Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15264a95-d3b4-3f6a-afee-0016e841c3af.roa
File:                     15264a95-d3b4-3f6a-afee-0016e841c3af.roa (raw, json)
Hash identifier:          f5kj+ztATrD02Rjzojh7u3bz2RaWg70vmYtNN3RlYgU=
Subject key identifier:   77:4D:0D:85:9C:CE:52:33:27:15:C8:12:22:66:28:D8:B0:52:CA:A4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD3719BABBA22D0822F831350
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15264a95-d3b4-3f6a-afee-0016e841c3af.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.154.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d3:71:9b:ab:ba:22:d0:82:2f:83:13:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=b0b6a4a5-05c2-4a53-ab94-2b593836c079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:a0:52:32:47:6b:b0:ae:1b:9b:db:85:b1:
                    0d:df:4b:e7:83:5b:f4:b7:93:64:8e:bd:6a:94:e2:
                    dc:08:be:dd:50:eb:ec:36:b0:f1:4d:c3:88:f2:5f:
                    56:9b:81:2c:ec:0c:22:3d:fc:69:c6:83:4a:da:0d:
                    d4:d1:86:f8:65:c5:47:f4:00:e3:db:c0:0b:cf:15:
                    07:50:34:87:b7:57:12:bf:24:81:48:9e:2a:d7:91:
                    80:c8:42:f2:d9:78:8d:93:46:6c:15:71:58:e8:9e:
                    35:93:ac:9b:8a:20:8e:49:fc:31:be:aa:bd:03:06:
                    4c:5d:07:ff:1d:1c:89:ef:72:f6:a9:d0:f2:8e:02:
                    e4:41:fe:5d:0c:c7:be:56:2a:12:8a:68:64:9f:e6:
                    95:1e:68:d7:18:c9:0b:a5:d6:94:57:3c:1b:73:92:
                    66:ce:5a:de:8f:9f:01:51:5d:18:3c:b0:09:48:91:
                    f5:97:37:22:aa:90:60:35:36:95:12:ac:ab:91:d7:
                    bf:be:f7:cd:87:6a:af:94:9d:d5:f7:4f:8d:48:20:
                    05:05:4f:b8:99:7d:46:e6:58:0a:03:e8:f6:72:e8:
                    11:cb:55:98:a6:5e:e3:c5:7d:0c:e9:3f:c1:2b:d1:
                    c9:fa:d8:5e:a2:1a:bf:55:e7:c6:27:73:88:ea:2e:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4D:0D:85:9C:CE:52:33:27:15:C8:12:22:66:28:D8:B0:52:CA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/15264a95-d3b4-3f6a-afee-0016e841c3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:a6:a0:06:92:06:eb:3b:1a:79:00:15:b2:dd:1f:07:fa:
         e2:a4:52:86:d9:a2:73:9a:08:f4:7c:ad:f3:d8:93:71:81:1d:
         4c:98:c6:17:62:be:59:33:93:1e:c2:06:bf:0f:61:41:f5:6a:
         fe:db:d7:0c:2e:df:06:b3:e5:a8:45:44:a7:d0:50:49:42:3d:
         ea:69:4e:58:3b:56:60:3d:08:db:cb:10:a0:49:43:2f:6f:28:
         66:f1:dc:67:10:12:da:36:14:3e:66:41:72:8f:ac:f1:d8:67:
         b1:34:7a:f1:72:c4:85:58:a9:0a:4e:a3:5f:ad:06:4d:0d:bf:
         ab:5f:91:e7:9d:37:95:3d:ba:92:9c:0e:3a:f8:a4:f8:3a:92:
         e4:ab:ec:56:24:33:42:e9:d2:6c:91:21:94:a4:2b:96:31:c5:
         b3:6b:6f:8f:36:e6:4b:12:27:4f:eb:91:69:29:f9:9d:46:1d:
         4f:7b:6d:d8:56:86:54:40:17:0d:a2:29:6a:5e:aa:53:68:bf:
         aa:4c:10:2c:9d:aa:4c:2b:bf:34:94:15:58:65:ef:46:aa:7f:
         8f:54:d8:01:57:0b:21:89:48:54:ff:d5:30:e1:96:23:89:7c:
         bc:5c:16:92:e6:1d:b7:20:1d:a8:60:2d:bb:ae:d5:96:ce:91:
         f8:c2:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:29 2025 by rpki-client