Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13a25370-aec5-3750-bf03-1b19b9e0e4c9.roa
File:                     13a25370-aec5-3750-bf03-1b19b9e0e4c9.roa (raw, json)
Hash identifier:          dg2SZy7YdFqCaaEW8arWjQWt/b3kvtq2X9RjXB1qm5M=
Subject key identifier:   0F:15:66:5C:9A:22:C6:B7:6D:6D:DD:4A:A7:9B:2F:85:D9:1F:3F:DB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CFB06A7FCD61D0B70D5D824C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13a25370-aec5-3750-bf03-1b19b9e0e4c9.roa
Signing time:             Sat 19 Feb 2022 05:00:00 +0000
ROA not before:           Sat 19 Feb 2022 05:00:00 +0000
ROA not after:            Sat 26 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        151.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:fb:06:a7:fc:d6:1d:0b:70:d5:d8:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 19 05:00:00 2022 GMT
            Not After : Mar 26 04:00:00 2022 GMT
        Subject: CN=e2c87a1f-72e5-4066-93a5-cd5df5fc972a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:b3:68:2a:91:15:db:71:e1:e6:54:87:51:
                    ab:6e:83:43:de:d6:15:eb:c6:73:71:b6:74:25:2f:
                    9a:e4:99:6a:bf:49:8a:14:f3:bc:ff:92:ca:fd:6d:
                    b9:74:df:f3:2e:f0:e2:cb:f9:9f:49:f2:34:a9:82:
                    e6:f0:fa:1b:65:7a:27:0a:f8:62:a7:8b:00:e0:e4:
                    8b:3a:60:5d:be:35:23:13:21:98:d1:fd:83:2b:48:
                    a6:68:38:a2:d9:6b:d7:90:99:c6:2e:bb:85:6c:9c:
                    ea:56:d2:90:f5:56:78:41:84:56:99:72:17:82:ea:
                    62:7d:53:29:bd:fd:e4:1a:49:b6:18:b2:10:7b:fb:
                    f4:dc:10:79:cd:73:4f:fb:59:3a:d7:f0:69:04:ce:
                    b1:e5:da:2c:50:5f:2a:75:c3:c1:b7:3e:3c:91:ea:
                    91:f4:d8:1a:ab:17:7e:41:c6:5f:f4:64:0e:e8:a3:
                    88:92:55:d0:62:9c:66:c3:d6:5e:f2:b3:01:af:de:
                    24:08:e1:7f:a8:28:12:b7:5f:b0:dc:58:49:b3:0a:
                    74:79:e7:bc:99:50:c1:9c:fa:d3:ea:a0:88:7f:10:
                    2f:dc:42:80:54:1f:de:19:a6:ed:27:cc:72:a8:13:
                    8d:b5:b2:36:66:35:7d:c4:2c:4f:14:8c:2a:3e:d5:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:15:66:5C:9A:22:C6:B7:6D:6D:DD:4A:A7:9B:2F:85:D9:1F:3F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13a25370-aec5-3750-bf03-1b19b9e0e4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b0:00:85:7f:87:5a:60:ef:de:1f:c2:97:c3:2d:cd:9b:7e:
         e9:72:84:56:a2:bf:2c:d2:85:d9:77:e3:20:c6:ed:1f:77:14:
         e0:37:f9:ad:ae:c0:17:b1:07:a3:df:48:22:19:59:3b:61:a0:
         1e:09:be:63:0e:7b:a1:d4:5c:c3:4f:fd:b6:0f:ff:89:1a:c8:
         04:bf:ef:b0:e4:db:43:36:eb:d0:c3:b0:5b:2f:ed:bb:e5:6d:
         0b:f0:99:35:f2:dc:59:87:9a:32:e0:10:a9:8f:db:27:78:e5:
         d0:6a:86:f7:1b:97:8e:84:fb:6f:cb:68:5a:3b:11:32:e2:13:
         cd:5d:de:11:65:2c:fe:b1:02:75:91:2a:4d:e4:b1:fa:7f:78:
         b2:4e:25:df:4c:b9:86:9f:d5:c4:72:38:f2:58:a1:43:b2:6a:
         ef:81:6d:b5:20:3b:58:de:b4:6f:ed:24:ec:fb:2d:f0:20:bc:
         6d:59:8f:67:ff:41:3f:9e:ad:9b:20:82:a5:db:9c:c3:62:d3:
         ac:cf:01:56:56:35:cb:29:1d:7c:23:b2:7b:b5:4e:55:5d:ba:
         bc:f0:87:1e:a5:2f:17:90:df:cc:6e:8f:d1:68:09:ff:32:3b:
         c3:5b:6b:bb:bb:80:4a:5d:d5:f3:bc:39:a9:e2:6c:13:d0:f9:
         9f:d1:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:42 2025 by rpki-client