Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69a4a944-82fe-3375-b00c-a135524e6ae8.roa
File:                     69a4a944-82fe-3375-b00c-a135524e6ae8.roa (raw, json)
Hash identifier:          6MvcVxHyD4WWrx62pCta6Q1vc8DWxjLNGcHxpSX04vA=
Subject key identifier:   A3:68:79:C8:C9:E3:90:DA:11:D9:94:2E:F3:40:7C:68:85:1A:D4:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8E662721E8107FD3D0D7A348
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69a4a944-82fe-3375-b00c-a135524e6ae8.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:66:27:21:e8:10:7f:d3:d0:d7:a3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=ecd0e8a5-a537-4ae5-86e6-6535bf3279cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:f6:98:c7:2f:e9:20:b9:1d:f3:2a:30:5b:
                    ca:2b:26:34:e7:87:f1:fc:b2:0d:28:3f:5b:22:f7:
                    02:d3:ba:cc:2d:39:06:c3:0d:fa:b1:50:f8:29:30:
                    b1:6c:3a:2b:47:39:d1:8d:c9:1e:25:57:3b:8b:54:
                    10:9e:a1:24:4a:b2:0f:bc:b8:25:55:f0:7c:34:e2:
                    d3:9b:d6:f0:6d:11:e2:c2:1a:71:21:59:da:c3:20:
                    8b:fb:4e:2e:68:bf:79:f4:4f:63:aa:94:38:44:c5:
                    ca:13:50:f8:48:b2:5a:b0:01:69:03:cb:c1:0c:ad:
                    b7:7a:e1:6a:f2:fb:ad:85:b2:18:e5:7a:ea:e8:38:
                    8b:fa:06:cb:cd:e6:0e:2d:9e:c6:77:47:65:55:ac:
                    a5:55:65:27:f9:2c:37:b5:f0:4b:ee:e2:5d:b5:fa:
                    05:57:9b:36:17:e7:08:15:a6:32:17:f9:de:8e:36:
                    55:11:0a:b1:75:98:75:19:b9:7a:66:83:56:95:d6:
                    87:25:ca:bf:58:cb:26:25:fa:15:b9:46:3d:61:8f:
                    82:04:6f:81:5b:75:20:63:ad:09:b0:24:ba:dc:b6:
                    8d:2d:d6:1d:3a:3f:a5:af:ae:c4:37:36:05:d4:3e:
                    0f:94:eb:ec:ad:21:de:47:c5:0b:63:02:69:5a:3f:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:79:C8:C9:E3:90:DA:11:D9:94:2E:F3:40:7C:68:85:1A:D4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69a4a944-82fe-3375-b00c-a135524e6ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:69:0e:98:08:6e:75:11:f5:f1:4d:4f:61:51:48:fe:ad:4f:
         a9:a1:1a:f6:f3:6b:9f:df:68:86:b2:31:1c:44:78:12:d3:22:
         82:cf:1e:f6:82:cd:71:ed:78:f2:41:27:0f:51:08:ad:93:06:
         b4:eb:df:37:6c:8d:66:81:77:d7:dc:a0:3c:6a:94:21:36:e5:
         62:ef:40:18:96:3b:df:75:87:9d:fc:ae:ca:06:41:71:26:21:
         e5:fd:fe:5a:50:76:44:ba:00:48:68:48:4a:dc:f7:63:17:31:
         67:7e:5d:e3:a5:b8:32:ff:76:95:2b:a0:bb:85:a7:04:60:90:
         e4:c5:aa:66:73:d0:14:f3:b3:4e:61:d4:79:85:c1:1f:92:65:
         6e:1f:59:3c:1a:ae:ef:cc:dd:7a:49:f9:f6:7a:07:01:49:3e:
         a2:ec:5f:e0:cd:c8:bf:27:82:c1:88:52:82:d5:0f:9f:2c:e8:
         3b:45:c0:bd:4d:c0:7c:55:dd:1a:91:44:5c:21:4d:f6:b0:36:
         31:0b:64:52:ee:7e:99:89:ac:e2:05:8a:13:64:d8:d2:71:59:
         76:c9:61:61:d5:80:2e:57:a0:e3:e2:06:ae:64:0d:01:40:b7:
         6a:4b:a4:e3:40:a2:b4:ae:12:ab:c3:41:bd:17:4e:c7:b2:53:
         c8:ea:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:53 2025 by rpki-client