Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60afd13a-2544-341a-b690-526779fdeb31.roa
File:                     60afd13a-2544-341a-b690-526779fdeb31.roa (raw, json)
Hash identifier:          CCIYSJWswuUEzcO43g1WEFPyHR8TtKK+4caeHR1NyYs=
Subject key identifier:   7F:1A:5B:4A:DB:B6:09:77:BD:4D:FE:30:16:C2:FB:42:06:32:4D:32
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CB9F20B088D79C6A48F886080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60afd13a-2544-341a-b690-526779fdeb31.roa
Signing time:             Thu 27 Jan 2022 05:00:00 +0000
ROA not before:           Thu 27 Jan 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b9:f2:0b:08:8d:79:c6:a4:8f:88:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 27 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=6425a828-0a25-4084-b0c6-a65dd5d57bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b2:8b:02:49:ac:33:ee:cc:15:2d:a4:25:b1:
                    b6:67:28:70:2e:ec:89:0c:81:d4:d5:5a:80:e6:81:
                    1b:4f:01:96:74:e9:cb:3e:fe:99:3f:7a:75:c6:24:
                    f9:74:7c:80:75:a9:5e:b0:32:60:e8:fa:0b:4b:4b:
                    37:ac:9e:89:97:93:27:fe:06:d9:7a:c6:3d:33:65:
                    88:4d:0b:a6:ff:b0:6c:d4:97:1d:ff:6a:5a:a0:52:
                    09:ec:1e:27:fb:c2:d0:91:87:72:a9:db:a9:c8:2e:
                    5d:22:a2:45:08:f0:46:0f:bc:6d:0e:0b:37:96:0d:
                    f0:b7:08:d1:55:f7:bb:2f:50:3e:2a:76:f1:44:fd:
                    37:b1:07:f4:34:f7:a8:eb:cb:02:c7:82:b2:89:be:
                    a1:ad:c3:5d:f5:f4:2e:d9:fc:89:f7:46:5d:a3:fb:
                    f4:93:08:1b:7b:d9:9e:5f:52:bc:14:c5:7d:1a:ab:
                    57:2f:c7:c9:07:2f:e7:89:ed:d9:4f:87:47:79:88:
                    b1:e6:0a:ec:99:65:a8:d8:2d:d6:5e:f5:6d:2d:c8:
                    6a:cb:44:03:c0:6f:3f:05:9c:14:bf:fb:43:25:b6:
                    7f:45:dc:11:87:85:95:31:71:57:39:b9:fa:fc:38:
                    67:3c:0d:8b:fd:8f:99:1a:61:9a:00:ce:0c:b7:e3:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1A:5B:4A:DB:B6:09:77:BD:4D:FE:30:16:C2:FB:42:06:32:4D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60afd13a-2544-341a-b690-526779fdeb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:8c:2c:f9:0b:07:21:c5:77:f8:15:7b:1a:25:ab:b6:9c:
         f1:52:83:d7:89:ea:ed:c5:90:64:ae:da:21:3d:45:c9:b3:46:
         b8:c0:38:e6:b8:3f:88:b3:21:6b:9a:53:fd:3d:39:d5:97:cc:
         bc:82:11:ec:7d:c6:92:f8:d0:ee:e8:38:17:65:57:f4:a2:92:
         00:c1:c7:ac:8b:31:a3:0f:2f:4e:5c:7e:c4:73:00:15:db:91:
         53:11:e7:e6:c2:eb:81:c9:87:fb:2d:99:0e:a9:6c:1f:12:bc:
         e5:c7:13:69:fa:5d:b6:1a:81:61:db:32:41:00:ee:91:38:23:
         97:30:0f:75:8b:5e:f4:f6:13:e2:9b:dd:65:e6:37:02:e2:72:
         8b:19:29:4e:c2:49:4e:a9:a5:29:9c:fc:a4:c2:a5:be:e1:d6:
         9f:93:f3:9c:09:f8:da:14:50:dd:d7:62:d4:b1:62:db:f9:cb:
         47:ff:4d:1d:07:5d:93:5b:7b:a4:37:22:ab:21:e3:1a:dd:f0:
         27:75:db:e7:ae:e4:04:44:3e:5e:22:f3:b0:b4:f1:ee:2a:49:
         99:36:4e:ce:7b:4f:d8:60:2c:70:50:fd:62:50:8e:1a:88:b2:
         7a:eb:c5:14:4f:a0:69:1c:f7:3c:c8:69:e4:09:8d:e2:8d:81:
         c0:e4:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:07:20 2025 by rpki-client