Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5860888a-33ef-35b8-8efe-06e845f2d92d.roa
File:                     5860888a-33ef-35b8-8efe-06e845f2d92d.roa (raw, json)
Hash identifier:          EcIfsQdo5u/+NVBkV8qr1Fpwz/DLhzb44I5Wm4peCCU=
Subject key identifier:   EF:15:CF:90:3C:45:4D:81:99:3D:B4:BD:7D:E7:36:17:1D:D8:BC:7C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E05AA761F9993347B46BD2540
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5860888a-33ef-35b8-8efe-06e845f2d92d.roa
Signing time:             Tue 24 May 2022 12:00:00 +0000
ROA not before:           Tue 24 May 2022 12:00:00 +0000
ROA not after:            Wed 29 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.250.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:05:aa:76:1f:99:93:34:7b:46:bd:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 24 12:00:00 2022 GMT
            Not After : Jun 29 04:00:00 2022 GMT
        Subject: CN=7059450e-9727-4e10-b730-2f10f64b0660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:5b:e2:bb:d4:d0:bd:bb:cf:6a:09:5e:d3:
                    0f:ab:e0:26:48:c4:d5:b5:c7:5b:9b:58:44:26:38:
                    1f:69:33:90:f5:16:f6:87:69:0a:87:16:3f:17:fd:
                    dd:4a:18:fe:e1:30:c5:e4:60:a1:b2:5d:99:27:e0:
                    3d:83:e7:a0:05:30:dc:6d:5b:05:c9:03:f0:5b:c8:
                    18:ef:6c:1a:31:d0:55:f3:42:b8:d3:14:77:3e:fe:
                    40:b2:60:c1:36:b5:a1:53:b9:3c:e6:c2:2f:c8:f9:
                    5e:55:3c:8f:19:32:9f:50:a2:e8:b2:87:92:2e:de:
                    c7:05:0b:de:6b:2e:42:51:bb:f8:52:d8:90:6b:09:
                    b7:bc:b8:2e:d1:5f:b1:26:46:1d:96:4a:95:b9:89:
                    52:8e:2c:75:6e:10:66:2b:6c:ff:99:d4:45:a5:1b:
                    e3:24:b4:ad:1a:9a:bf:55:e3:ae:30:41:b8:53:0a:
                    00:3a:a8:57:44:7f:5a:3c:5b:eb:d2:10:d2:8d:08:
                    e7:18:b3:68:04:02:d0:72:37:cb:ce:03:49:ea:5a:
                    42:38:e7:f0:b4:79:5a:1c:4e:92:7c:d4:38:ef:45:
                    7f:6e:5b:c2:a3:65:df:97:8d:30:c7:b9:7b:85:a4:
                    3a:ed:56:bb:7c:3a:f0:68:c5:71:f8:94:c0:cf:9d:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:CF:90:3C:45:4D:81:99:3D:B4:BD:7D:E7:36:17:1D:D8:BC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5860888a-33ef-35b8-8efe-06e845f2d92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:77:56:23:06:02:5a:82:df:49:59:e3:a3:7a:ae:8a:c5:
         ae:8f:25:11:fc:f2:84:79:77:ce:06:6c:25:d9:9c:c8:01:09:
         60:50:34:57:c4:b9:ec:46:bf:04:07:a9:26:fb:f9:b9:09:cf:
         82:cc:a7:0a:93:96:b2:84:8b:25:36:6a:d4:62:63:12:00:fd:
         65:f0:92:3e:3e:30:24:dc:17:c2:bf:21:0f:7d:fa:93:18:7f:
         63:74:a9:29:0f:fb:a2:28:c7:5b:ba:17:73:75:78:31:fd:c7:
         2a:7e:c7:4e:5e:60:39:b8:ec:7b:5a:87:41:1d:b3:c5:4d:4e:
         46:9b:72:8c:c8:f2:0f:d3:57:7d:37:c9:df:df:5b:2e:c9:6e:
         ca:51:7e:86:bf:26:3e:fe:81:f2:e6:40:b1:d4:50:71:87:6d:
         21:76:0d:85:99:b7:c0:86:c6:41:d1:fa:e3:9e:b9:75:15:cf:
         9b:01:f3:62:1a:61:5d:da:7d:a9:6a:dd:36:63:3b:f5:1f:06:
         02:30:f4:79:1e:1d:04:df:40:fc:02:6e:e7:29:dc:84:79:ae:
         ee:44:4d:b3:09:df:e8:35:0f:51:c6:98:68:78:39:9c:b9:73:
         17:da:73:eb:76:e9:33:4a:01:72:f2:57:c5:81:a3:81:a1:5c:
         68:d1:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:12 2025 by rpki-client