Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5616a038-de4c-3ae8-abfe-bfd857611a76.roa
File:                     5616a038-de4c-3ae8-abfe-bfd857611a76.roa (raw, json)
Hash identifier:          GgBv20c3eqXmc6X5R4yUG37fYI8kfPjGOBXgozoKScY=
Subject key identifier:   21:BB:18:4D:A8:EA:16:4C:FA:72:AA:91:01:69:A8:C4:74:D8:C2:CF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3E9292A9475E40239E3AE180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5616a038-de4c-3ae8-abfe-bfd857611a76.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.250.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:92:92:a9:47:5e:40:23:9e:3a:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=4140e4a4-e8fd-4e47-af55-764806478b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:13:21:24:a9:86:36:2e:43:d0:b8:3a:80:
                    6f:c1:9e:6d:88:83:09:2b:e9:5a:92:da:d6:54:64:
                    3f:69:46:e5:54:37:d0:6a:da:fc:a6:05:d7:1d:ad:
                    88:79:67:49:09:db:38:e9:7e:ae:a3:49:3a:11:3d:
                    be:c4:c0:71:6a:48:b4:3f:94:f8:7a:7f:13:05:32:
                    1e:8a:94:ba:e2:61:b6:1a:3b:98:97:fc:3e:78:84:
                    ac:e2:22:23:11:87:49:87:04:b2:6f:38:76:28:3d:
                    5f:7f:5e:8b:ac:fb:f4:5e:be:dc:f8:5a:4b:1d:52:
                    9c:c5:d6:c0:c2:46:ad:42:b6:da:9e:3f:84:40:72:
                    e8:75:f9:f0:cc:84:94:70:f4:f0:86:fc:24:db:16:
                    d2:dc:72:5e:da:3a:65:26:b1:cb:7c:19:da:86:bb:
                    9c:8c:58:24:eb:eb:5e:64:c1:ff:50:e6:f2:2d:8d:
                    55:6b:e0:1e:63:86:21:d3:95:db:09:dc:f8:d1:83:
                    43:0e:c4:d1:d5:34:d5:4b:1f:f1:c7:b8:c7:9e:f1:
                    30:91:72:54:91:82:b4:a4:6b:cb:59:ba:21:fd:25:
                    9a:17:92:4a:05:c4:44:a4:cd:f6:d2:a9:36:f0:94:
                    fe:62:2f:e3:72:ce:56:8d:de:78:2e:77:a8:02:d5:
                    c2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BB:18:4D:A8:EA:16:4C:FA:72:AA:91:01:69:A8:C4:74:D8:C2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5616a038-de4c-3ae8-abfe-bfd857611a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:66:38:87:ec:1c:a8:65:68:f7:d6:7e:e8:2f:9a:69:13:6b:
         ff:9f:4e:33:81:01:e9:4a:85:34:e1:69:80:36:c5:87:0e:1e:
         17:01:44:c6:53:7d:03:83:36:1e:0e:4c:6e:4c:88:a2:94:66:
         b5:3f:b6:27:c7:b2:a6:90:5d:d5:33:b7:35:96:15:4b:2a:3a:
         68:2b:ed:ec:8b:e4:9b:70:dc:ac:aa:2b:d4:5b:17:5f:1d:d5:
         96:c3:c5:46:fb:4b:48:ef:45:79:e3:8a:6b:b0:8c:97:47:4b:
         de:6f:61:05:57:67:df:12:ea:52:4f:e1:5a:eb:c5:77:a6:48:
         fb:99:bb:64:d5:5d:0a:72:e4:7c:4c:28:c0:2b:9f:04:3e:e4:
         d6:34:b4:83:e5:0b:be:89:e6:3b:c5:b2:f8:75:79:73:f3:f4:
         19:81:09:29:b6:e2:02:92:c2:1c:11:75:44:ad:db:db:db:83:
         93:bb:af:8c:d1:27:96:ed:97:fb:65:e1:dd:47:7f:4d:8e:1e:
         71:b3:f6:49:f3:af:da:b7:72:7e:6e:bf:e1:a8:05:60:c3:72:
         37:af:05:75:92:12:b3:a2:0e:07:ab:38:fd:50:b9:8b:47:cb:
         81:83:2a:86:a4:93:be:b0:c8:9a:44:e7:3f:a0:38:42:a6:28:
         e9:15:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:01 2025 by rpki-client