Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54156d99-99a1-374b-9603-af23a5b44913.roa
File:                     54156d99-99a1-374b-9603-af23a5b44913.roa (raw, json)
Hash identifier:          f2IWnetWHu+Hu7S0BT+PVrVVOAhgZCNltlg8peSjhzo=
Subject key identifier:   81:C0:24:4D:38:E9:D9:A2:00:DA:03:A9:99:26:07:5B:2C:2C:2C:D2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584051A52A0A25965AAB72923080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54156d99-99a1-374b-9603-af23a5b44913.roa
Signing time:             Wed 21 Dec 2022 12:00:00 +0000
ROA not before:           Wed 21 Dec 2022 12:00:00 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:51:a5:2a:0a:25:96:5a:ab:72:92:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 21 12:00:00 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=5d80ae7d-67be-429d-a6e6-d7734b2ee785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:7f:8e:af:72:82:7a:37:5a:78:44:5c:6f:
                    99:75:35:c8:e7:f0:b1:b1:ad:7d:2a:cd:4c:40:91:
                    ec:c1:b7:7a:f7:da:d0:b1:db:98:2c:a5:e6:a5:b7:
                    97:12:11:61:a5:f1:b4:5b:f4:9c:2a:9d:e3:df:2f:
                    d5:5d:36:e8:f1:b6:72:f5:c6:65:80:af:67:85:25:
                    ad:ed:85:0c:9e:68:50:93:88:71:8e:88:40:ff:0e:
                    d8:e3:97:21:ae:fe:e3:dd:f9:d2:04:ed:06:10:75:
                    20:cc:42:6d:e9:4c:c7:81:c6:6c:dc:b1:52:24:86:
                    a8:20:df:17:4d:3e:83:cc:ea:31:af:30:1a:8d:63:
                    d8:c1:74:31:b6:51:0b:fe:44:fa:b8:df:e9:e9:90:
                    27:67:af:a8:7b:72:16:7e:05:80:55:8a:d8:06:46:
                    04:b5:f4:90:10:1a:e3:7a:05:f2:dc:02:ac:90:40:
                    57:4f:7e:36:a2:bc:7b:73:74:71:fa:4e:93:ea:d7:
                    5b:11:81:28:1d:e9:97:08:d6:31:c1:22:aa:17:65:
                    60:fb:ec:45:a2:12:14:bb:c7:a1:8c:c3:32:f0:96:
                    74:a3:e5:27:59:dd:a1:bb:3d:c9:3d:3b:7a:4c:26:
                    e4:f6:31:d9:da:95:b1:c2:fd:75:53:55:e0:ab:90:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C0:24:4D:38:E9:D9:A2:00:DA:03:A9:99:26:07:5B:2C:2C:2C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54156d99-99a1-374b-9603-af23a5b44913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:d7:8e:b2:ee:02:40:03:6f:69:e5:11:a8:72:2a:f5:23:
         d9:b5:5c:4d:3a:f1:fb:83:62:ba:7e:70:45:6f:bc:97:72:53:
         8a:a8:e8:1a:4c:00:1c:3b:88:54:74:2c:be:55:0e:22:1a:ec:
         5f:cd:f8:e4:a7:e4:96:ba:e7:95:95:38:08:32:06:26:43:a8:
         f5:9a:15:66:61:44:a5:77:42:99:37:92:d1:48:dd:74:30:6e:
         36:d0:37:ba:de:81:a8:ad:e4:ee:32:12:a2:3b:0b:5f:71:0a:
         dc:69:ff:dd:40:1d:fc:3d:58:d7:0c:2d:f4:a8:66:01:fc:bb:
         5d:39:06:b8:7d:8f:0f:69:80:ad:36:2d:25:ea:6f:7b:1c:f1:
         0f:c9:a7:fc:72:84:8d:47:d3:d6:44:63:f7:65:21:92:e3:33:
         e4:14:df:dd:a0:df:09:02:dc:18:76:8f:31:ca:48:92:7f:51:
         af:c7:c1:30:02:51:f8:8f:cd:9b:79:ea:2c:fa:57:93:70:bc:
         04:18:e7:5f:6d:40:eb:13:d1:52:aa:72:93:5c:7a:ef:d9:ab:
         30:d2:aa:c9:c5:31:21:6f:23:cc:27:ae:be:e5:44:e5:2b:21:
         75:25:96:75:ae:17:f5:7c:a5:ff:84:2e:9d:fc:86:b1:b1:06:
         7c:19:6e:dc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBRpSoKJZZaq3KSMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyMTEyMDAwMFoXDTIzMDEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
NWQ4MGFlN2QtNjdiZS00MjlkLWE2ZTYtZDc3MzRiMmVlNzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr9/jq9ygno3WnhEXG+ZdTXI5/Cxsa19Ks1M
QJHswbd699rQsduYLKXmpbeXEhFhpfG0W/ScKp3j3y/VXTbo8bZy9cZlgK9nhSWt
7YUMnmhQk4hxjohA/w7Y45chrv7j3fnSBO0GEHUgzEJt6UzHgcZs3LFSJIaoIN8X
TT6DzOoxrzAajWPYwXQxtlEL/kT6uN/p6ZAnZ6+oe3IWfgWAVYrYBkYEtfSQEBrj
egXy3AKskEBXT342orx7c3Rx+k6T6tdbEYEoHemXCNYxwSKqF2Vg++xFohIUu8eh
jMMy8JZ0o+UnWd2huz3JPTt6TCbk9jHZ2pWxwv11U1Xgq5CxYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIHAJE046dmiANoDqZkmB1ssLCzSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTQxNTZkOTktOTlhMS0z
NzRiLTk2MDMtYWYyM2E1YjQ0OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6cwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYuvXjrLuAkADb2nlEahyKvUj2bVcTTrx+4Niun5wRW+8l3JTiqjoGkwA
HDuIVHQsvlUOIhrsX8345KfklrrnlZU4CDIGJkOo9ZoVZmFEpXdCmTeS0UjddDBu
NtA3ut6BqK3k7jISojsLX3EK3Gn/3UAd/D1Y1wwt9KhmAfy7XTkGuH2PD2mArTYt
JepvexzxD8mn/HKEjUfT1kRj92UhkuMz5BTf3aDfCQLcGHaPMcpIkn9Rr8fBMAJR
+I/Nm3nqLPpXk3C8BBjnX21A6xPRUqpyk1x679mrMNKqycUxIW8jzCeuvuVE5Ssh
dSWWda4X9Xyl/4QunfyGsbEGfBlu3A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:03 2025 by rpki-client