Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a18d75ce-b338-36cd-af1c-80b1b3b8f3a3.roa
File:                     a18d75ce-b338-36cd-af1c-80b1b3b8f3a3.roa (raw, json)
Hash identifier:          9zBK8ZJIt6uBlz5ZTxYIJxRlH5XCk0upthruRZVP7/I=
Subject key identifier:   5E:33:83:BF:18:E2:09:50:33:71:54:32:EC:37:DE:CB:A2:CF:16:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DA516EBAF1798A2A010FB9020
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a18d75ce-b338-36cd-af1c-80b1b3b8f3a3.roa
Signing time:             Wed 20 Apr 2022 12:00:00 +0000
ROA not before:           Wed 20 Apr 2022 12:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a5:16:eb:af:17:98:a2:a0:10:fb:90:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 20 12:00:00 2022 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=0dc3c4f2-573f-45f8-a917-01618753dc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:a3:78:d6:b4:a5:5a:11:c9:73:15:b8:2a:
                    e5:a0:18:ca:02:2d:a5:67:6b:98:54:f3:df:ce:af:
                    68:16:48:8c:a6:dd:33:e4:ab:9a:71:d3:8c:ea:c0:
                    fc:bf:f6:62:ae:45:ff:73:89:4d:24:16:d8:c6:b3:
                    e8:99:69:1f:d3:62:15:78:b1:62:6d:f9:d8:62:9a:
                    63:6f:de:a3:1a:bd:d7:21:38:6b:26:c1:2e:2f:e5:
                    b9:ad:e9:da:a7:e1:de:34:c9:61:1b:dc:34:f8:cd:
                    58:15:7d:c1:14:0f:dc:c9:76:ae:27:73:82:92:e6:
                    fe:9f:87:43:40:e1:a6:a9:6d:54:6f:ad:32:0c:7e:
                    a1:92:2f:7e:da:4b:4f:3e:31:6c:36:b6:40:45:6c:
                    97:b8:63:e7:6f:68:32:50:0a:8f:66:28:58:84:92:
                    5a:39:5f:47:ce:13:19:3a:65:e6:54:f9:e9:4f:9e:
                    1f:3f:62:fd:40:d0:90:4b:e7:61:8a:4e:8f:fb:65:
                    99:76:04:fd:c5:9c:08:7f:6f:85:49:1d:6f:0b:2d:
                    ab:65:37:6d:24:dc:a1:f3:c9:3c:2e:bb:a4:1f:5d:
                    b0:6b:c0:41:01:43:71:d8:4d:9d:31:95:1d:5d:0b:
                    89:17:02:ef:aa:ce:d7:f1:63:ac:a8:b7:0f:56:30:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:33:83:BF:18:E2:09:50:33:71:54:32:EC:37:DE:CB:A2:CF:16:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a18d75ce-b338-36cd-af1c-80b1b3b8f3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:38:ed:cf:35:c8:be:35:df:f9:79:eb:1b:22:fd:25:3a:51:
         1f:1c:53:16:05:a0:3a:44:a7:63:e4:bf:e1:62:a3:78:ff:c0:
         e7:a3:28:d4:37:ae:da:5f:7e:34:96:da:ee:75:ae:8f:f5:e8:
         a1:93:37:60:0b:5a:39:9a:15:36:3e:ae:c9:e1:93:79:d4:67:
         d6:90:ca:54:80:f9:01:0e:10:48:62:3a:2c:26:91:d4:94:b2:
         68:54:11:fa:a0:d7:1d:52:5c:bc:52:c1:d3:ba:c7:fc:3a:08:
         34:73:fe:19:69:00:66:0e:c3:ec:c7:ca:3f:d8:28:07:c8:68:
         56:0d:a4:75:6b:47:92:83:e0:23:b2:cf:ab:1f:1c:aa:11:9c:
         27:74:4c:69:00:e9:13:fd:78:2a:c4:01:e8:42:d3:2b:cf:24:
         fb:e5:10:d5:8e:26:8f:33:5c:b6:db:d1:e7:38:bb:f9:15:ef:
         25:91:b0:82:d5:3c:c7:6a:6f:34:a2:2c:d5:81:0a:4f:83:85:
         1c:e3:46:68:51:19:c1:77:bc:ce:38:60:da:0f:78:fc:ee:fe:
         70:aa:c0:1d:ac:16:5a:e3:06:66:63:0c:f3:ba:ba:6c:5f:96:
         f7:32:21:28:ec:81:85:09:1c:a2:d6:c0:c9:d0:09:8a:cb:ae:
         06:9f:02:3a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2lFuuvF5iioBD7kCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQyMDEyMDAwMFoXDTIyMDUyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MGRjM2M0ZjItNTczZi00NWY4LWE5MTctMDE2MTg3NTNkYzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifSjeNa0pVoRyXMVuCrloBjKAi2lZ2uYVPPf
zq9oFkiMpt0z5KuacdOM6sD8v/ZirkX/c4lNJBbYxrPomWkf02IVeLFibfnYYppj
b96jGr3XIThrJsEuL+W5renap+HeNMlhG9w0+M1YFX3BFA/cyXauJ3OCkub+n4dD
QOGmqW1Ub60yDH6hki9+2ktPPjFsNrZARWyXuGPnb2gyUAqPZihYhJJaOV9HzhMZ
OmXmVPnpT54fP2L9QNCQS+dhik6P+2WZdgT9xZwIf2+FSR1vCy2rZTdtJNyh88k8
LrukH12wa8BBAUNx2E2dMZUdXQuJFwLvqs7X8WOsqLcPVjAw0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF4zg78Y4glQM3FUMuw33suizxbBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTE4ZDc1Y2UtYjMzOC0z
NmNkLWFmMWMtODBiMWIzYjhmM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIzjtzzXIvjXf+XnrGyL9JTpRHxxTFgWgOkSnY+S/4WKjeP/A56Mo1Deu
2l9+NJba7nWuj/XooZM3YAtaOZoVNj6uyeGTedRn1pDKVID5AQ4QSGI6LCaR1JSy
aFQR+qDXHVJcvFLB07rH/DoINHP+GWkAZg7D7MfKP9goB8hoVg2kdWtHkoPgI7LP
qx8cqhGcJ3RMaQDpE/14KsQB6ELTK88k++UQ1Y4mjzNcttvR5zi7+RXvJZGwgtU8
x2pvNKIs1YEKT4OFHONGaFEZwXe8zjhg2g94/O7+cKrAHawWWuMGZmMM87q6bF+W
9zIhKOyBhQkcotbAydAJisuuBp8COg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:27:03 2025 by rpki-client