Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47e6eadc-c649-375d-aaac-1b0b5df14dcd.roa
File:                     47e6eadc-c649-375d-aaac-1b0b5df14dcd.roa (raw, json)
Hash identifier:          cix44FC7U3hCPFsGHwCWNKIaYPArX1t1X5RZPcua1o4=
Subject key identifier:   47:B2:48:25:76:29:60:E5:69:16:0F:06:95:D1:58:EE:DC:32:D9:FD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584051EFC74DCCC3D58B8FBD0080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47e6eadc-c649-375d-aaac-1b0b5df14dcd.roa
Signing time:             Wed 21 Dec 2022 12:00:00 +0000
ROA not before:           Wed 21 Dec 2022 12:00:00 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:ef:c7:4d:cc:c3:d5:8b:8f:bd:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 21 12:00:00 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=4f722094-815b-4bd1-96e3-fe52f672bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:1b:de:53:1f:20:6a:49:b1:63:2d:5c:24:
                    f1:b3:4a:eb:7c:3c:b4:69:ea:bd:68:7b:9b:3a:bb:
                    ec:83:c3:5e:cc:e0:b5:05:17:b8:0c:5a:07:e7:9c:
                    db:63:51:df:c7:89:e9:ce:db:15:8e:bc:16:f8:3e:
                    b4:67:eb:b8:f2:64:79:db:a5:ef:cd:1b:7d:6b:df:
                    31:bc:1a:75:42:36:fd:fc:0b:75:44:ff:b1:c6:b3:
                    64:79:5a:9c:a4:51:a5:fd:dd:07:f0:06:8d:d1:eb:
                    f2:30:20:64:13:07:a6:2f:39:84:64:4b:9a:04:63:
                    4d:e5:58:c8:59:ba:8a:3c:0e:03:26:d4:2e:63:23:
                    42:da:cb:ca:20:47:bd:6a:44:cc:51:3e:2e:b3:de:
                    b3:d8:94:22:97:7f:79:c9:f8:d2:73:aa:8a:17:5a:
                    ef:88:ed:14:6b:d7:eb:de:39:c4:5f:b5:e1:e0:8d:
                    2b:05:95:5d:a9:75:24:11:dc:d5:9c:17:36:eb:18:
                    47:2a:c4:1b:86:8f:58:b8:4c:73:b7:ce:aa:f2:f0:
                    42:b4:e4:6d:9e:c5:21:6d:26:5c:fe:48:4d:c0:9a:
                    7a:3e:93:3d:3e:bb:de:0e:f1:df:a1:35:54:44:4a:
                    c3:07:25:a9:85:a5:81:d7:e5:b1:12:fc:d4:ca:8a:
                    1c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B2:48:25:76:29:60:E5:69:16:0F:06:95:D1:58:EE:DC:32:D9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47e6eadc-c649-375d-aaac-1b0b5df14dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:60:f9:90:da:cb:ee:a7:a7:8e:d0:3c:29:5f:2a:80:c2:
         73:be:0b:22:4b:8a:46:63:51:a8:94:84:4b:b8:e4:d5:ea:2d:
         af:27:bc:68:39:16:1d:be:ff:2b:bf:95:af:82:1d:54:07:4c:
         91:ae:7c:52:f8:e4:bf:f1:a6:f7:47:a5:6f:57:c8:76:dc:a4:
         73:09:fb:94:cd:62:33:14:2f:a3:87:09:f3:52:ef:fd:29:fa:
         16:c5:36:4e:b2:d0:76:aa:3d:eb:cd:a6:fc:19:ea:9e:c9:8e:
         4b:ab:12:15:06:33:dc:9f:61:c9:3a:a0:5e:97:65:40:5b:3a:
         a1:b4:35:99:33:00:96:4e:c2:97:dd:4f:62:31:f0:a7:d5:7b:
         40:99:6d:b3:4f:37:b4:ec:df:e2:14:b5:12:66:cb:d0:5f:80:
         82:04:b0:4a:7b:d5:2b:0d:c9:f5:f0:01:ac:d2:9e:dd:a7:93:
         81:d5:97:b1:ca:51:d4:56:71:ba:47:3f:36:b4:70:46:a7:0f:
         b8:78:9e:5c:38:00:ba:4f:d4:d4:57:7c:a0:08:6e:17:ea:c1:
         90:20:c3:06:c0:a0:34:b7:6f:a2:c7:ba:28:d1:80:92:20:ce:
         b1:cb:73:5b:41:57:ab:68:0b:26:0f:69:3b:5d:bb:5c:b6:0b:
         d4:26:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:30 2025 by rpki-client