Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9af1b7d4-f099-3351-8939-3d6dace377f9.roa
File:                     9af1b7d4-f099-3351-8939-3d6dace377f9.roa (raw, json)
Hash identifier:          IP0slSQtCeTwG9Max5i2GRTYhQmt/V1SmJItpQgS7fw=
Subject key identifier:   CB:80:66:9C:C1:30:8E:26:7A:38:8E:8D:36:E0:36:4C:AF:17:4D:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F6390452F5659D3DC33077D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9af1b7d4-f099-3351-8939-3d6dace377f9.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.153.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:63:90:45:2f:56:59:d3:dc:33:07:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=26fea14d-ff57-481e-ab70-082cd61f9568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:40:93:f6:f7:2e:17:0c:40:7f:17:8c:57:
                    05:78:0c:e4:58:75:2c:88:c6:b7:8a:39:f5:d4:d0:
                    8f:19:e3:ec:10:9d:88:60:12:ba:78:3b:4a:56:ae:
                    cc:ed:88:5e:ba:7a:cb:62:b1:f7:85:bd:6d:3a:9a:
                    ea:30:b1:bf:60:5c:28:76:ed:14:5d:9f:ae:03:a5:
                    2e:b8:6e:a4:9d:c4:77:dd:dc:7e:79:b8:09:ab:68:
                    13:8d:a8:1e:94:de:68:5f:f5:f3:64:68:fd:fb:40:
                    a1:a3:aa:63:a6:e1:02:8b:2e:b2:4a:fd:11:f0:bd:
                    84:8c:3c:36:64:79:c1:bd:8a:63:10:51:57:ee:17:
                    c3:7c:dc:48:2c:89:8c:94:46:51:47:a6:ba:d7:96:
                    49:af:93:ed:a6:c8:ff:f3:7b:7e:37:9c:1b:6f:cc:
                    d0:09:a9:ad:05:67:6e:72:5b:d7:ab:b6:64:0d:92:
                    62:93:ea:7b:67:68:32:67:08:df:86:de:58:ff:26:
                    ad:55:99:3b:1a:6c:7d:a4:4e:09:c9:92:d8:4c:e9:
                    a6:d2:a5:d0:07:c9:39:da:29:9f:62:6a:81:62:f9:
                    a7:29:6b:fd:98:26:a8:2c:eb:d1:58:de:5a:c0:2d:
                    4c:f4:71:3f:17:89:bf:d2:17:44:8b:5c:b5:76:e7:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:66:9C:C1:30:8E:26:7A:38:8E:8D:36:E0:36:4C:AF:17:4D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9af1b7d4-f099-3351-8939-3d6dace377f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:3f:06:d3:54:65:bf:8b:0b:ba:82:2a:a2:47:ea:a5:23:85:
         89:e9:0c:86:a4:18:a1:a1:27:e2:86:63:30:6f:a1:56:14:c6:
         6d:98:d4:46:32:86:4c:b7:7c:a2:bd:53:52:79:f9:cd:af:6d:
         ed:df:3f:c0:1b:ef:97:c6:0c:7c:15:24:13:32:aa:63:62:32:
         12:ff:4d:fc:2b:6a:e5:f4:67:08:b0:9c:ef:27:3a:01:a4:ba:
         8e:9e:19:e7:f1:81:d7:0c:8c:54:c4:df:e7:0f:fa:73:3d:a9:
         ca:31:c2:39:aa:46:c1:a5:52:4c:f9:3f:4b:34:36:bd:51:7c:
         b8:f9:4b:60:4d:31:c0:26:cf:43:90:1b:5f:dd:b5:17:35:4f:
         79:e0:72:54:f1:fc:bc:47:b1:24:2b:d9:8a:5b:98:13:9b:84:
         2b:d6:ef:29:a3:09:f1:3b:31:97:c7:aa:ec:fe:32:5d:a9:54:
         a4:60:c8:b3:e2:2a:f9:3a:b5:aa:cf:f8:c8:8b:df:3d:4c:b8:
         9a:33:fd:7a:f4:4a:3d:ff:f7:61:14:f2:cf:fa:09:84:8c:d7:
         c4:4d:6e:ca:8f:f8:d3:92:a1:86:8b:45:4b:b5:16:7b:61:fc:
         06:84:40:7e:da:12:ad:25:ad:9b:41:ff:4a:e1:dc:c8:c4:82:
         f9:03:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:26 2025 by rpki-client