Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98057641-a0a2-3093-a60e-1b647c19d7a2.roa
File:                     98057641-a0a2-3093-a60e-1b647c19d7a2.roa (raw, json)
Hash identifier:          h+sqk+svG4dCjJCNWBg+oSZU9Jl0fBoZhNrOONpZzYE=
Subject key identifier:   8A:FE:73:71:4F:AA:A8:3D:27:84:09:3A:83:FE:CB:42:FB:BE:19:69
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF2CAF9448250C31D99063680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98057641-a0a2-3093-a60e-1b647c19d7a2.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Thu 23 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.177.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f2:ca:f9:44:82:50:c3:1d:99:06:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : Jun 23 04:00:00 2022 GMT
        Subject: CN=a6dd1374-2d15-4e2f-a97f-2db9add18a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:19:5d:39:32:5d:6b:ed:d0:89:8b:ff:02:
                    71:ec:83:c5:f4:74:5c:a3:56:b6:49:0f:14:b9:83:
                    eb:10:9d:e6:1b:22:e9:ce:35:71:51:3c:18:e1:12:
                    83:24:8f:35:51:60:15:da:48:7a:0f:8c:93:c4:5f:
                    79:3c:97:f5:98:c7:5d:c9:9b:14:14:15:5f:48:cd:
                    99:44:22:50:7d:5c:27:eb:ed:6f:14:f4:69:17:c1:
                    54:03:fb:fe:4d:d9:8d:cc:26:92:3d:e6:e1:5b:6b:
                    1a:66:12:3d:71:cf:98:6d:eb:9d:6a:4e:49:b5:01:
                    b6:96:75:1e:0b:5b:9e:2d:33:ae:90:1c:43:f9:9e:
                    83:bc:1a:bd:1e:63:bc:02:d2:98:c9:e3:ac:8b:57:
                    0c:75:9a:63:0f:2b:25:44:d6:93:13:60:79:0d:e1:
                    42:ee:a9:8c:e0:0c:a9:f8:59:bc:35:93:e0:b0:b8:
                    44:30:d9:f3:90:2d:e0:77:c9:bc:09:f4:53:fd:9f:
                    29:e0:fe:2f:f2:76:6b:b3:3c:92:12:90:b0:99:54:
                    2b:52:11:80:e3:c5:eb:ac:37:99:86:ac:e2:cb:5b:
                    41:dc:0f:7a:4b:23:6a:1f:86:da:eb:2a:04:9a:24:
                    ee:ed:96:92:45:ff:8a:11:1e:09:63:20:e2:47:f9:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FE:73:71:4F:AA:A8:3D:27:84:09:3A:83:FE:CB:42:FB:BE:19:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/98057641-a0a2-3093-a60e-1b647c19d7a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:8d:a1:b6:c5:fd:9d:9a:d5:1e:a9:df:93:70:ed:57:fe:
         e5:fd:eb:09:84:60:89:d2:00:ee:ee:90:98:3a:e0:91:27:a7:
         56:86:f9:5e:09:92:ae:e0:bd:24:87:70:f6:d5:c1:a4:b8:05:
         cb:0f:6c:84:9d:09:55:27:72:61:a1:a6:b7:b0:e5:27:ab:c9:
         d0:ef:06:ff:15:47:c8:c7:46:24:51:be:65:3e:40:7e:ca:2e:
         cc:0e:5d:1b:9b:47:94:3b:07:20:85:af:49:81:78:26:a0:63:
         d6:3c:06:30:45:de:ea:07:01:aa:fe:92:49:8e:41:69:93:8a:
         d8:1f:61:eb:ad:21:61:44:39:5f:bb:64:93:fb:38:c3:c0:34:
         fb:0b:8c:04:c2:56:1c:70:ce:a2:de:9e:b1:63:46:2e:68:cd:
         95:30:06:2a:a0:ca:e0:3b:15:dd:92:7a:62:a8:f0:46:0b:30:
         0f:e5:22:31:c7:b9:d7:2f:c2:2d:8b:ba:e1:59:45:71:f1:48:
         68:18:1a:d4:ba:67:76:ec:a4:eb:ad:dc:d5:da:b8:d3:10:7e:
         c9:d9:cd:ae:92:ac:5f:b7:99:ec:aa:ea:59:fd:5e:86:62:78:
         5e:24:85:12:c3:d3:39:50:7f:86:ab:97:1d:f0:f7:db:08:e2:
         f8:ef:d1:b2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3yyvlEglDDHZkGNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
YTZkZDEzNzQtMmQxNS00ZTJmLWE5N2YtMmRiOWFkZDE4YTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lAZXTkyXWvt0ImL/wJx7IPF9HRco1a2SQ8U
uYPrEJ3mGyLpzjVxUTwY4RKDJI81UWAV2kh6D4yTxF95PJf1mMddyZsUFBVfSM2Z
RCJQfVwn6+1vFPRpF8FUA/v+TdmNzCaSPebhW2saZhI9cc+Ybeudak5JtQG2lnUe
C1ueLTOukBxD+Z6DvBq9HmO8AtKYyeOsi1cMdZpjDyslRNaTE2B5DeFC7qmM4Ayp
+Fm8NZPgsLhEMNnzkC3gd8m8CfRT/Z8p4P4v8nZrszySEpCwmVQrUhGA48XrrDeZ
hqziy1tB3A96SyNqH4ba6yoEmiTu7ZaSRf+KER4JYyDiR/ms7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIr+c3FPqqg9J4QJOoP+y0L7vhlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTgwNTc2NDEtYTBhMi0z
MDkzLWE2MGUtMWI2NDdjMTlkN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD7EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFY+NobbF/Z2a1R6p35Nw7Vf+5f3rCYRgidIA7u6QmDrgkSenVob5XgmS
ruC9JIdw9tXBpLgFyw9shJ0JVSdyYaGmt7DlJ6vJ0O8G/xVHyMdGJFG+ZT5Afsou
zA5dG5tHlDsHIIWvSYF4JqBj1jwGMEXe6gcBqv6SSY5BaZOK2B9h660hYUQ5X7tk
k/s4w8A0+wuMBMJWHHDOot6esWNGLmjNlTAGKqDK4DsV3ZJ6YqjwRgswD+UiMce5
1y/CLYu64VlFcfFIaBga1Lpnduyk663c1dq40xB+ydnNrpKsX7eZ7KrqWf1ehmJ4
XiSFEsPTOVB/hquXHfD32wji+O/Rsg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:39:32 2025 by rpki-client