Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bc24872-adff-36a7-9aed-e4b2a8ef0d09.roa
File:                     7bc24872-adff-36a7-9aed-e4b2a8ef0d09.roa (raw, json)
Hash identifier:          Dv74ZvSkPvJOnTlOlb6EJ4SqKVQLUFaIQjGZbtndgVQ=
Subject key identifier:   81:34:66:B4:72:21:E3:69:3F:5B:08:17:0B:A6:FF:62:77:35:CA:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FC96715588DC2ADC7B8AA7280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bc24872-adff-36a7-9aed-e4b2a8ef0d09.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c9:67:15:58:8d:c2:ad:c7:b8:aa:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=2a229b23-4930-4706-b92b-8d33f56834e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:ee:37:44:9e:29:7c:34:74:33:2e:c5:3f:
                    a1:e8:89:14:9c:bc:a5:cc:41:c8:94:34:df:8b:94:
                    11:1d:32:ba:bd:f5:87:7c:59:18:4e:e7:5b:c6:b5:
                    80:0b:e5:08:77:62:59:b6:47:e0:fa:8a:bb:ab:97:
                    98:04:0c:0d:3e:50:20:0d:00:7a:f6:fd:61:a5:89:
                    e9:18:47:88:db:09:00:f8:6d:b6:b3:15:a0:e4:97:
                    44:b2:cc:8f:36:5c:6d:82:32:86:40:97:26:a6:12:
                    23:16:3a:be:8b:78:b7:c9:42:d3:25:b8:ac:c5:9f:
                    e9:27:cd:5a:ca:d5:fa:68:ac:a5:c9:47:7f:1f:c0:
                    80:92:da:84:38:07:7b:7a:90:55:48:a3:fa:92:d0:
                    51:33:b8:70:ec:ff:15:19:69:36:2c:8d:27:ba:f1:
                    22:4b:8a:48:72:26:f4:63:38:9b:ba:46:ea:e2:cc:
                    56:ab:98:f8:99:89:ec:94:e4:d6:c4:9d:9f:5c:2a:
                    17:4d:43:6d:d8:0b:9c:c8:f6:cb:a1:a3:e7:cb:51:
                    f3:ee:c4:5d:d8:25:b1:be:67:d2:c9:ef:87:98:c6:
                    5d:9c:63:e9:d1:ac:6a:89:8f:5d:ad:e1:e8:a1:e8:
                    10:25:d7:4e:d7:48:c3:39:e9:7a:f8:37:17:40:fa:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:66:B4:72:21:E3:69:3F:5B:08:17:0B:A6:FF:62:77:35:CA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bc24872-adff-36a7-9aed-e4b2a8ef0d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:60:4e:b7:08:59:9a:07:4b:c7:91:76:6c:98:98:90:c6:5d:
         11:65:16:7d:19:f3:0d:cc:b0:e3:2d:b5:34:2f:e6:51:e8:a8:
         4c:c5:e4:a6:f9:87:7c:64:e1:95:5a:13:4a:75:d8:9e:94:c0:
         f2:d7:b6:26:05:c4:f6:5f:34:61:86:b1:a9:72:60:55:38:0c:
         50:86:3b:22:2f:58:0e:1e:a8:6b:ab:90:77:4c:65:cc:d4:44:
         d7:81:9f:09:16:a0:c9:68:10:fb:4d:ca:46:4a:cb:24:bd:ba:
         22:43:9e:f6:84:5b:9e:f9:a7:1c:a9:33:11:b8:41:2a:4c:32:
         9f:89:98:f6:18:38:d7:77:d2:f6:da:a6:23:a1:15:a3:1e:df:
         99:17:f2:31:65:b1:01:de:2b:0f:45:f0:21:8b:ab:2e:5d:67:
         fb:ff:e7:a1:0e:16:f5:24:b4:70:83:89:56:5a:b4:d2:ae:a9:
         6d:0e:d8:51:87:a8:cc:0e:30:53:d7:26:29:3f:ff:66:f9:f4:
         c6:65:61:ca:e9:9d:e7:ae:a5:f7:f9:4a:3a:ea:77:c3:36:38:
         64:54:94:ff:08:f0:e3:ed:a0:4a:b8:98:12:07:37:83:03:f1:
         9e:03:35:fc:e2:85:48:f6:2e:f0:b2:07:08:06:a1:0b:3e:6d:
         71:bd:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:23 2025 by rpki-client