Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20618047-5583-3c81-9c70-1296e0cf55e0.roa
File:                     20618047-5583-3c81-9c70-1296e0cf55e0.roa (raw, json)
Hash identifier:          nbkQFddGklkOMfUd3+tK6UDP0CvOom2jeLiGgTvSBzU=
Subject key identifier:   19:F7:A2:CD:17:7D:38:DA:79:B6:EE:C5:E8:8B:22:03:19:2A:F1:3E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840C359C2ADFDB23391AD8C5ED0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20618047-5583-3c81-9c70-1296e0cf55e0.roa
Signing time:             Tue 31 Jan 2023 12:00:00 +0000
ROA not before:           Tue 31 Jan 2023 12:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.245.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c3:59:c2:ad:fd:b2:33:91:ad:8c:5e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 31 12:00:00 2023 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=7457317e-9d3c-4156-bb64-88665afa962c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:6d:78:97:0f:34:bd:42:1f:bc:af:ef:cc:
                    ee:50:f0:fb:a1:1e:81:41:a4:0f:20:73:ae:da:be:
                    94:aa:15:95:f6:1f:e2:d8:95:9f:fe:ee:7a:cb:3b:
                    f2:2e:af:ea:fb:c6:ef:ba:d1:be:f8:7e:f3:a4:bb:
                    c4:a9:72:ec:2a:65:b9:04:3f:25:96:83:20:2b:f3:
                    fc:06:15:6c:a5:5a:47:57:1a:25:e9:ce:57:d3:6e:
                    3d:27:7b:48:d9:76:5a:8c:ba:03:d9:71:84:a5:2d:
                    bb:9b:b2:8f:6f:ac:b3:17:6e:8b:8c:72:08:56:93:
                    88:d1:31:15:30:5b:e0:78:91:24:3b:83:76:24:71:
                    34:de:4a:3e:95:e4:a9:a4:e0:48:a0:1a:30:fc:5d:
                    37:19:4b:f5:2f:9d:90:24:e7:4a:ab:42:bd:2f:d8:
                    69:0a:4c:43:ae:15:9a:df:4b:15:af:3c:43:7e:88:
                    e7:40:6f:77:79:e3:52:16:9b:e4:40:c2:2a:ad:87:
                    fa:df:ad:43:ca:ca:52:cf:9b:e1:8e:40:2a:db:54:
                    16:29:55:d4:4b:e3:a3:00:2a:d8:f1:6a:72:5e:85:
                    3e:e1:6a:04:1c:3c:3d:3b:0f:67:94:fa:52:56:54:
                    1e:83:e8:d6:4e:1d:71:e0:58:00:3b:18:b6:27:67:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:A2:CD:17:7D:38:DA:79:B6:EE:C5:E8:8B:22:03:19:2A:F1:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20618047-5583-3c81-9c70-1296e0cf55e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b6:b4:20:d4:bc:43:59:e0:08:9e:2f:99:b2:0c:70:4f:2a:
         ee:8e:1b:73:02:a7:2a:02:7c:2b:69:42:cb:79:e7:59:9a:d0:
         01:52:26:3d:8f:85:87:78:89:9f:28:2a:61:4e:2f:b7:20:c5:
         d3:af:5a:65:27:a5:71:ca:d5:53:a0:72:76:02:7c:9b:5b:75:
         40:f6:be:12:17:c8:5d:18:37:f6:bc:89:01:ae:21:dd:95:a0:
         42:9b:26:f3:55:1b:b4:43:e0:c1:30:35:2f:58:b4:e0:fd:60:
         00:d4:be:22:ca:52:d3:75:04:7a:05:cf:60:c9:44:01:94:8d:
         19:69:d3:d7:a7:29:2e:86:da:14:2a:a3:4d:66:4c:c5:df:fc:
         9a:52:34:70:67:4d:70:bc:87:2e:7e:ae:12:f2:c3:13:17:39:
         29:54:b7:b1:27:83:6e:8a:61:c1:b8:eb:f7:61:66:30:c2:55:
         f0:2d:88:e6:0b:09:21:42:44:c2:3a:50:9b:62:50:ab:03:db:
         c1:9e:8d:c0:78:90:80:a7:06:92:14:d5:1e:5a:2c:64:1e:dc:
         b0:ae:3f:fb:83:c2:fd:6b:8b:e7:82:c9:ca:f8:73:2d:09:16:
         07:d2:c4:9f:f1:a2:a2:72:1b:f9:93:03:c3:d7:68:d3:f7:aa:
         db:6a:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:59 2025 by rpki-client