Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1849ac8c-536c-376f-bda7-739ea7311e7d.roa
File:                     1849ac8c-536c-376f-bda7-739ea7311e7d.roa (raw, json)
Hash identifier:          Wq1P4bqFJia3rGRgiZuU5ffOJ9YnEM894RwwHFzCEC4=
Subject key identifier:   F9:12:58:2C:73:D5:96:53:2D:A3:E1:5F:66:09:92:08:5B:EC:D1:03
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3EA193B7E7305924A4171740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1849ac8c-536c-376f-bda7-739ea7311e7d.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.144.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:a1:93:b7:e7:30:59:24:a4:17:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=6ed4b63c-d9de-40df-ba19-4242e8f969db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:e8:76:f9:d5:f2:fc:e0:6c:c7:96:42:e5:
                    4c:34:7c:38:0d:0d:c0:0c:e2:5d:de:1a:a7:45:f5:
                    ff:2d:23:7c:b3:e9:80:a6:61:47:4f:71:1b:f7:dc:
                    3c:51:13:97:10:ab:04:e6:3f:d9:e7:1e:6a:7f:18:
                    36:c8:be:69:2e:80:e9:8c:19:ad:63:92:51:06:79:
                    56:df:0d:d0:92:93:01:2e:2c:93:dc:18:ee:ce:39:
                    e0:e4:e2:ef:15:75:a0:d5:b0:a7:a9:bd:6b:a9:64:
                    98:50:8f:fb:66:79:e7:16:07:e5:22:11:61:43:da:
                    f1:0f:b6:af:21:17:0a:44:69:67:2d:8e:f7:ea:3a:
                    5d:0a:4c:08:7e:5f:31:ae:9e:de:d7:c5:8f:e9:f2:
                    84:b5:e1:7c:3d:87:b6:ed:90:b9:ef:53:8f:30:d5:
                    c0:d2:9b:31:f2:23:80:f1:b3:af:82:c7:ac:68:8a:
                    fb:eb:46:8d:27:23:3b:b6:2e:55:09:89:c7:3b:07:
                    5a:37:62:62:c8:7d:6f:11:38:3a:2f:c7:2c:bb:81:
                    d4:11:2b:fe:02:2f:6d:34:59:10:60:e4:76:c5:bb:
                    3f:f0:66:f3:26:49:8f:16:96:7c:c7:2d:a0:f7:e5:
                    cf:a4:e1:ee:db:81:71:0b:35:68:55:34:5d:5a:ca:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:12:58:2C:73:D5:96:53:2D:A3:E1:5F:66:09:92:08:5B:EC:D1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1849ac8c-536c-376f-bda7-739ea7311e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:46:d3:03:51:6c:de:18:41:73:97:f8:44:65:81:57:98:6b:
         04:61:5c:57:6c:49:a8:71:fa:52:b3:dc:38:f9:c2:e4:3a:63:
         d8:4d:2b:19:6b:b8:d6:78:97:e6:db:f5:2a:56:3b:3e:ee:f4:
         1e:05:f7:18:aa:00:64:df:ba:60:2a:1c:d3:6a:d0:75:5f:0a:
         27:96:8d:0f:b6:f7:f2:95:5e:e6:63:4b:42:77:9b:9f:9d:1f:
         17:45:aa:29:a4:c1:39:3b:2a:3c:7a:9e:8c:b6:f1:f8:a5:f6:
         ca:29:0f:0f:29:38:d2:9d:50:9c:69:77:e3:b3:9a:82:c6:35:
         34:3b:b9:38:48:78:a9:4b:53:3d:da:65:0c:90:e8:00:82:26:
         43:bd:20:15:8d:64:bd:a8:35:46:02:2b:6b:8f:3d:2c:75:a9:
         50:d2:67:85:e3:8c:d6:2f:c4:b5:69:ad:72:26:0f:0b:7a:47:
         d3:46:af:fb:46:3e:b9:7c:c0:00:0b:8d:8d:91:ae:8f:7a:21:
         cd:96:43:61:17:ed:62:5e:df:f9:31:7d:09:7f:af:a5:ce:eb:
         48:46:99:8b:bb:15:91:74:93:3c:0c:30:82:5c:fa:0c:2a:57:
         dd:d0:4e:cc:9e:88:c8:b2:5c:7d:e7:36:23:25:fb:82:47:2f:
         08:76:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:46 2025 by rpki-client