Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/874043b1-2e61-370b-916d-ed8e42287c22.roa
File:                     874043b1-2e61-370b-916d-ed8e42287c22.roa (raw, json)
Hash identifier:          k/Np9ZOcuNwuJhlYs8tlY/w4JLG/BCzNxKThybrvC/4=
Subject key identifier:   01:B5:6D:81:64:23:6B:CE:11:D7:F0:5E:D4:FB:28:E0:4A:42:5D:E5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB6CBB09E0B94407600973900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/874043b1-2e61-370b-916d-ed8e42287c22.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.247.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b6:cb:b0:9e:0b:94:40:76:00:97:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=045be117-039a-4fb0-894a-63638244a911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:d9:97:85:7c:30:f1:67:61:d9:78:42:91:
                    12:31:f5:05:f8:67:c3:4b:47:c7:92:dd:4a:94:53:
                    c5:4c:f0:1e:64:16:a9:c4:7f:1f:03:6b:ee:0a:94:
                    7d:ff:26:37:8c:a8:fb:c0:de:f0:32:44:36:b7:91:
                    ab:87:12:cb:76:38:c5:97:ea:19:9f:6e:5b:98:01:
                    ac:dc:9a:8b:86:ac:3b:f3:e2:fb:03:49:53:cd:7c:
                    ce:95:95:b8:e4:da:51:5e:ee:d6:4f:a6:c7:f7:e9:
                    14:b5:46:f9:50:00:c1:93:fe:92:80:e9:bb:07:d1:
                    49:7d:ca:94:f6:de:46:70:81:c6:79:a9:5d:0e:bf:
                    a7:0f:7c:84:cd:c8:3f:16:76:c0:9b:f2:00:99:2f:
                    fb:cd:0d:ea:59:2f:50:74:c0:51:c9:d4:75:a3:70:
                    fb:d5:8c:aa:f3:90:e8:ce:fb:02:2c:e3:2a:ed:d6:
                    3d:70:ed:9f:61:ef:34:4f:f9:c3:7b:02:4c:60:39:
                    87:1f:e8:ee:12:53:7c:94:f6:97:ee:dc:fc:70:a9:
                    59:e5:09:ef:2c:b0:a6:4e:0b:e7:ed:88:18:73:6f:
                    ee:c8:a3:66:38:92:d6:3b:83:a5:b7:37:b5:29:47:
                    cf:93:4f:11:91:f0:3d:f4:43:7f:c3:e8:10:53:f6:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:6D:81:64:23:6B:CE:11:D7:F0:5E:D4:FB:28:E0:4A:42:5D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/874043b1-2e61-370b-916d-ed8e42287c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:33:f8:ed:eb:ff:a8:9f:72:b5:5c:3f:f9:be:1e:e6:99:ce:
         9e:ed:98:ba:b2:ac:cb:5d:a8:34:37:e5:42:3a:85:f6:4b:96:
         3a:52:d3:2f:31:c1:7b:bb:03:99:c3:a4:04:cf:bc:54:4c:c9:
         6f:76:5e:07:3f:6f:98:48:e1:73:4d:88:0c:17:8e:81:b6:8c:
         0e:60:6b:fb:26:c7:87:3a:04:b5:e7:ac:2c:d5:64:c2:59:a0:
         1b:fb:b2:9c:96:61:b5:4a:27:a9:84:d5:0f:f4:e7:6d:64:08:
         05:ea:7c:57:e3:d1:9c:9c:02:3d:d4:85:09:4f:19:8a:79:04:
         3d:ee:63:38:2e:fe:6d:45:e7:90:9e:27:d1:58:fe:9b:a8:3a:
         e3:d2:f4:e9:4f:20:80:78:f7:09:01:58:d5:ae:5f:1d:4f:66:
         88:31:6f:e2:64:db:57:c1:b9:fa:73:72:2d:22:7a:66:7a:3f:
         94:ef:e4:5a:a1:27:80:1c:23:b6:30:15:bc:5c:01:e2:18:b3:
         ee:66:e2:99:45:78:31:b5:78:59:ef:e3:3c:d7:bd:8f:89:bb:
         4b:b5:f5:71:79:8b:7e:5d:7a:84:c8:67:5e:75:37:f3:83:ff:
         a5:e5:18:73:66:71:20:45:47:ec:9c:c5:c1:f6:a5:8b:30:b9:
         d6:f9:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:54 2025 by rpki-client