Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7622b6ff-ff64-308b-bac0-a5a18a80bd30.roa
File:                     7622b6ff-ff64-308b-bac0-a5a18a80bd30.roa (raw, json)
Hash identifier:          atmEoUPqTM0fGDjrDG3OwVijdS09CfFIwn8J4v7o/hg=
Subject key identifier:   B8:AD:1E:5C:B2:55:0A:0D:0F:05:95:73:93:8A:60:53:E4:5D:B3:46
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8B158D2A998A13EA97617C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7622b6ff-ff64-308b-bac0-a5a18a80bd30.roa
Signing time:             Tue 11 Oct 2022 12:00:00 +0000
ROA not before:           Tue 11 Oct 2022 12:00:00 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.170.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8b:15:8d:2a:99:8a:13:ea:97:61:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 11 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=d0e1ffb4-b9a2-46e9-b7b9-e940d95e65bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:40:83:f9:a5:dd:7a:20:2c:de:9f:6a:06:4d:
                    33:49:07:31:eb:f4:24:d9:c1:0b:2c:47:ec:9a:2e:
                    41:28:4e:8a:67:25:6a:bf:22:e6:84:13:4c:18:f4:
                    47:27:20:f8:d3:14:b7:64:1f:b9:dd:af:43:ed:93:
                    ae:c1:d4:7a:d2:c6:8d:14:cf:df:03:82:2f:c3:9a:
                    7b:45:96:b6:46:10:13:60:de:5b:6c:63:a7:90:83:
                    ff:2f:46:1a:2c:41:63:94:23:cd:f6:b4:67:4b:76:
                    a0:20:68:8d:54:8f:51:c9:83:7f:a0:01:7a:84:b3:
                    08:6a:15:b2:21:ad:25:b7:06:49:8b:57:6a:df:3a:
                    d4:a5:dc:ac:8a:42:de:4a:be:08:ed:89:b7:92:91:
                    ed:9b:8e:51:4c:8f:ec:f2:84:1d:fa:05:59:d9:fb:
                    7d:b3:bf:8e:d4:c0:29:36:83:8c:16:6e:f0:aa:e7:
                    77:97:71:35:0f:5d:50:bf:a9:3c:55:d8:36:5c:4a:
                    40:52:27:91:e3:49:47:ea:6f:1d:8e:00:27:bc:6f:
                    4d:2c:b9:7e:49:0c:ff:9c:a3:de:82:88:76:5c:47:
                    7b:5d:ad:30:ab:62:c6:ef:22:48:5c:40:1b:7f:03:
                    4b:2d:98:63:a0:ef:e9:d5:5b:b6:10:6b:87:43:dd:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:1E:5C:B2:55:0A:0D:0F:05:95:73:93:8A:60:53:E4:5D:B3:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7622b6ff-ff64-308b-bac0-a5a18a80bd30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:60:74:fe:83:b6:da:ca:86:57:99:84:0c:9b:1c:2c:26:
         8d:15:0e:03:d1:8c:cd:62:f0:ef:12:31:ee:7f:4e:d2:81:4b:
         6d:25:f7:5e:d8:08:86:69:ad:c2:e7:ea:bf:c8:26:ed:ac:42:
         75:d6:b2:c5:d1:6d:31:04:2c:05:14:6c:d2:82:97:fc:b2:0d:
         4c:66:e1:74:ad:ed:4f:10:b5:3d:98:26:b2:d4:4d:10:31:46:
         b3:fd:5b:56:b2:38:29:0c:46:18:84:02:f8:44:65:02:2a:d9:
         90:7c:52:2f:66:05:28:61:cb:6f:1b:5c:1d:39:aa:0c:67:03:
         d5:56:8d:20:7a:45:06:da:a4:95:59:b1:12:64:5c:21:7b:a5:
         ce:7c:9f:94:da:02:4f:56:3f:22:9d:98:48:24:cd:82:75:bf:
         a9:de:5d:fc:4b:17:52:73:c6:d6:bd:af:f2:92:e3:fc:01:b0:
         79:1a:16:d5:a2:b0:63:fe:1c:dc:3f:6a:8c:b7:98:45:71:39:
         da:68:e6:ce:87:54:bd:aa:bd:9e:80:78:bc:30:ac:13:c4:41:
         07:68:3b:04:71:a9:87:6e:ed:44:17:d4:2f:61:94:82:5a:3a:
         d9:cd:3e:71:5d:67:6a:cc:cb:e9:9d:98:95:74:b8:8c:7c:3d:
         8a:3e:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:49:55 2025 by rpki-client