Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b165c6a-1e0d-3a53-959e-0f5de10f4221.roa
File:                     6b165c6a-1e0d-3a53-959e-0f5de10f4221.roa (raw, json)
Hash identifier:          F2Dsk09gn69tvsHfRQ0J/9FWJU/YUX+NWYWHXT5coVg=
Subject key identifier:   7B:BB:0B:CC:04:BB:58:02:A4:F3:4F:F4:56:FF:69:BF:F6:79:EB:39
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E19E7C1DCDEEB2C6DBDD1E900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b165c6a-1e0d-3a53-959e-0f5de10f4221.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:19:e7:c1:dc:de:eb:2c:6d:bd:d1:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=8c79d866-4ab7-4a84-9f3b-560337b0e0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:65:15:69:c0:9e:1c:6a:f6:fc:81:d9:e6:
                    16:93:eb:50:09:fe:f4:cd:b7:1c:23:47:e9:94:36:
                    b7:4a:6e:14:1c:a7:e4:92:57:b4:54:c6:06:ca:e3:
                    fd:b9:6f:46:5a:20:de:57:9d:52:ce:94:91:42:eb:
                    57:97:62:01:11:80:bf:f2:9a:85:45:dd:30:0c:0e:
                    0e:4b:cb:3c:3c:b6:40:a4:42:5a:85:1e:03:c8:1b:
                    3c:10:e2:df:37:75:b5:3c:c3:06:bd:49:1b:b0:49:
                    08:d5:83:81:c2:a7:81:54:aa:44:45:3f:87:4f:c8:
                    6d:b9:8f:2d:88:19:47:09:02:05:41:30:31:fe:5f:
                    5e:6a:7c:d8:9f:ca:08:e7:b4:ac:4d:f7:56:c8:d4:
                    25:b0:be:2b:0b:a8:cf:03:62:b3:99:6c:06:36:2c:
                    7d:36:d4:df:d7:45:de:0d:7f:9d:f1:f9:4c:d4:e0:
                    5e:58:cc:d4:89:62:de:f2:57:d5:85:ab:a3:80:48:
                    1c:c2:20:e0:22:0f:d1:b7:ae:83:32:08:99:2a:58:
                    3e:02:91:b4:55:cb:8f:ae:f7:83:b3:79:e4:33:6d:
                    c7:36:e8:3c:6a:70:0e:0f:70:a1:51:1f:bb:8c:53:
                    71:0a:53:9c:11:b6:2d:f5:8c:c7:bc:4a:ef:1b:e3:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:0B:CC:04:BB:58:02:A4:F3:4F:F4:56:FF:69:BF:F6:79:EB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b165c6a-1e0d-3a53-959e-0f5de10f4221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:9d:1d:c6:a3:bf:de:12:3e:96:4d:f9:32:a8:d1:58:33:
         76:60:eb:b5:ca:9b:50:ee:ab:3a:5c:bf:c4:d8:95:90:df:b2:
         da:2d:18:2e:a2:ef:9a:81:d9:1c:3e:5f:95:97:58:b4:ec:4f:
         8f:b6:2f:11:9a:1e:60:1a:a4:e9:46:96:05:b1:ea:33:fe:e5:
         96:fc:e0:6c:d1:89:f4:a2:4d:70:67:11:8d:14:21:e7:4c:61:
         a7:34:11:92:ec:c9:a2:b8:ef:93:8f:a2:a1:3e:80:24:5b:de:
         d9:16:6f:d4:4d:76:b1:12:55:c0:53:02:1b:16:87:22:7f:03:
         06:28:d6:a7:9e:37:28:2b:c8:79:15:c1:dc:32:fd:ea:01:0e:
         5e:b2:60:56:d4:da:19:f4:f7:49:28:47:12:14:6d:f4:cc:7b:
         e7:a6:07:9a:3c:34:85:01:a0:4c:63:64:1a:4f:9a:80:f1:4f:
         f2:ce:67:a5:08:13:fb:b8:fb:ca:f4:78:cf:e2:33:3f:1f:72:
         1c:b1:f3:50:b2:a4:68:95:1c:fa:c7:c9:58:dc:09:ad:d6:49:
         6d:59:10:90:43:af:41:1a:2e:c8:cc:16:de:26:e5:fc:88:a2:
         0f:fb:7c:3b:ca:18:de:88:15:43:2f:86:6f:68:25:a9:e7:ec:
         98:9d:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:47:01 2025 by rpki-client