Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eba8bd6-a580-3143-b690-681df115193d.roa
File:                     2eba8bd6-a580-3143-b690-681df115193d.roa (raw, json)
Hash identifier:          JtSNAdo9ceJ6wKS/cv+dcIZc7mx/Y4JdyFOT2V28bc4=
Subject key identifier:   05:50:DA:79:AD:9C:13:84:A5:74:CE:A6:A1:C3:D3:7B:49:7E:A1:B2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409F6853CCD57903DA613EB210
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eba8bd6-a580-3143-b690-681df115193d.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.133.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9f:68:53:cc:d5:79:03:da:61:3e:b2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=03817349-1071-4d20-b0d4-bd6faeb49c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:42:1d:dd:7a:2f:1d:f2:f1:86:d5:94:f4:
                    58:d5:24:c3:f2:b8:93:69:58:bf:db:5e:f8:99:d4:
                    6c:dd:e9:5b:02:62:ea:ab:29:cd:70:48:de:94:71:
                    2c:b2:53:33:4e:9e:14:68:43:ea:26:ab:8a:06:9e:
                    a6:5b:ca:09:6d:f7:1f:d0:f3:56:88:3c:b2:78:06:
                    da:be:fd:16:c9:9d:41:f4:5a:94:f7:2c:f9:58:15:
                    27:f2:f2:83:b7:4c:dd:ba:04:c2:9b:55:8b:56:e2:
                    f7:d7:00:1b:f0:78:a2:e3:e0:4f:12:2f:da:7c:2b:
                    13:dd:ec:0f:1f:e4:d2:13:54:3a:54:83:70:a4:1f:
                    4a:07:07:c0:ca:d6:04:15:d7:42:7c:52:ea:19:73:
                    76:78:01:3f:59:6a:67:7d:b9:1b:ec:36:41:73:30:
                    90:01:50:74:d6:41:98:18:a0:78:f8:84:9b:3a:22:
                    b4:7e:28:83:9a:a0:09:8f:c6:a8:9a:cd:af:ac:9d:
                    00:a7:07:eb:c5:38:57:db:a6:e1:97:57:7c:ca:de:
                    5e:6c:04:3a:48:3e:84:5d:1d:18:1f:02:e1:9e:72:
                    63:ee:35:66:7e:78:e7:c6:64:b9:4f:63:a3:ec:68:
                    0d:b3:b5:f1:79:45:04:27:6d:bd:cf:63:18:d9:78:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:50:DA:79:AD:9C:13:84:A5:74:CE:A6:A1:C3:D3:7B:49:7E:A1:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2eba8bd6-a580-3143-b690-681df115193d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:49:ce:f7:38:b8:2e:c0:cd:5c:45:5c:d3:fb:6d:d9:ff:d2:
         90:dc:38:d2:d9:25:c6:2d:92:06:b4:87:09:3d:7d:11:52:82:
         b5:75:e0:7f:14:97:f4:e8:43:8a:d5:4c:e4:8f:00:af:82:47:
         81:54:22:ba:b9:76:18:bf:c2:04:ef:3c:2a:02:d8:2a:03:54:
         8e:92:9e:df:25:c7:ec:f8:39:c6:da:38:91:4a:1d:70:98:55:
         31:9a:03:f9:41:63:fb:f8:2d:71:43:af:cb:c6:07:92:ed:13:
         01:95:61:89:c7:b8:13:77:1c:e7:73:9b:77:f7:31:12:38:7c:
         8c:45:53:5f:2f:46:a9:a6:67:85:01:7d:1c:f2:1a:b3:e8:47:
         be:14:39:78:bf:54:a8:8a:49:62:62:ea:e4:32:dd:8a:9a:1c:
         f3:0d:dd:96:4f:1f:55:f6:56:eb:94:0a:cb:2d:45:ce:2b:31:
         66:d2:21:78:00:85:1f:e0:7a:46:37:8c:9c:c2:0b:7c:72:a5:
         13:e4:8a:24:76:d6:91:56:e5:f7:af:ee:d4:a0:5e:e0:5d:40:
         5a:16:0d:7a:8f:2f:35:bf:00:2e:97:e6:3b:b2:f8:b6:25:b4:
         b9:51:a0:e9:d3:d1:cc:c3:a7:e3:7a:fc:31:ae:73:64:30:06:
         b4:6d:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:44:30 2025 by rpki-client