Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/83b1ad4a-6675-3c8e-9acf-80ab455fe4f9.roa
File:                     83b1ad4a-6675-3c8e-9acf-80ab455fe4f9.roa (raw, json)
Hash identifier:          df9oPbtajKzoNU41ohSxyL5ReyvknOYXZUgLlC9qcCo=
Subject key identifier:   B5:C9:3C:A5:41:E0:F0:71:D8:49:A9:6E:59:D4:DB:C2:9B:C3:3B:8E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858407861AF286323F2E8BE658C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/83b1ad4a-6675-3c8e-9acf-80ab455fe4f9.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:61:af:28:63:23:f2:e8:be:65:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=1da3a1ae-e08f-4e91-b734-10462cb1bec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:1f:fe:0c:cb:1a:8d:0b:eb:67:ed:4f:aa:
                    07:b8:f7:9e:f1:16:90:16:b6:02:ad:af:6b:a5:e6:
                    21:80:01:13:7a:58:7d:09:42:70:fc:0b:30:70:35:
                    0f:d9:7d:9a:26:32:4f:47:15:3e:c1:79:81:59:33:
                    31:5e:69:19:38:87:47:2a:a8:91:42:ab:ef:84:a8:
                    c6:a0:71:cd:72:6f:31:79:a4:ab:22:a6:dc:21:48:
                    45:d0:63:28:39:0b:1b:94:12:39:af:b7:b6:32:4b:
                    98:03:b7:30:d6:28:21:27:5b:c5:25:82:01:04:77:
                    15:30:09:ec:19:fc:e6:03:c5:06:d2:04:56:fc:f0:
                    1b:f4:99:f7:a5:91:af:9c:6c:c9:fc:7c:0e:59:e0:
                    bf:37:db:4b:c9:51:a1:3a:36:b4:af:57:c8:4f:79:
                    e5:6b:d0:d4:57:3a:79:7d:4c:3f:02:ab:d9:36:06:
                    4d:77:a2:a9:08:ae:fb:64:b8:32:eb:0c:4f:10:0b:
                    4f:58:4a:69:7c:0d:4f:9d:16:f3:00:36:5b:88:7f:
                    06:0b:33:95:cb:cf:e7:52:19:55:e4:95:41:87:78:
                    71:9a:3f:e6:8d:ff:ac:bc:80:8f:a4:25:d3:27:48:
                    55:b7:c0:3d:e8:ff:9a:73:d9:49:9e:d1:c7:21:88:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:3C:A5:41:E0:F0:71:D8:49:A9:6E:59:D4:DB:C2:9B:C3:3B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/83b1ad4a-6675-3c8e-9acf-80ab455fe4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:f7:92:d9:c2:16:9e:76:b6:91:dd:a0:fe:09:5b:11:3b:
         e9:bc:28:37:14:e8:11:29:e9:73:af:e1:0d:56:5a:c1:52:3e:
         1f:c3:72:63:26:3a:89:a6:f1:b7:9b:e4:9f:c4:ed:43:f2:1a:
         94:16:9b:1f:1c:20:c2:cc:bf:e6:c6:d5:67:45:05:7e:f6:13:
         a8:52:dd:5f:a7:eb:9a:6e:74:cf:bb:d9:c6:2a:35:62:4c:b6:
         ad:a1:be:41:d8:56:18:30:97:80:59:a5:a9:67:5f:dc:3e:6f:
         25:b4:57:b8:6d:3f:f2:63:8d:34:8d:13:c4:6c:b4:90:8b:ac:
         8a:da:48:f1:09:ba:ad:53:74:f8:61:2d:9c:e6:cb:f4:22:eb:
         e9:4b:eb:13:3a:73:4b:70:f6:95:53:dd:45:46:1f:ff:c7:35:
         94:88:2c:29:80:ff:b9:b5:e5:14:17:e0:2f:1e:dd:f2:97:2a:
         94:2e:f7:1a:fd:e0:8d:4c:a1:8e:bc:a1:a7:42:6e:53:84:35:
         dc:ba:36:72:30:aa:19:81:3a:0e:48:df:96:49:df:c6:b1:6d:
         81:df:33:11:3f:4f:e0:51:1c:d3:c1:ed:84:7a:c5:6d:c7:10:
         c4:ce:5c:0a:cc:ce:76:58:04:77:96:94:7d:f4:a5:df:0e:f4:
         05:c9:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:56 2025 by rpki-client