Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/326d3888-bd6a-35e9-a044-d5ab72277dae.roa
File:                     326d3888-bd6a-35e9-a044-d5ab72277dae.roa (raw, json)
Hash identifier:          RdrruV43rCpU3jIC2GnZP55K6Yfo5s7mDZjazr6kwls=
Subject key identifier:   C0:06:29:00:E9:FE:C4:A9:13:2F:E8:76:53:BE:4D:5F:44:11:C7:89
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858402AF090A0925F3AFBAE08B4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/326d3888-bd6a-35e9-a044-d5ab72277dae.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.174.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:f0:90:a0:92:5f:3a:fb:ae:08:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=f364801d-ed4f-4cb4-82c5-56f0b79fba37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:47:db:a1:81:19:09:f1:9d:65:4e:f6:a6:
                    a3:09:38:c1:92:b6:8e:69:0f:78:4e:84:ee:3f:98:
                    52:7e:b6:f6:81:57:42:36:3f:e8:b5:1c:50:5e:5b:
                    fc:fe:81:00:9e:19:f3:7f:3b:e4:e8:38:cd:c1:e5:
                    77:0d:da:1d:70:7f:24:30:1b:47:77:d0:e2:e2:72:
                    a9:bd:77:f5:7b:42:cd:11:88:52:f3:d0:cd:41:54:
                    73:0d:3b:6d:8c:5e:21:37:9a:cb:df:1a:f7:3c:e2:
                    cc:4a:8d:8d:02:50:0c:e8:cc:53:a2:85:13:b2:fa:
                    31:4d:af:e7:fa:16:52:98:52:ee:cc:0f:6a:e1:30:
                    63:d4:79:d0:35:4a:e3:11:c6:66:0f:4b:03:af:39:
                    01:66:57:11:0a:58:fd:62:ad:33:e1:29:a5:4c:4b:
                    d3:31:14:b6:47:c3:08:b0:da:4a:e5:20:23:66:f8:
                    fc:df:a6:8e:e8:27:e1:51:6b:b1:6d:7a:c2:45:e3:
                    d1:c4:66:1c:d0:d8:a0:ba:dc:32:7c:02:2d:f8:04:
                    37:6e:d4:32:dc:95:65:d9:5e:a4:3a:77:d6:95:ef:
                    2f:95:dd:9c:39:2a:98:b6:da:2b:04:2f:e4:c9:3b:
                    53:ed:0e:f3:75:0c:ac:20:47:f9:d8:ec:c9:eb:f9:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:29:00:E9:FE:C4:A9:13:2F:E8:76:53:BE:4D:5F:44:11:C7:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/326d3888-bd6a-35e9-a044-d5ab72277dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:20:dc:c0:cb:47:8c:2b:54:24:50:b7:33:be:e9:8d:88:
         cb:05:29:c1:e2:ae:8e:f9:7c:42:a3:f0:b8:4c:d2:46:85:ce:
         0e:a9:95:75:44:ba:4f:b8:89:e8:ef:3a:05:f1:e8:cf:77:23:
         c6:7e:e8:50:5b:c2:08:65:54:21:6d:17:38:4c:97:f0:13:db:
         c7:d3:af:9f:46:e3:74:c6:40:92:a9:83:65:8c:4d:34:68:54:
         ff:a5:50:a5:95:c1:73:d9:4c:ed:06:4e:3b:e8:9e:2c:2b:2d:
         b1:44:86:f8:fd:6c:a1:02:99:78:e0:f8:ff:54:60:a4:a2:f1:
         32:cc:30:24:01:d9:4d:28:f8:6a:bc:bf:82:07:c0:83:8b:0e:
         72:97:d6:e4:08:64:11:fe:af:76:2c:18:db:46:4f:e8:15:d9:
         15:cb:1f:32:9a:b4:95:9d:3f:02:ca:4b:cd:f3:5c:1b:df:2c:
         9f:6d:81:f7:93:b7:7c:30:99:5f:af:43:d6:db:89:dc:7b:f9:
         91:e0:64:fe:02:62:45:ee:43:cd:42:1c:7f:83:71:8d:07:be:
         49:46:ce:f9:cb:c4:5e:13:9f:21:83:7f:b8:b8:ce:b4:f4:17:
         7d:48:cc:fd:29:29:59:bd:1c:5c:e7:bb:48:fb:19:67:0d:db:
         85:0d:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:47 2025 by rpki-client