Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f1a1262-6abd-3b7b-98f2-e4bf22bf5ca6.roa
File:                     8f1a1262-6abd-3b7b-98f2-e4bf22bf5ca6.roa (raw, json)
Hash identifier:          fo9OnoRtGyAZhN7ovuZ1EHIXXD7UjZsLKRmPBitV2KI=
Subject key identifier:   50:A0:37:2D:C5:D0:F9:78:7E:9B:91:09:24:65:7E:87:3D:CD:18:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7AEA37A9756561601ABD20C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f1a1262-6abd-3b7b-98f2-e4bf22bf5ca6.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:ea:37:a9:75:65:61:60:1a:bd:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=cb188d2f-e032-428a-964d-ea31a25a14e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:e0:83:b5:73:8a:30:31:d0:1b:14:1c:d8:
                    40:d9:79:80:59:8e:f3:51:d5:08:bc:45:62:c0:7f:
                    57:26:6b:33:70:07:41:c1:c7:0a:42:ec:88:9b:d3:
                    a4:f1:dd:47:03:c6:68:3c:7e:46:df:2a:da:6d:ee:
                    d5:bd:6f:96:ee:16:0e:08:68:ae:25:2c:59:77:22:
                    d7:aa:00:f5:23:ef:fe:25:db:db:65:86:6d:88:38:
                    85:c7:d2:8e:46:a0:f6:e7:5d:79:9e:ed:ab:16:93:
                    5d:c6:a3:53:e2:c5:0c:eb:1b:6d:07:d0:80:de:f3:
                    50:a0:25:7c:fa:07:f9:1d:5a:93:a0:74:60:7f:8c:
                    26:df:49:47:cf:61:2a:c4:59:45:ae:e2:9a:f3:99:
                    b4:b0:ff:75:29:36:e4:1b:4b:ce:59:81:c2:5c:0d:
                    70:4c:8f:6d:0b:e8:81:1d:02:17:15:e4:9b:c0:b9:
                    6d:c1:7c:66:5f:81:86:19:a8:1b:8c:a3:ad:d5:d8:
                    79:a6:f4:93:13:9a:5b:0c:c3:56:63:44:79:35:87:
                    17:9a:ca:25:50:00:c1:35:7e:d2:f3:d1:de:21:f8:
                    c7:67:87:09:81:ff:df:72:4d:db:45:d3:78:7d:56:
                    7f:a6:64:1f:e3:c8:eb:55:fc:2b:8e:0c:ad:9d:73:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A0:37:2D:C5:D0:F9:78:7E:9B:91:09:24:65:7E:87:3D:CD:18:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f1a1262-6abd-3b7b-98f2-e4bf22bf5ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:14:02:8d:73:25:d1:e5:54:59:cd:45:be:02:31:fd:3e:
         c8:8d:23:c0:6b:28:45:e0:97:b9:3c:fc:49:b1:fb:bf:b2:a3:
         2a:ed:89:9f:ad:2c:6b:a6:7d:65:71:b7:5f:25:b5:38:d3:10:
         2d:3e:dd:0e:1e:57:49:1b:dd:4f:c8:f8:17:32:98:68:3e:ce:
         92:73:30:d5:cb:f1:7f:d7:f7:2d:64:9b:1e:81:dc:00:72:ad:
         a0:ec:34:a3:6c:2d:44:72:2b:53:28:e5:5b:0a:94:91:eb:a1:
         be:32:7e:56:05:35:3c:7e:d5:5b:5b:6f:e0:74:b2:39:2a:a3:
         f3:66:95:37:3d:cf:db:de:9d:40:73:c8:56:cb:3b:97:36:52:
         55:63:4c:f9:a6:24:27:d6:65:c2:fb:b7:d9:10:8e:9f:e7:68:
         5e:45:8b:0b:00:6d:eb:61:91:d9:e6:8c:d4:a9:c2:c1:9e:35:
         3a:2d:d8:96:e4:33:1e:16:2e:be:38:e5:4f:6c:c6:73:d4:48:
         40:ec:16:45:40:f2:9c:c9:bb:ec:15:26:50:40:e3:22:bb:27:
         bc:23:3b:37:f8:d7:ce:39:e5:83:f6:d2:cc:49:cf:37:0a:24:
         f8:58:7f:f7:27:9b:7a:cc:ae:6b:e5:10:67:9d:73:4d:09:db:
         7f:a5:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:35:14 2025 by rpki-client