Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ff2d440-36a6-3bd6-9dcf-6cafbc7dbf95.roa
File:                     3ff2d440-36a6-3bd6-9dcf-6cafbc7dbf95.roa (raw, json)
Hash identifier:          ny0XMs8zvdf9a17EIEppzcu4jPFGn0z+mTY/9pv5e5U=
Subject key identifier:   80:F3:6F:BE:5F:E9:C6:40:10:16:EA:90:AE:B0:0D:F3:28:57:BE:D1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858407852B9A8006DE9C3E58EDE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ff2d440-36a6-3bd6-9dcf-6cafbc7dbf95.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.133.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:52:b9:a8:00:6d:e9:c3:e5:8e:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=eaf63dcc-4ef1-4a74-a37e-5640e30ba934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:c3:ac:55:45:56:8a:4b:28:53:09:ad:b2:
                    68:de:71:eb:3c:04:49:be:70:51:34:76:d1:9c:44:
                    b3:d5:65:72:fb:52:65:f2:4e:ed:e4:cf:46:ac:19:
                    0e:62:ea:cb:71:a4:99:cd:ac:4e:12:1f:44:7c:9c:
                    95:f3:b4:52:b0:41:5a:b3:fb:64:92:0f:8c:5f:47:
                    f5:f4:d5:bd:7c:f5:7f:5f:8c:3f:bb:43:26:15:de:
                    7e:40:56:e8:d0:96:fd:33:5d:dd:01:c3:a9:6c:0d:
                    ad:59:8b:3f:73:32:13:0c:22:9e:84:8b:57:ef:df:
                    0a:80:f4:d1:73:c0:3c:07:43:fc:9e:f1:e4:11:2e:
                    94:f8:dd:47:42:7e:3b:f1:e6:ed:d0:95:c3:9a:b7:
                    8a:5a:8f:3c:88:69:c6:c5:ab:dc:c0:77:ce:c6:11:
                    45:ee:85:33:64:fb:5d:89:92:f1:7a:2e:29:75:1f:
                    9e:cf:78:36:41:74:76:8f:07:89:d5:18:bb:a1:3b:
                    51:11:50:ad:8e:49:06:08:9e:b9:ca:77:9f:d9:b0:
                    65:03:91:e2:5f:81:f0:9d:4d:2a:05:56:1f:bc:e5:
                    cf:7e:ec:f0:ce:01:ca:70:cd:8b:a3:a8:17:22:a2:
                    d6:26:c8:b7:cf:c3:f5:2d:58:c9:69:be:ae:22:ae:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F3:6F:BE:5F:E9:C6:40:10:16:EA:90:AE:B0:0D:F3:28:57:BE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ff2d440-36a6-3bd6-9dcf-6cafbc7dbf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.133.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:a9:7e:35:4c:5c:39:37:e6:ed:15:6b:59:22:58:26:21:
         1e:e0:cc:ad:1f:1d:a9:bb:6f:78:bf:7d:ac:d2:fe:60:07:6d:
         a9:fe:a6:b8:d7:46:44:aa:e7:54:e3:d4:30:83:c5:c7:0b:89:
         2a:49:0a:be:47:4b:09:44:d4:59:8d:dc:dc:cf:4a:ce:d4:2f:
         c9:cc:0c:78:d7:20:24:90:5b:b9:a2:9d:e5:8f:b1:a0:e0:71:
         de:7f:d1:e7:ce:1e:26:cf:d0:a9:36:da:94:0b:bc:06:db:39:
         c1:b8:20:29:1d:9d:51:f1:f1:c3:88:72:ab:2f:2f:65:8b:94:
         36:16:02:b2:b3:da:9a:1a:b9:5d:e0:41:30:9b:34:32:3f:be:
         d0:6f:47:a4:c2:28:1a:ef:ba:b4:81:6b:9d:38:b3:df:04:61:
         8d:bc:a7:b1:ac:4d:ef:09:0c:c1:0e:5b:a2:ae:46:69:7b:8a:
         6f:aa:37:c6:f0:cf:4f:07:4a:44:ea:d7:71:af:1a:0c:75:d3:
         e0:af:ec:52:44:86:92:13:ff:7e:fa:18:d0:5f:fd:29:e7:74:
         09:06:d1:c4:14:78:a0:89:4f:7f:0e:0d:ca:13:89:c4:d1:73:
         46:02:c7:d9:21:96:2d:47:b9:41:2c:f2:78:96:44:83:bd:d6:
         51:c4:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:09 2025 by rpki-client