65:1d:47:24:2a:e3:81:dd:e4:a5:01:57:45:
         25:41:62:00:1d:c0:22:b1:8e:43:e1:ac:80:b6:b9:29:7a:a2:
         48:18:48:78:9f:9a:e9:b3:28:f3:1a:8e:1b:87:fe:93:4c:4a:
         12:17:b5:bc:4c:c0:88:e7:f9:d7:b2:d9:63:c8:3c:66:06:7e:
         bd:a9:40:24:98:d2:c0:73:a1:48:3a:35:3f:10:87:28:71:8f:
         59:72:d1:24:bd:ff:72:99:d1:ed:05:e7:f2:21:a9:47:64:71:
         b3:e1:83:bc:83:4d:c7:ab:11:4b:72:80:41:1b:8a:e3:f4:32:
         d7:9c:5a:76:8f:d1:17:1e:42:92:cc:da:f2:4a:34:49:9d:22:
         2a:93:c6:01:9a:b5:40:4d:5f:6c:62:0e:df:4b:c5:cd:4e:3c:
         eb:a1:b1:a9:57:f2:69:13:40:0f:a9:3a:0b:07:f2:86:01:b8:
         32:13:2d:84:03:c5:18:70:ed:67:44:dd:f0:6a:2c:d6:20:14:
         b3:66:58:78:b3:37:f2:99:91:80:cb:7a:43:e0:ad:4f:d1:ee:
         c3:2c:98:e9:98:41:eb:2b:2d:2d:ed:f3:91:59:d1:17:8b:fd:
         fa:3b:c5:25:5f:1d:41:55:11:df:a7:e9:d5:23:c5:6d:89:d5:
         e2:92:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:31:30 2025 by rpki-client