Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79a3437b-823f-36b8-bbed-852d99e8717d.roa
File:                     79a3437b-823f-36b8-bbed-852d99e8717d.roa (raw, json)
Hash identifier:          icglVp68aSvgSKl5QeafOMS6l2ucp3+MNvzfYHIlP8A=
Subject key identifier:   2C:60:CF:F8:FF:9B:F6:2A:A0:82:58:65:FA:5B:50:AA:3B:6B:0E:1C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FFFD03E41D477B6C523A76C60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79a3437b-823f-36b8-bbed-852d99e8717d.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.245.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:d0:3e:41:d4:77:b6:c5:23:a7:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=86d058ad-d6c6-4579-b780-89bee4540e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:a6:45:fd:1d:35:80:3f:a1:8f:aa:e6:42:
                    da:b0:3a:e6:d2:3e:32:71:37:f2:9f:ac:d9:39:a4:
                    25:b5:d7:4f:6d:e4:c5:4d:36:8c:bf:d7:53:75:f9:
                    fd:55:e4:46:ca:58:21:4c:04:69:fc:fb:5c:17:dc:
                    92:f8:6d:73:3d:29:e5:3c:b5:e7:29:c0:eb:9e:60:
                    20:0d:ff:de:e8:cb:0f:6b:38:9b:68:d3:a5:fd:34:
                    9b:ea:04:e2:10:bf:98:db:92:ed:9f:39:b9:21:a5:
                    10:28:82:df:d9:12:e9:19:d6:ee:e5:7a:de:a3:98:
                    cf:60:82:42:73:cb:1a:70:79:19:b8:9e:23:24:94:
                    2d:62:67:c3:dd:8a:47:80:bf:97:a2:7f:f9:ac:10:
                    4c:e8:67:1d:5a:02:30:12:cf:d0:ac:af:56:70:70:
                    ae:55:e8:4c:6a:dc:7c:bc:1a:a0:4b:84:c1:4a:58:
                    56:46:f9:20:db:dd:e3:8c:ca:f4:67:7b:d6:47:c0:
                    f6:d3:39:00:23:7d:e7:fa:ed:f7:7a:40:bb:81:65:
                    7e:c2:7c:59:59:5d:ed:aa:e9:5b:e1:05:79:aa:f5:
                    81:30:e6:91:84:89:1c:a6:f6:dc:3c:96:a4:7d:27:
                    9b:df:4d:91:8a:cf:40:5c:c6:4b:93:2d:0f:3e:15:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:60:CF:F8:FF:9B:F6:2A:A0:82:58:65:FA:5B:50:AA:3B:6B:0E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79a3437b-823f-36b8-bbed-852d99e8717d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:a3:4a:65:a9:d0:cf:51:ce:f6:42:e0:2e:d3:e5:a5:ce:
         56:be:25:1e:b3:41:d8:9d:91:23:b2:e5:08:b1:4b:28:69:f2:
         27:e4:9c:4b:dc:dd:40:a7:9d:c3:3c:18:52:a7:08:99:00:81:
         70:03:84:ff:57:d8:6f:ce:2d:61:89:f4:fa:fe:5d:22:63:c5:
         7b:04:54:92:de:6c:b7:bc:1f:3a:ed:03:11:a0:6d:7b:56:1a:
         7f:a7:88:29:e1:84:b8:6d:9a:da:06:1b:83:23:28:36:a9:5a:
         1f:f8:ce:2e:10:de:90:5d:63:66:31:62:d7:51:24:af:e4:ea:
         a1:7a:f9:49:c1:f4:cf:2f:76:f8:be:02:ce:a7:19:06:56:df:
         3e:75:00:6b:39:35:47:59:53:e7:b1:12:da:76:2a:1f:8c:4c:
         17:b8:f6:94:8f:64:80:09:98:1a:19:c2:ba:aa:0d:c8:be:28:
         2e:e1:a6:57:df:64:91:c6:da:65:bf:4f:19:b6:5d:77:66:a6:
         74:98:8f:c0:0f:df:d2:22:53:ac:ea:ae:25:2f:01:5e:e8:23:
         15:0d:b0:9c:cc:8b:87:55:61:00:e1:d4:62:ef:f6:cc:86:05:
         d9:4e:85:1e:df:2f:0a:37:1d:a2:01:71:bc:ec:f1:c4:d2:b9:
         d9:f2:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:12:02 2025 by rpki-client