Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f8f4e5c-58ab-3c6e-86dc-11d9ff4c5061.roa
File:                     3f8f4e5c-58ab-3c6e-86dc-11d9ff4c5061.roa (raw, json)
Hash identifier:          3cIxgd117fE2DSLdREH/PpGa9Zm7QfbUZ5QCEPvsUOE=
Subject key identifier:   33:63:AC:CC:FF:8D:C4:92:D1:81:88:1E:9B:0C:92:48:23:B9:18:94
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D2F4184B5C075EB79375D5100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f8f4e5c-58ab-3c6e-86dc-11d9ff4c5061.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:41:84:b5:c0:75:eb:79:37:5d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=910c039e-d631-499f-965f-30187b056d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:cc:a5:e1:3c:e6:0f:06:e9:3d:3f:36:45:
                    05:ed:3e:d8:bc:0d:3e:a8:ae:bd:d1:8d:55:df:8b:
                    f8:8a:5c:06:7f:26:aa:6d:62:59:c3:ab:1c:8c:d8:
                    c1:29:ce:4a:40:55:a0:2e:ab:c3:f5:e7:75:8f:63:
                    60:3b:ca:5d:03:2f:73:07:e8:04:9f:fc:b0:0e:83:
                    cf:5e:bc:ec:23:3c:3b:ea:ca:e3:cc:0d:ea:8a:38:
                    39:98:39:87:c4:98:d7:f1:b6:06:ee:ff:61:b3:be:
                    7e:c5:56:b5:0d:66:57:28:82:ba:df:18:56:64:54:
                    f7:d2:13:98:43:df:02:95:91:16:b3:f0:ac:f3:86:
                    6c:34:bc:1a:0e:a8:d4:ff:8e:39:68:92:77:ae:0a:
                    fc:f8:79:88:25:2a:33:d2:55:26:e1:6f:60:69:c8:
                    8e:bf:88:c4:00:e5:83:bf:26:9f:d2:f0:ca:15:d9:
                    e9:2b:b5:79:55:03:fd:8c:f5:9e:41:c4:43:88:34:
                    4f:07:37:25:0f:82:fb:e9:bd:c2:77:87:7e:c1:5d:
                    96:f5:20:ea:e6:3e:67:db:d6:5d:b1:41:e1:aa:5b:
                    26:98:90:c7:81:c4:5f:0b:a7:75:96:96:33:1c:84:
                    cd:55:a7:e3:35:8c:b9:28:a9:c6:01:53:49:64:58:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:63:AC:CC:FF:8D:C4:92:D1:81:88:1E:9B:0C:92:48:23:B9:18:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f8f4e5c-58ab-3c6e-86dc-11d9ff4c5061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:55:d2:70:71:4d:11:5e:21:83:c8:ae:ed:37:7c:4b:cb:40:
         bb:ba:6f:ff:65:3c:cb:5a:88:37:44:07:9e:b4:b0:f9:c7:5c:
         af:c4:1d:bb:84:41:b3:1d:48:b5:95:6e:9d:5f:68:36:3e:39:
         c0:30:92:2f:ee:23:9b:ba:cb:0d:ac:2e:0b:4c:41:c2:a3:4b:
         f0:60:a3:14:25:7f:01:8e:a7:5d:24:13:17:bd:07:f7:8a:74:
         9b:f4:b0:e2:f3:66:eb:e9:34:84:45:e7:3b:b4:eb:49:ee:3d:
         fc:c3:14:b5:8b:16:c2:e8:f7:6a:65:e7:fc:bc:7c:35:35:b6:
         24:48:04:9a:0d:51:63:4a:2e:7a:a2:24:15:67:d9:ee:bf:75:
         cd:6e:23:36:cb:10:ff:07:71:b0:da:d8:c3:96:45:79:05:50:
         09:40:d1:a1:a1:c7:15:c2:84:7c:d7:c8:11:c7:f3:70:1d:0a:
         ea:a1:1f:c6:81:13:82:62:d3:96:c3:c2:fb:95:5c:d3:b6:79:
         c1:73:1f:76:71:e6:3a:ce:f5:ac:59:75:fb:ed:1e:3b:e9:f9:
         4e:8d:09:8c:2f:14:d6:57:92:16:76:eb:36:74:9a:10:d5:49:
         9c:7a:ba:f6:26:01:56:c1:34:9d:23:48:6f:1e:85:7b:79:1f:
         73:e0:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:51 2025 by rpki-client