Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5aaccd04-c461-34d8-8400-5ad87c9dcc70.roa
File:                     5aaccd04-c461-34d8-8400-5ad87c9dcc70.roa (raw, json)
Hash identifier:          7oz2nBCyE/UVe7pB87c3zlyoe+IIqGp8/T/kGu6sNwE=
Subject key identifier:   52:3C:D9:7C:5E:C6:9D:B5:B6:FB:68:41:9A:4B:48:7F:EE:D5:EA:36
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D2F753BC23DAF6FB9280A5900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5aaccd04-c461-34d8-8400-5ad87c9dcc70.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.248.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:75:3b:c2:3d:af:6f:b9:28:0a:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=9e238fad-854a-405e-9a8b-3e531ffe7bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:48:ce:c4:df:1a:5f:19:b7:ca:84:e6:46:
                    d2:f2:8e:5f:f3:01:33:0f:a1:da:29:5d:c8:b9:27:
                    3d:90:9d:a0:c7:8d:4b:a7:15:8c:5b:d9:b0:f7:f5:
                    b6:e1:37:e6:0d:04:68:5f:82:2e:03:cd:1e:5b:4b:
                    fd:34:38:83:7c:6f:a7:c1:92:ac:97:7a:3d:d8:04:
                    b5:df:b2:56:20:70:a0:4a:8f:da:ba:ce:fd:20:12:
                    d2:1a:f7:a8:4d:d3:ea:6f:21:07:61:d8:db:ef:7d:
                    86:71:be:44:10:d5:12:86:2c:f7:00:7a:21:d5:5c:
                    cb:e3:ea:0b:08:43:a8:5a:93:6d:31:c1:67:e2:7e:
                    7f:fe:ef:6c:81:0b:4f:a9:51:db:38:a0:21:5c:17:
                    cd:c8:53:3e:62:ed:5f:92:4e:61:02:d2:a1:ec:ae:
                    5f:6a:a1:a1:c6:5a:87:c2:e9:d3:9d:c2:b7:e0:b9:
                    91:7a:cf:b7:2f:9c:d2:f7:e6:42:46:fc:e6:8c:46:
                    8f:95:c0:12:68:62:d7:48:b9:97:57:85:43:44:86:
                    43:12:85:42:b2:e7:02:93:13:c1:89:f9:a4:17:56:
                    00:2b:1a:a7:2a:db:26:2c:f6:a6:88:db:be:3e:7c:
                    ee:b1:95:cd:70:36:c1:b8:a2:7b:fb:dc:70:f8:d1:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3C:D9:7C:5E:C6:9D:B5:B6:FB:68:41:9A:4B:48:7F:EE:D5:EA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5aaccd04-c461-34d8-8400-5ad87c9dcc70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:ed:71:84:18:52:60:45:09:99:d3:d5:d0:cb:dd:78:74:
         f6:49:ed:91:94:af:bb:1d:dc:37:b1:61:2f:e5:cf:17:e3:be:
         bf:38:97:e4:d1:cc:8a:21:5a:23:11:0c:53:46:de:3a:01:a6:
         11:97:51:dc:dd:0d:34:17:b2:4c:82:c5:ee:66:95:82:c3:37:
         ef:1a:95:bb:72:fd:79:46:f4:9d:d2:56:55:e7:8c:e6:2d:7c:
         19:83:72:d4:4a:d7:0f:d9:0a:a8:f4:46:cb:7e:03:6e:af:dc:
         11:d4:1f:08:69:06:e9:db:94:e8:26:4a:36:fc:ad:62:23:a2:
         8d:72:0e:53:04:6a:03:8c:cb:51:0c:4e:9c:05:b8:e2:c3:bc:
         81:79:47:f5:83:e0:4c:e0:8c:bb:ea:f3:95:9d:5f:ca:5b:03:
         b0:fb:c3:de:08:4c:66:ec:03:28:1e:07:5d:85:b0:f7:87:74:
         8c:84:db:0b:d4:66:ae:9e:19:24:a4:d6:4f:37:8d:7a:9f:dc:
         a1:f2:b6:29:fe:0e:1e:47:7a:f7:e4:28:5a:80:63:ea:ef:3c:
         40:5f:96:98:be:9c:7c:cf:47:0d:14:7b:de:9a:a7:8d:53:d9:
         3d:ca:bd:43:a6:1e:d4:de:a6:e0:50:02:fa:2d:98:57:f2:9d:
         1e:a1:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:13 2025 by rpki-client