Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a92debf-bbc2-35a1-a464-bd44fdae679b.roa
File:                     0a92debf-bbc2-35a1-a464-bd44fdae679b.roa (raw, json)
Hash identifier:          1+6Tc/zByFemk7IlwTqshZGaM3lcGPCfV/maj8HfOko=
Subject key identifier:   D0:CE:2E:5F:AF:2A:D6:F8:7A:1C:04:46:28:BF:56:62:31:6F:23:28
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D7D7C9DE8C5C549465F03A340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a92debf-bbc2-35a1-a464-bd44fdae679b.roa
Signing time:             Thu 07 Apr 2022 04:00:00 +0000
ROA not before:           Thu 07 Apr 2022 04:00:00 +0000
ROA not after:            Thu 12 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7d:7c:9d:e8:c5:c5:49:46:5f:03:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  7 04:00:00 2022 GMT
            Not After : May 12 04:00:00 2022 GMT
        Subject: CN=2180bf8a-1c22-4fd3-8e38-80b4b9c52f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:48:1d:bc:8a:e8:c0:22:3a:08:cb:29:76:
                    e9:6a:ce:60:65:dc:4b:e0:6d:79:6f:07:2a:6e:27:
                    06:74:14:12:d5:4e:62:84:f2:f8:5c:5e:7c:5b:2a:
                    57:0e:40:f8:af:60:e1:d8:a1:9d:37:20:90:6e:11:
                    a1:0b:da:e3:25:ec:6a:a3:e7:ee:32:c9:33:04:2c:
                    b6:bf:43:84:5d:26:93:8d:15:6b:04:6b:a5:95:18:
                    ea:50:d0:37:18:e5:3a:52:35:7c:61:35:0a:28:35:
                    e7:2e:4d:5c:40:8a:d6:3d:36:98:71:6b:af:e4:a7:
                    72:c9:9d:be:aa:05:0e:62:65:44:38:d3:7a:0e:44:
                    79:1e:84:b0:8a:e3:ce:9f:bc:ba:81:48:dc:88:df:
                    81:b1:c7:1e:c2:a0:05:29:8a:3d:9f:eb:4b:65:48:
                    9f:40:3d:80:dd:53:99:ff:8d:d9:13:32:04:b1:b9:
                    d5:7d:d2:02:fc:9d:b2:24:b8:b2:9d:ff:6b:6e:9f:
                    f9:6d:0e:91:65:97:50:81:9e:79:d3:ee:7a:75:42:
                    a4:62:2c:93:fc:34:bd:e1:1e:82:50:35:86:a5:a3:
                    8b:00:d7:ab:af:e2:ee:5a:84:61:fa:b3:ed:f6:c9:
                    d8:de:c7:06:9a:ea:dd:c8:bc:3a:2e:97:5d:83:82:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:2E:5F:AF:2A:D6:F8:7A:1C:04:46:28:BF:56:62:31:6F:23:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0a92debf-bbc2-35a1-a464-bd44fdae679b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:17:9f:d5:75:0e:69:57:53:da:e3:44:b2:5f:f9:43:31:
         3a:46:82:de:d0:94:d7:05:7d:f1:d2:73:ae:3c:2d:3d:48:10:
         34:2f:5d:e8:35:f6:83:7a:64:f0:40:d5:e2:89:d7:02:01:54:
         b3:ca:81:0f:68:17:bc:34:92:ab:2d:34:7d:87:6d:a2:ab:2c:
         e2:53:cc:0c:29:ef:42:86:a4:3c:c0:31:24:c9:70:08:99:5b:
         b7:d1:92:a3:ca:f0:0a:7d:cf:26:d9:24:34:5a:a9:78:e7:f6:
         f2:2b:63:d1:9c:e4:b6:5e:f1:ac:e5:bd:4e:b2:73:4d:4e:ca:
         fd:84:e9:c8:a5:c0:1f:3e:85:5b:4e:c0:ac:fe:4d:7e:4f:7e:
         00:4e:69:07:a6:9c:4b:9a:27:c9:63:71:83:0d:2d:bd:24:01:
         3a:89:9c:64:9b:a4:5e:2f:6e:03:d2:1b:6e:78:47:fd:2a:80:
         8a:76:99:f1:c7:12:4e:8e:0c:52:57:72:e1:d4:02:1b:40:39:
         90:82:86:56:3c:d4:b7:31:f9:ea:df:3d:af:81:bf:6e:e3:aa:
         2e:97:37:8c:eb:b5:6a:89:18:f4:f7:e1:80:f5:14:8d:5e:d4:
         25:09:c0:23:53:d8:bd:19:7a:64:07:6d:50:c0:66:4b:88:7f:
         92:56:2d:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD19fJ3oxcVJRl8Do0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNzA0MDAwMFoXDTIyMDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjE4MGJmOGEtMWMyMi00ZmQzLThlMzgtODBiNGI5YzUyZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkRIHbyK6MAiOgjLKXbpas5gZdxL4G15bwcq
bicGdBQS1U5ihPL4XF58WypXDkD4r2Dh2KGdNyCQbhGhC9rjJexqo+fuMskzBCy2
v0OEXSaTjRVrBGullRjqUNA3GOU6UjV8YTUKKDXnLk1cQIrWPTaYcWuv5KdyyZ2+
qgUOYmVEONN6DkR5HoSwiuPOn7y6gUjciN+BsccewqAFKYo9n+tLZUifQD2A3VOZ
/43ZEzIEsbnVfdIC/J2yJLiynf9rbp/5bQ6RZZdQgZ550+56dUKkYiyT/DS94R6C
UDWGpaOLANerr+LuWoRh+rPt9snY3scGmurdyLw6Lpddg4JQUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNDOLl+vKtb4ehwERii/VmIxbyMoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGE5MmRlYmYtYmJjMi0z
NWExLWE0NjQtYmQ0NGZkYWU2NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD90wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaPEXn9V1DmlXU9rjRLJf+UMxOkaC3tCU1wV98dJzrjwtPUgQNC9d6DX2
g3pk8EDV4onXAgFUs8qBD2gXvDSSqy00fYdtoqss4lPMDCnvQoakPMAxJMlwCJlb
t9GSo8rwCn3PJtkkNFqpeOf28itj0Zzktl7xrOW9TrJzTU7K/YTpyKXAHz6FW07A
rP5Nfk9+AE5pB6acS5onyWNxgw0tvSQBOomcZJukXi9uA9IbbnhH/SqAinaZ8ccS
To4MUldy4dQCG0A5kIKGVjzUtzH56t89r4G/buOqLpc3jOu1aokY9PfhgPUUjV7U
JQnAI1PYvRl6ZAdtUMBmS4h/klYtBg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:39 2025 by rpki-client