Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/763606b5-7cdb-3c24-9020-174e5b479c77.roa
File:                     763606b5-7cdb-3c24-9020-174e5b479c77.roa (raw, json)
Hash identifier:          m/j/4avEEK4bppTbjXlUpcYer9t19GNBjJdOL1QRj1Q=
Subject key identifier:   A7:AB:4F:29:1A:20:23:90:DB:B3:6D:1E:7A:83:A0:30:31:F0:84:BF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840A04035801381466C0174ACE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/763606b5-7cdb-3c24-9020-174e5b479c77.roa
Signing time:             Wed 18 Jan 2023 12:00:00 +0000
ROA not before:           Wed 18 Jan 2023 12:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.169.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a0:40:35:80:13:81:46:6c:01:74:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 18 12:00:00 2023 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=428888f5-a795-484a-ae41-df16dc79057a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:13:55:32:98:6f:51:54:e6:0c:e4:92:ea:
                    ed:a7:59:fc:e6:02:ed:c7:0a:d6:5a:45:aa:8a:31:
                    79:8a:8c:2d:78:2d:aa:4a:26:5f:03:8f:b2:03:ac:
                    14:78:53:ac:7f:80:f7:6e:94:7a:04:22:05:b0:01:
                    75:24:72:b7:10:25:14:aa:24:e6:68:0e:61:49:07:
                    94:cf:84:41:7a:c9:03:ab:6f:d5:5b:91:c0:6b:15:
                    a5:53:c4:95:20:7d:22:cf:f0:1a:87:bc:ca:d5:75:
                    9e:b0:36:6e:68:fb:73:06:58:f1:2f:10:d3:c4:fd:
                    22:69:9b:b9:45:5f:d2:aa:42:81:61:e8:1f:d7:5f:
                    a0:19:cc:f7:66:db:9b:7c:a6:21:74:c4:34:99:48:
                    14:61:7d:66:55:b3:84:8f:98:ff:10:dc:d3:98:6e:
                    84:80:d1:06:12:b2:3b:66:04:8d:ee:95:86:e8:b7:
                    44:20:fd:7c:ba:a4:22:72:c3:c8:e4:cc:87:cd:6b:
                    ba:e7:ac:c6:65:fd:d3:77:fa:fa:6e:45:17:ae:db:
                    d1:0c:44:5f:7f:db:a3:fc:bb:e1:71:2e:59:3f:e6:
                    a5:84:50:5a:74:b1:0c:e8:9a:54:ce:9b:ac:fd:01:
                    e8:56:dd:6b:e6:45:5e:79:97:e5:0c:a1:de:f7:42:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:4F:29:1A:20:23:90:DB:B3:6D:1E:7A:83:A0:30:31:F0:84:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/763606b5-7cdb-3c24-9020-174e5b479c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.169.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ba:d2:a6:91:6b:33:a9:e9:d5:4e:f4:b7:e8:fd:89:60:5c:
         b2:d7:83:a4:bf:4c:e3:b7:30:f8:38:95:ff:65:63:98:2d:14:
         e3:6a:05:1b:f9:e6:b0:ae:00:2c:84:33:d1:63:a9:65:02:05:
         b1:61:40:dc:13:f4:a5:5e:25:d4:b3:36:a2:cb:1b:7b:fe:88:
         01:cc:60:6a:8b:e5:07:b1:56:da:f5:9c:cf:91:ba:18:fa:8d:
         2e:82:1d:90:6b:c8:50:70:42:6b:3c:57:e0:02:35:d5:24:03:
         d4:d9:6c:1e:22:ab:1a:b7:6e:36:93:f0:b5:01:ec:e4:09:17:
         2c:51:fc:e9:b4:ca:ee:23:86:6c:a4:98:41:5c:7c:5f:0b:a3:
         ec:a3:fc:f7:ce:25:41:b4:42:b8:e0:5b:03:55:a5:3f:d6:fb:
         a6:c2:9c:5c:a3:bc:3e:f5:da:56:f8:1c:37:c9:54:43:11:bd:
         5f:ce:ab:7b:cc:0d:bb:9a:ca:41:16:00:f2:c5:d8:ff:c4:4a:
         88:ea:95:76:20:6f:2f:bd:8d:1d:22:f8:af:1f:e8:19:b6:67:
         30:1c:50:e7:70:86:a1:65:69:e5:fd:54:63:4f:e7:85:04:92:
         e1:41:52:e8:cb:c5:ad:cd:2c:cc:df:37:af:a9:05:b5:58:03:
         ff:30:74:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:05 2025 by rpki-client