Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/315618bf-9173-369a-b569-0ae0d66ae2fc.roa
File:                     315618bf-9173-369a-b569-0ae0d66ae2fc.roa (raw, json)
Hash identifier:          EgKGsUpUB3TmtPTvMZOA093xx4gT11zmCrla85I5nns=
Subject key identifier:   24:5E:B0:D0:92:29:A1:FA:F3:8D:DC:9E:D9:85:0F:EB:02:BD:9A:CC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBAF40EF59999A0C7AC2954E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/315618bf-9173-369a-b569-0ae0d66ae2fc.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     3209
IP address blocks:        15.145.2.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:f4:0e:f5:99:99:a0:c7:ac:29:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=495a4b57-94cf-4c3a-adfe-a656383eae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:4e:b0:6a:1a:26:67:49:70:87:a9:29:9d:
                    45:46:53:a6:e0:50:45:5c:50:43:dc:59:9c:da:cd:
                    44:04:5d:d4:e4:a1:77:d0:ca:a4:1b:97:4a:6a:a1:
                    d1:46:e9:b4:9f:52:c2:4a:03:43:41:34:a1:e2:99:
                    78:45:f4:28:19:93:91:d4:e2:a1:e0:33:58:ba:f2:
                    c2:71:1e:d9:15:21:f9:8a:97:3e:bf:97:f4:f3:5f:
                    ad:26:e4:4a:54:28:8e:70:3d:c4:1d:7c:13:5f:0d:
                    c7:31:fc:5b:ea:bf:49:ff:20:19:3f:ae:e5:1c:d9:
                    c3:25:77:44:57:07:c9:fd:07:2c:40:7f:b4:6e:35:
                    b5:23:fa:ca:8a:50:61:4f:6b:bc:77:9e:ef:90:4e:
                    56:e6:72:c8:30:00:00:6d:17:c0:63:c9:c9:74:e8:
                    b7:f2:e2:4b:6d:16:0a:de:7f:3d:bc:27:24:a6:5b:
                    49:48:11:8b:a0:d2:6e:61:71:a1:fb:f9:c0:fd:05:
                    40:b5:b2:ac:27:49:15:54:8f:9d:3b:92:c3:36:8f:
                    3b:19:af:f4:56:16:6e:1b:e5:de:ce:7d:b6:f0:3b:
                    7e:59:21:bc:7c:64:8f:f5:0b:08:69:1b:25:59:d4:
                    b0:c1:0a:c1:cf:f4:0e:f3:08:c3:9c:4c:8f:5d:ed:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:B0:D0:92:29:A1:FA:F3:8D:DC:9E:D9:85:0F:EB:02:BD:9A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/315618bf-9173-369a-b569-0ae0d66ae2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.145.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:c0:25:f2:5b:74:57:6f:de:b7:49:fc:41:43:3f:6e:19:
         36:09:84:9c:64:67:be:74:4c:c5:6d:b9:31:2b:13:82:88:42:
         3b:c3:be:68:e4:68:37:c5:b2:46:34:11:63:a4:a3:78:e6:b6:
         95:87:c7:d2:e9:cc:51:f7:3b:24:12:2e:8e:f7:4c:88:bc:b0:
         62:e0:46:1a:87:22:07:8b:da:36:67:fd:6b:41:8e:e2:16:32:
         55:01:70:4b:60:51:00:e4:5a:6d:18:d3:01:4b:0c:ca:fd:50:
         02:e9:9a:68:45:25:68:97:e6:f9:b1:b1:0c:c4:aa:b7:83:2f:
         51:b1:3a:64:fb:21:23:07:b1:a1:43:39:9d:e6:92:56:02:18:
         0a:b4:26:59:15:e6:0b:ae:0d:f6:d0:1d:a6:9a:a3:99:b2:66:
         5c:12:60:4b:45:38:fc:b3:d5:4e:e2:7a:b4:18:e1:de:36:10:
         c8:07:29:99:77:c4:eb:76:9b:bf:f6:87:7b:1d:73:c8:c0:9f:
         c8:01:7a:94:c8:b7:85:b5:5d:e1:06:de:6f:77:72:77:0a:a1:
         56:ea:7d:69:cf:ea:5d:c2:1b:d9:45:0f:78:bc:4f:e4:8a:dc:
         08:a4:8d:f0:d3:0d:4b:66:ff:f6:ab:4c:45:bf:e6:8f:55:36:
         37:77:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:49:21 2025 by rpki-client