Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9eea334b-cd85-3eb2-847a-c47a531480de.roa
File:                     9eea334b-cd85-3eb2-847a-c47a531480de.roa (raw, json)
Hash identifier:          2CuaQaqzX99qLgOtMIZvGfM+LBcF1gR71SleVzQL3HE=
Subject key identifier:   69:62:9D:58:6C:B1:B0:14:EB:CD:43:A5:96:5C:E5:10:AF:32:CE:C2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840036B1B298AEAEFD8E5E1DA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9eea334b-cd85-3eb2-847a-c47a531480de.roa
Signing time:             Wed 23 Nov 2022 12:00:00 +0000
ROA not before:           Wed 23 Nov 2022 12:00:00 +0000
ROA not after:            Thu 29 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:03:6b:1b:29:8a:ea:ef:d8:e5:e1:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 23 12:00:00 2022 GMT
            Not After : Dec 29 05:00:00 2022 GMT
        Subject: CN=e4fb3a05-0723-4371-b578-8e39eb98a00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:b9:c5:2e:8e:8b:bf:79:df:93:97:1b:1e:
                    7b:20:f0:6b:ba:d5:25:24:0e:e0:cc:d5:d8:28:8f:
                    31:4f:53:c3:a0:63:0a:9b:80:eb:70:2f:4f:bd:20:
                    97:1d:3d:1c:e5:5c:22:77:33:14:36:a1:7b:e5:f7:
                    8c:ca:69:3e:a2:78:78:a8:5d:16:20:a9:6e:df:51:
                    2c:09:57:14:cb:2b:b1:43:d3:7a:23:93:d3:5a:af:
                    9f:77:78:59:92:ab:d5:e0:2c:f1:63:e4:a7:cd:ed:
                    2e:8f:5f:10:a0:02:35:9a:2f:44:1e:f6:62:85:1c:
                    9f:81:d8:35:33:8d:a7:8d:c2:ed:6d:84:05:17:3b:
                    5d:ef:28:f0:1e:d7:3f:07:f1:a5:54:a5:7d:e5:52:
                    4e:22:b3:97:0c:82:d4:9d:b5:b5:5c:f5:f3:ca:b9:
                    91:f7:36:77:b9:91:28:dc:43:31:2b:5a:33:f4:89:
                    f9:02:b7:9c:0b:14:9d:df:f8:c8:83:e0:1b:29:d4:
                    e7:6c:ae:2a:cc:31:a6:f7:9d:f7:cc:2c:3e:3c:9c:
                    8d:b3:03:16:dd:3f:97:04:99:a5:94:7e:30:31:24:
                    aa:61:f6:f4:91:44:b9:0d:0b:ec:1b:37:43:3a:c0:
                    9b:89:1f:bc:9f:c1:95:70:22:9b:78:68:17:73:6c:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:9D:58:6C:B1:B0:14:EB:CD:43:A5:96:5C:E5:10:AF:32:CE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9eea334b-cd85-3eb2-847a-c47a531480de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d9:6c:c1:15:90:3a:f6:08:83:e7:ef:36:3f:34:f3:d2:81:
         bd:e7:cb:cf:c4:03:cd:4d:ff:59:0f:db:60:33:ca:d2:65:01:
         83:84:a9:86:da:a9:35:f5:a1:ce:05:90:b7:35:45:fb:09:d5:
         44:f3:ea:69:57:92:1d:99:b0:f1:4b:06:be:d4:7d:b2:86:2b:
         af:90:cb:94:ed:62:8a:89:ea:87:d6:ef:02:1a:5b:9e:ee:1d:
         4e:8b:e9:80:2d:2c:5c:ce:8e:11:00:55:e5:42:9b:b8:2e:2e:
         c5:a6:21:0e:1f:97:74:37:ec:77:1b:10:e3:88:de:e2:9e:4a:
         fb:1c:4c:40:19:ef:a5:47:40:f3:8f:7e:03:d5:6b:46:2b:48:
         cf:73:30:a1:99:dc:e7:f3:03:e1:7e:31:d6:35:f8:e5:e6:46:
         4f:fc:df:9a:43:ce:16:db:af:5b:17:04:d7:23:73:d3:d8:97:
         a7:8e:f6:2e:cb:2f:3f:e8:53:d6:c5:cb:a9:13:df:04:13:2b:
         f8:0c:ea:65:2c:10:53:d9:19:a5:48:da:58:13:a6:a8:6d:a5:
         cd:45:37:fe:ec:c9:e9:63:d4:43:6e:ce:e3:09:9b:c9:f6:13:
         d1:bb:1f:b0:11:cc:99:d6:63:8d:45:b7:9b:70:4b:e6:43:18:
         8f:26:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:02 2025 by rpki-client