Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c825809-4692-3fdc-abd6-cab6960a5e9e.roa
File:                     3c825809-4692-3fdc-abd6-cab6960a5e9e.roa (raw, json)
Hash identifier:          RbYi9QkRJu+mnOaqkv6HOVCasMSJUJb0q685Zp9+Tbg=
Subject key identifier:   9D:98:92:F0:3F:15:B9:1D:6F:5C:3C:A1:80:72:BD:F9:FF:1C:09:90
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CB9EA4EA85CECD1100CE4AC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c825809-4692-3fdc-abd6-cab6960a5e9e.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.192.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b9:ea:4e:a8:5c:ec:d1:10:0c:e4:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=11bcce22-7018-4cb1-89ed-0e1727158f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:73:85:74:1d:69:5e:10:e8:91:06:68:f0:
                    b9:98:a2:d2:15:ac:6f:d3:b6:af:ee:17:fb:92:72:
                    df:c4:5f:09:a8:f3:ff:1f:57:45:24:74:95:72:0e:
                    12:9e:e8:44:6f:b7:a6:06:5d:ca:9d:8d:af:74:b1:
                    22:06:3e:b7:be:a0:12:33:fc:25:28:e1:2d:1c:ae:
                    a9:b1:3f:97:04:1d:81:0c:99:1c:2f:fb:4b:d3:23:
                    dd:fe:ce:b7:bd:d3:9c:0b:7f:3e:f9:b0:b1:fd:1d:
                    8f:00:2d:6f:56:bf:96:37:07:b9:73:7a:6c:97:9c:
                    ee:46:3a:bc:18:51:8f:40:04:5d:32:ae:f1:a7:99:
                    3d:f8:b7:da:e6:5e:47:1e:3e:df:c2:9e:b0:d2:7a:
                    52:01:d0:a2:4b:bf:9a:4e:06:69:72:e4:2f:ab:b6:
                    d7:70:e9:fc:8f:75:ae:df:a1:9a:2f:5a:3b:36:86:
                    61:aa:12:e3:5a:e9:91:8e:4e:a2:f2:7d:d2:51:de:
                    42:38:d6:1c:ce:8f:48:fa:15:ec:29:26:3f:97:bd:
                    7e:94:8f:7f:5e:2e:0e:3e:e5:dc:05:3d:d5:37:2d:
                    28:af:cc:64:29:89:dc:97:b4:65:62:29:1f:72:ef:
                    33:b6:12:0d:5f:17:3f:0e:20:c2:0e:ff:35:51:12:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:98:92:F0:3F:15:B9:1D:6F:5C:3C:A1:80:72:BD:F9:FF:1C:09:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3c825809-4692-3fdc-abd6-cab6960a5e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:40:12:06:01:75:23:9a:e4:9c:60:19:05:8b:71:7f:56:
         58:38:9e:f3:b0:db:ef:e9:e0:48:d9:80:1f:14:7b:47:3a:bc:
         ba:a7:fd:32:e1:db:d7:1e:0d:cf:9d:eb:f7:8a:9b:40:da:04:
         9a:27:81:5d:61:ae:97:54:6a:42:c2:b6:2e:85:74:c1:0b:f9:
         47:c6:69:46:3e:e8:79:5b:fa:95:86:31:4a:05:aa:5d:34:e0:
         67:da:64:da:cd:07:da:ff:2c:16:c4:da:03:ad:bc:cd:6b:8b:
         f7:35:3c:3f:dd:30:c9:07:42:d5:b3:fc:32:81:6b:12:d9:af:
         3b:34:09:47:bb:01:36:56:c4:e6:ea:04:35:00:46:34:da:0e:
         ae:a7:5e:99:9c:71:7b:16:ca:ee:d8:d3:75:dd:45:a3:62:f0:
         2f:d0:fa:61:b1:7e:54:81:67:3c:1f:61:04:e9:6f:97:b5:f6:
         d3:5b:b4:89:2e:a8:5f:56:84:6b:52:f7:3d:b1:1c:57:9f:48:
         3a:74:d5:ce:f2:d4:de:e1:a6:2c:1a:2b:ed:82:54:3b:5f:41:
         56:c9:df:e4:af:cc:57:cc:8a:5e:85:67:3e:a7:ef:cd:28:ad:
         5d:68:5a:e6:e0:05:66:47:1f:f7:64:f7:b1:dc:f9:fe:e6:40:
         2d:b1:96:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy56k6oXOzREAzkrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyNzA1MDAwMFoXDTIyMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
MTFiY2NlMjItNzAxOC00Y2IxLTg5ZWQtMGUxNzI3MTU4ZjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY5zhXQdaV4Q6JEGaPC5mKLSFaxv07av7hf7
knLfxF8JqPP/H1dFJHSVcg4SnuhEb7emBl3KnY2vdLEiBj63vqASM/wlKOEtHK6p
sT+XBB2BDJkcL/tL0yPd/s63vdOcC38++bCx/R2PAC1vVr+WNwe5c3psl5zuRjq8
GFGPQARdMq7xp5k9+Lfa5l5HHj7fwp6w0npSAdCiS7+aTgZpcuQvq7bXcOn8j3Wu
36GaL1o7NoZhqhLjWumRjk6i8n3SUd5CONYczo9I+hXsKSY/l71+lI9/Xi4OPuXc
BT3VNy0or8xkKYncl7RlYikfcu8zthINXxc/DiDCDv81URK0PwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ2YkvA/Fbkdb1w8oYByvfn/HAmQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2M4MjU4MDktNDY5Mi0z
ZmRjLWFiZDYtY2FiNjk2MGE1ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXmFAEgYBdSOa5JxgGQWLcX9WWDie87Db7+ngSNmAHxR7Rzq8uqf9MuHb
1x4Nz53r94qbQNoEmieBXWGul1RqQsK2LoV0wQv5R8ZpRj7oeVv6lYYxSgWqXTTg
Z9pk2s0H2v8sFsTaA628zWuL9zU8P90wyQdC1bP8MoFrEtmvOzQJR7sBNlbE5uoE
NQBGNNoOrqdemZxxexbK7tjTdd1Fo2LwL9D6YbF+VIFnPB9hBOlvl7X201u0iS6o
X1aEa1L3PbEcV59IOnTVzvLU3uGmLBor7YJUO19BVsnf5K/MV8yKXoVnPqfvzSit
XWha5uAFZkcf92T3sdz5/uZALbGWWQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:23 2025 by rpki-client