Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40f5cf0c-0002-38bf-856a-4af6a0434110.roa
File:                     40f5cf0c-0002-38bf-856a-4af6a0434110.roa (raw, json)
Hash identifier:          iytMYEwUVqMbnPfjp7EKhnp/AdvhYo4lQFSEJmGOkoQ=
Subject key identifier:   8B:36:1B:76:A8:7F:08:F2:41:77:BA:C2:0F:22:F1:8A:1C:9E:06:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FEFAC729722E9EA598A0F8490
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40f5cf0c-0002-38bf-856a-4af6a0434110.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.184.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ef:ac:72:97:22:e9:ea:59:8a:0f:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=fb69f560-fea1-421f-b710-043f0c08570f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:a2:f5:ae:93:85:96:4a:2f:c8:58:00:cf:
                    e4:9c:69:ec:01:77:46:5f:34:f7:9f:7b:ca:ff:06:
                    a5:0e:62:18:1c:84:2e:0b:06:0e:de:40:04:22:12:
                    ef:71:3a:34:48:cb:c5:56:7c:3c:84:af:59:57:ad:
                    57:d0:e6:e6:10:03:2c:82:17:22:ba:7d:99:87:98:
                    7d:7a:9d:e1:44:9d:c4:40:6c:d8:20:c1:14:60:92:
                    fc:6f:a3:9c:ec:04:fe:38:b3:4c:b0:e3:a2:fe:dd:
                    60:f6:b2:74:44:f2:46:4d:37:bc:8c:cc:c6:c9:86:
                    6d:20:2f:ad:ef:5d:9d:8a:73:31:85:6a:8c:16:aa:
                    61:e4:e1:56:90:1a:1f:35:cf:f7:ed:4e:91:26:f4:
                    f4:10:1a:4a:b5:c6:c6:27:15:d6:e4:d5:34:09:70:
                    5c:3e:1d:26:c5:61:73:9f:9b:e1:81:26:ce:6a:d6:
                    e9:2b:fe:d0:c8:4b:a6:c7:8e:9e:f9:ed:df:b8:0e:
                    74:fb:88:e1:26:4f:79:6f:12:7a:4e:ca:a4:a5:9f:
                    bb:71:4e:c2:8c:76:73:32:3a:ce:c4:51:e1:58:bc:
                    2d:b3:44:dd:9e:a9:77:e3:07:c2:e2:ec:89:ee:7b:
                    d5:84:76:0b:e9:94:f4:1b:fa:ac:04:ad:c6:6a:6c:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:36:1B:76:A8:7F:08:F2:41:77:BA:C2:0F:22:F1:8A:1C:9E:06:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40f5cf0c-0002-38bf-856a-4af6a0434110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:cd:77:2a:c0:e4:16:5e:21:7c:45:14:fe:45:6f:7d:f0:8b:
         59:00:2c:24:07:11:6c:b5:dd:72:84:df:14:51:eb:45:2f:20:
         f6:b1:4b:96:b6:93:79:9e:7a:f7:1a:82:5d:df:62:c0:ef:44:
         9a:02:d4:cb:70:8a:68:98:8d:a2:33:a0:4f:53:30:76:eb:7c:
         fd:08:9a:bc:d9:bc:0b:a9:2b:65:b3:b7:f9:34:82:be:81:7d:
         22:84:db:b5:f0:97:98:a3:98:ba:29:84:d2:22:89:0d:1e:f4:
         3a:3b:2e:3b:14:fb:d7:39:6d:a9:e2:ea:47:8c:27:74:00:d0:
         c8:49:9b:12:2e:04:b0:e0:3a:6f:24:26:91:30:5b:aa:18:63:
         6c:1a:7e:9f:b9:97:f1:6f:eb:57:6a:ae:08:b7:b2:27:ad:24:
         0b:04:af:2d:4d:52:7a:cf:95:8e:d5:25:dd:5b:75:32:fc:e8:
         5d:4e:2a:62:c8:b0:5e:f0:29:6c:55:fd:7e:52:ef:3c:f9:22:
         9a:13:6c:d5:67:ac:9d:36:16:0e:43:5a:97:4f:d4:2f:67:0f:
         f0:90:de:a0:5e:34:6d:23:66:fa:4e:1f:b6:e2:a9:5d:c3:6a:
         7e:da:76:c4:3c:38:e0:a1:0f:47:81:bd:d3:1d:5b:22:2f:45:
         1e:9a:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:32 2025 by rpki-client