Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/352d87a8-2d08-354c-9ec0-9fe90a37674c.roa
File:                     352d87a8-2d08-354c-9ec0-9fe90a37674c.roa (raw, json)
Hash identifier:          DOQw9Hf7qL/q6mxO9zXF5yQUkUTB4ZYpmfDSIDKFlBQ=
Subject key identifier:   16:80:D5:57:2F:41:77:3B:6E:E3:02:9B:5F:3E:6D:B5:E1:EB:6D:E6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6BA999F41CF5CB7DA49F5700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/352d87a8-2d08-354c-9ec0-9fe90a37674c.roa
Signing time:             Thu 30 Dec 2021 05:00:00 +0000
ROA not before:           Thu 30 Dec 2021 05:00:00 +0000
ROA not after:            Thu 03 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:a9:99:f4:1c:f5:cb:7d:a4:9f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 05:00:00 2021 GMT
            Not After : Feb  3 05:00:00 2022 GMT
        Subject: CN=d97b61ba-8d77-4dd9-8773-278f4e9a923c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:68:22:46:16:98:91:bc:54:49:71:9c:1a:
                    d6:f9:34:57:8b:6f:1d:11:38:65:1f:7a:2b:c9:aa:
                    25:b2:09:af:42:ed:04:fa:4d:bf:89:4a:c5:de:c3:
                    44:ca:6b:0f:7b:66:bd:1e:13:f0:27:ab:bf:e4:ca:
                    0e:fd:54:2c:d8:12:94:da:2d:ec:c5:aa:0f:f5:23:
                    cc:a0:c2:58:0d:7d:0b:32:2c:20:9b:e8:0c:c8:f5:
                    74:3a:98:28:79:81:f7:fe:4e:de:5a:71:a4:00:ec:
                    1b:9d:f5:2b:82:fd:26:91:36:d6:ab:9f:8f:5a:8b:
                    6a:54:41:95:ec:df:4d:6b:87:f2:3e:4f:74:33:fa:
                    19:c9:1d:fa:11:e8:6a:f8:9d:b2:b2:f9:46:60:ab:
                    6c:12:83:91:e6:81:c5:3f:74:fa:20:a4:bc:cb:d7:
                    fd:20:03:91:62:05:4e:ad:49:88:fc:f4:f3:0e:c6:
                    69:fa:18:b0:71:10:66:44:fc:f0:a8:da:96:45:3a:
                    19:99:44:7b:50:0d:70:2a:95:84:f2:6a:9e:c6:c8:
                    8e:42:54:bf:7b:b2:37:60:3b:1f:05:72:60:66:a9:
                    81:59:9a:2e:56:8e:98:0f:b9:5f:f7:4a:b8:71:38:
                    a1:18:a4:e5:2f:64:d0:b5:f0:66:2e:28:59:b0:02:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:80:D5:57:2F:41:77:3B:6E:E3:02:9B:5F:3E:6D:B5:E1:EB:6D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/352d87a8-2d08-354c-9ec0-9fe90a37674c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:56:d0:f7:b0:75:21:fd:ab:f3:7f:0c:b9:26:4e:c5:ee:04:
         92:e2:b7:08:43:09:f9:8f:58:39:9b:a8:92:59:15:90:d2:14:
         c1:a4:b6:b9:cd:7d:75:79:0c:62:3a:99:b3:1c:38:b5:4c:70:
         5c:a4:38:8d:3c:2f:b5:c2:8f:f2:ab:13:62:03:3d:8d:b7:1a:
         64:92:5c:32:8d:94:22:e6:68:73:f2:eb:cb:02:fc:f1:5a:62:
         40:6e:70:74:ca:c0:4f:29:43:de:11:b8:59:55:f0:5b:fe:b1:
         a0:b3:e2:d5:83:bd:6b:f3:f3:d9:b4:32:99:7b:20:53:c1:0d:
         8c:5d:f0:8d:21:a8:6b:02:a3:33:72:53:39:46:63:73:e0:21:
         c9:c5:d6:3b:d8:e5:b9:40:b7:b1:4e:a6:78:b0:19:52:07:da:
         6d:d3:de:d6:e4:71:63:71:21:bb:1f:f3:8e:d6:20:3c:f3:c1:
         e4:c5:86:18:65:a0:fd:81:47:94:44:b4:d6:7b:71:6f:13:52:
         4d:42:92:25:cc:e5:b7:54:cb:bf:70:8b:86:4a:51:48:d2:53:
         28:5c:e1:b6:be:07:98:13:fe:f0:6e:5e:c0:e3:b2:b2:79:69:
         89:78:cd:95:d0:20:3d:b2:bd:3c:c7:3a:5f:9b:6d:05:95:15:
         12:81:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:56 2025 by rpki-client