Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51b4b519-3112-329c-b344-21b053184367.roa
File:                     51b4b519-3112-329c-b344-21b053184367.roa (raw, json)
Hash identifier:          peNgU46QdBd2pbWjsfXfTWQESNbid4qkaaEB1qRsv9M=
Subject key identifier:   05:0B:24:FE:A0:97:30:7E:D3:A1:F4:D4:89:62:50:02:E3:44:45:3B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F506635D1DEA0887EE65FDB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51b4b519-3112-329c-b344-21b053184367.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.152.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:66:35:d1:de:a0:88:7e:e6:5f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=bcb10eef-1e48-45c1-8562-bd2b28672430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:db:27:6c:1a:a6:08:5b:4f:38:2e:2e:52:
                    27:0c:4a:25:19:d2:38:cb:66:49:8b:d3:e4:ef:fb:
                    43:4e:30:70:c6:33:3a:6e:39:bb:95:b2:1d:37:ff:
                    02:fd:77:01:cf:af:77:38:d6:52:e8:1a:41:a2:ee:
                    e0:80:9e:dd:f9:5a:4e:e6:96:e2:4f:a6:54:ec:ee:
                    7d:16:44:c9:2f:a0:8a:9c:09:d2:f6:01:66:71:09:
                    a0:5d:c6:46:cc:ba:e5:29:55:0c:d0:43:c8:d6:4d:
                    80:da:ab:75:24:c9:52:81:e5:98:94:a9:f9:79:08:
                    c8:3b:ed:06:69:dd:59:d2:6c:1a:24:77:42:42:19:
                    97:21:89:f9:51:df:2c:3b:85:01:b6:0c:30:d0:25:
                    68:df:f7:3e:3d:8f:aa:40:83:b2:7f:c6:20:94:bf:
                    3c:fb:94:0f:56:4f:71:64:f6:34:ab:76:2e:6d:e7:
                    3d:ab:2f:d9:47:1d:0f:bb:7f:ce:6e:1d:21:ca:a6:
                    37:ef:55:b5:5f:a4:d5:f9:b3:b8:cd:9f:e1:cc:66:
                    bb:4b:44:7f:2c:d6:40:ce:2a:d1:3f:5d:1f:41:dc:
                    da:6c:52:90:0d:b7:8f:27:60:fd:c8:c3:55:cb:4a:
                    79:46:d7:51:2d:24:7d:b9:1b:a2:1d:7c:e0:2f:df:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0B:24:FE:A0:97:30:7E:D3:A1:F4:D4:89:62:50:02:E3:44:45:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51b4b519-3112-329c-b344-21b053184367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:f7:f6:3d:0c:42:41:4f:18:de:c3:b3:79:7a:9f:50:90:
         d5:e0:b8:c4:40:14:02:f9:fa:20:65:c7:a6:fd:8e:18:9b:fa:
         5f:ca:dd:ff:bf:ce:63:99:73:48:9d:ec:6a:1c:85:c5:33:8f:
         54:d4:c9:ea:c0:be:9e:9b:4c:f6:d3:7e:66:f8:6a:52:10:db:
         c4:e1:2f:ad:83:e4:f3:bb:53:ff:e4:52:3a:1b:43:9b:05:a6:
         a3:49:9b:2d:53:f1:a3:75:b2:de:4e:ea:9d:ec:7c:4b:39:10:
         fe:ca:75:66:f6:c5:49:ec:ea:72:ed:16:f6:76:ef:3a:a9:e5:
         2b:96:45:ce:5c:fe:77:6a:8f:95:23:a3:f6:b6:3b:3b:00:8c:
         6d:2a:6e:66:6e:9a:25:ce:50:2e:49:43:c9:d7:35:a1:d5:aa:
         bf:f8:62:89:3d:77:36:b0:8e:78:f4:19:14:f1:e9:74:ad:29:
         12:fe:73:f9:0c:6f:52:c4:86:dd:73:b3:ea:14:f3:69:19:68:
         b2:08:a2:8c:cb:66:7e:69:48:35:f3:b5:21:7a:a7:26:11:25:
         19:54:46:49:e3:68:39:f9:43:18:a1:cb:df:33:1e:ad:ed:5c:
         b7:be:2f:07:b5:6f:d1:e6:73:87:1f:5f:d2:cd:c0:d1:d5:0a:
         57:d1:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:36:14 2025 by rpki-client