Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1136fb28-72c9-3dc3-8c53-2c936af66870.roa
File:                     1136fb28-72c9-3dc3-8c53-2c936af66870.roa (raw, json)
Hash identifier:          WjGRKy6IOE5l9vv707mi7UW+KAhgmFbNu2VJYuq0V78=
Subject key identifier:   9F:9D:E8:4E:A5:97:BE:6F:7E:9D:59:B9:A1:89:5C:3E:26:4B:15:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FEFD91C88A36902F77E1C7E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1136fb28-72c9-3dc3-8c53-2c936af66870.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ef:d9:1c:88:a3:69:02:f7:7e:1c:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=715cad30-fb09-4611-8fa3-349547ecca1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:48:81:74:41:52:22:a2:20:5e:fd:34:4c:
                    ae:b7:90:86:4a:a0:9c:0d:fd:c3:47:0a:77:3d:8d:
                    3a:5d:85:30:97:57:dd:4c:1a:3e:40:89:bd:33:34:
                    e4:14:d4:88:2b:e9:4f:76:62:0b:49:f3:f1:1b:4e:
                    34:12:c9:da:3d:ad:35:e4:b2:d8:b2:ef:bd:6d:2f:
                    86:cb:18:bc:9e:cd:f1:b0:df:1d:d6:7a:d5:8a:56:
                    12:51:c8:d8:d8:8f:67:87:29:d4:15:aa:3a:dd:a0:
                    c4:50:19:5e:69:8e:21:80:ef:13:ed:52:bf:13:44:
                    bc:54:da:68:38:14:4d:9b:be:44:83:e9:d2:8a:24:
                    28:3f:45:6e:05:9b:0f:4f:06:dd:e2:5f:e4:ef:ea:
                    f9:78:30:71:c1:f9:a9:09:14:ec:a0:cc:ee:3d:69:
                    82:e1:60:a5:e2:ec:59:bd:63:99:9d:bf:36:c4:1a:
                    b1:ef:91:17:83:73:5f:2d:84:94:a4:6b:b9:7b:71:
                    4f:cd:b5:ef:b8:7d:3e:19:1e:06:75:aa:f8:e6:a8:
                    65:f5:d4:f1:71:09:ce:c2:ce:e3:f6:76:f5:45:f2:
                    76:27:e7:74:8a:e0:6d:73:64:3d:b9:5a:5b:be:ea:
                    85:f3:fa:c3:d8:54:04:cd:22:d7:86:f6:2d:6e:da:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:E8:4E:A5:97:BE:6F:7E:9D:59:B9:A1:89:5C:3E:26:4B:15:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1136fb28-72c9-3dc3-8c53-2c936af66870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:a4:e2:68:33:f9:c1:32:09:fc:f8:9c:5c:3b:87:bc:cc:
         09:9b:f8:d6:c0:16:a7:62:8d:9d:90:2b:ba:60:a7:66:81:48:
         06:4e:3e:3d:74:eb:06:0e:78:da:e1:bb:14:24:b2:3c:2e:5a:
         ef:50:85:83:94:d6:a1:f5:10:d2:6f:ae:3d:54:aa:26:3a:e3:
         6d:45:98:56:43:97:16:ab:6a:92:85:98:29:3d:c9:fb:cb:bc:
         14:48:95:1d:07:13:97:85:de:43:fb:74:57:60:65:e7:4c:5a:
         df:3e:51:af:d5:83:88:93:df:2e:99:28:ce:bd:12:1c:c5:02:
         e5:1f:c6:02:23:76:31:ff:ee:52:44:39:3f:70:a3:5b:c1:42:
         bd:f7:58:c8:ba:50:6f:eb:25:e2:56:9e:aa:7f:90:94:15:36:
         68:56:fc:37:c4:df:a0:87:dd:08:72:5b:08:a9:f1:cd:3f:d6:
         57:95:1d:3d:e9:80:f7:d2:2f:2d:5a:63:1e:0e:01:9e:51:9e:
         d3:96:98:08:38:04:65:57:8a:e4:db:60:65:95:b6:0b:12:7b:
         fe:6d:5d:42:09:8a:61:d6:6a:d3:a9:0e:7b:f2:38:5d:09:bb:
         95:ec:51:31:21:49:93:ec:4c:ab:a0:2d:14:5e:13:65:77:d4:
         28:bc:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:25:39 2025 by rpki-client