Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/351611d2-a56e-3963-84a5-2d83582301aa.roa
File:                     351611d2-a56e-3963-84a5-2d83582301aa.roa (raw, json)
Hash identifier:          KW4LmF9zt2zAgAfRWsErSEn3jXWeT8ihU7huhdtXRb8=
Subject key identifier:   3E:C4:B8:E2:B0:95:C7:78:EF:7E:D3:E9:DC:F0:6D:8B:AF:A3:A7:1E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FB4C91C5AADA2DAE991732000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/351611d2-a56e-3963-84a5-2d83582301aa.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.133.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:c9:1c:5a:ad:a2:da:e9:91:73:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=1170b2c0-7296-46a1-8c25-40f6380fefde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:2e:2e:6a:4f:15:8b:0e:52:01:2a:36:01:
                    07:52:fc:47:13:8a:72:8b:95:2a:9c:e7:ed:95:31:
                    04:a9:d8:8a:27:a6:c0:b3:4d:bb:e3:b1:d4:c2:90:
                    ca:30:ed:94:be:0b:27:ed:8d:a6:05:d5:6b:94:4b:
                    bd:fe:43:0d:ef:7c:7c:3c:eb:93:fc:5f:de:b3:bf:
                    cc:fc:9e:1b:95:e8:f4:2a:4f:de:75:61:a6:a4:58:
                    e1:b4:38:fc:e0:a6:ff:60:65:35:87:31:f1:ad:7f:
                    9c:e1:3a:38:af:88:40:1f:65:9e:6a:3f:1b:e7:f7:
                    e5:89:65:0c:7b:ab:75:0b:3e:b8:4a:1e:12:43:cf:
                    b1:7e:df:9f:8f:3a:30:91:74:6a:eb:93:8a:5f:a2:
                    f1:5b:6d:63:88:d6:bc:d7:36:7e:32:b1:fc:c8:ff:
                    ac:d4:02:ee:0e:31:89:e4:4d:29:23:91:92:a7:b9:
                    53:24:e7:8d:f6:3e:4b:73:03:9d:8f:1b:6b:60:0c:
                    5f:79:f8:7c:51:f8:4c:5d:8f:29:90:99:15:63:5e:
                    7c:51:f2:c0:0c:24:f1:3e:a3:a0:b5:ca:67:4a:6b:
                    05:98:d1:c2:7b:89:95:d4:77:5e:e8:62:35:b7:28:
                    73:a9:d1:57:a2:fa:d5:4c:b3:17:55:68:ed:e3:ca:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:B8:E2:B0:95:C7:78:EF:7E:D3:E9:DC:F0:6D:8B:AF:A3:A7:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/351611d2-a56e-3963-84a5-2d83582301aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:36:4a:c0:05:ee:5c:d6:ee:5d:74:39:0b:89:c8:b4:86:
         aa:9e:33:0b:0b:58:b2:de:42:d3:d5:05:ce:43:a8:b2:9d:46:
         70:6b:9f:42:e3:ea:34:de:9d:f3:20:3b:f8:15:34:ac:4c:9b:
         49:7c:d3:69:c3:9b:68:9a:7b:8a:20:a2:f3:7f:e8:8d:76:67:
         43:82:a2:8e:15:48:c7:22:c9:6c:5f:7f:dc:64:39:76:d6:12:
         a9:e1:39:dd:77:29:6c:0e:c8:b3:b2:d8:53:be:d1:27:4d:3b:
         7a:d4:30:8f:00:02:1b:37:20:b3:1b:ed:27:14:63:d9:6f:cf:
         2d:96:cd:bf:fa:8a:6a:3b:f0:db:e2:f4:51:4c:57:b3:a8:4e:
         36:97:ed:69:b8:03:33:9a:52:45:b0:5b:31:8d:ee:de:e9:2a:
         0c:23:a0:ec:7d:26:42:4b:10:22:7e:55:5b:5a:8c:2b:c5:1a:
         fa:de:99:c7:3d:66:0c:7c:60:35:87:24:28:90:4b:fc:da:af:
         5c:a3:9d:21:ba:73:3d:1d:16:55:d1:22:1d:cd:d2:0b:69:b1:
         c0:2b:a1:a9:2d:87:e6:2f:93:22:77:4f:68:d7:4d:85:2c:bd:
         42:a2:27:bc:a1:a5:45:6b:10:46:05:8d:aa:40:ee:2f:4d:9b:
         11:c0:d3:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+0yRxaraLa6ZFzIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyNjEyMDAwMFoXDTIyMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
MTE3MGIyYzAtNzI5Ni00NmExLThjMjUtNDBmNjM4MGZlZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHwuLmpPFYsOUgEqNgEHUvxHE4pyi5UqnOft
lTEEqdiKJ6bAs02747HUwpDKMO2Uvgsn7Y2mBdVrlEu9/kMN73x8POuT/F/es7/M
/J4blej0Kk/edWGmpFjhtDj84Kb/YGU1hzHxrX+c4To4r4hAH2Weaj8b5/fliWUM
e6t1Cz64Sh4SQ8+xft+fjzowkXRq65OKX6LxW21jiNa81zZ+MrH8yP+s1ALuDjGJ
5E0pI5GSp7lTJOeN9j5LcwOdjxtrYAxfefh8UfhMXY8pkJkVY158UfLADCTxPqOg
tcpnSmsFmNHCe4mV1Hde6GI1tyhzqdFXovrVTLMXVWjt48pCLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD7EuOKwlcd4737T6dzwbYuvo6ceMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzUxNjExZDItYTU2ZS0z
OTYzLTg0YTUtMmQ4MzU4MjMwMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD4UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfy82SsAF7lzW7l10OQuJyLSGqp4zCwtYst5C09UFzkOosp1GcGufQuPq
NN6d8yA7+BU0rEybSXzTacObaJp7iiCi83/ojXZnQ4KijhVIxyLJbF9/3GQ5dtYS
qeE53XcpbA7Is7LYU77RJ007etQwjwACGzcgsxvtJxRj2W/PLZbNv/qKajvw2+L0
UUxXs6hONpftabgDM5pSRbBbMY3u3ukqDCOg7H0mQksQIn5VW1qMK8Ua+t6Zxz1m
DHxgNYckKJBL/NqvXKOdIbpzPR0WVdEiHc3SC2mxwCuhqS2H5i+TIndPaNdNhSy9
QqInvKGlRWsQRgWNqkDuL02bEcDTuA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:41 2025 by rpki-client