Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/adf12d72-fa4a-33cb-a0b6-8c7b66158e5b.roa
File:                     adf12d72-fa4a-33cb-a0b6-8c7b66158e5b.roa (raw, json)
Hash identifier:          yg8C72pe0W49+wa3QfGVrPxp87PmedO2G5ulI5PmYJg=
Subject key identifier:   A6:9F:85:13:15:FC:2D:8B:EF:F9:D1:41:A7:A1:B7:62:D4:EF:6C:D4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3E8B2A71C898FFE76266B5A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/adf12d72-fa4a-33cb-a0b6-8c7b66158e5b.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.199.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:8b:2a:71:c8:98:ff:e7:62:66:b5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=daa62da2-87e4-4712-9d4b-4334965d390b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:c0:ad:e6:a6:20:72:e6:d2:0d:1a:a6:5c:
                    6f:46:1f:53:6b:e0:87:8d:0e:dd:a0:e9:74:c6:d4:
                    59:9a:fa:bb:69:55:04:40:78:7e:54:89:8b:c6:f8:
                    dd:ed:a4:c5:44:65:99:9d:c6:f5:47:ef:cd:48:72:
                    de:c9:85:1c:20:68:f1:52:4d:fc:fa:46:3e:66:74:
                    bb:cf:f3:b2:62:76:e0:3b:07:c2:d7:5a:1d:f0:2f:
                    b8:64:b1:50:3a:33:de:c9:b3:63:80:ed:b2:f8:72:
                    b7:9e:a6:af:83:d0:a4:53:66:89:1b:fd:cc:aa:d9:
                    d1:e6:84:a0:89:3f:8a:1d:f7:ba:35:9c:42:91:0d:
                    30:ff:89:36:1e:61:e7:57:9d:cd:a2:ed:b5:97:0f:
                    41:7c:da:0b:6c:bd:e8:50:76:a5:30:e6:fb:9d:a3:
                    fb:0b:10:3e:75:42:75:95:59:4d:da:96:77:38:67:
                    8e:89:67:e3:aa:c4:1e:2b:75:d2:ef:be:a5:d2:50:
                    d6:4a:72:cf:63:c0:b8:9d:49:3a:29:5b:09:0d:5d:
                    15:e3:14:d3:16:66:2c:f0:1d:85:30:26:56:78:94:
                    77:a3:11:9e:ed:53:40:c8:cd:25:e5:d4:2f:94:d5:
                    ea:be:9e:12:f1:75:71:cb:e8:b8:6e:72:ec:bc:80:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:85:13:15:FC:2D:8B:EF:F9:D1:41:A7:A1:B7:62:D4:EF:6C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/adf12d72-fa4a-33cb-a0b6-8c7b66158e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4f:17:b1:b0:59:10:89:6e:c6:f9:d0:b3:8f:f1:36:ff:ac:
         12:5d:ea:2f:a0:39:a2:84:39:34:53:23:bd:e2:9e:c9:47:e1:
         fe:37:78:d4:22:52:e6:25:54:fd:18:3c:e3:81:47:ee:aa:25:
         44:55:c7:cc:33:d8:31:fd:f5:6c:07:eb:3b:76:78:0c:61:ce:
         04:4a:6f:63:c9:6d:78:fe:2c:f7:08:7e:c5:5e:c2:ed:b2:3e:
         3f:89:10:de:7b:a5:b1:b2:5c:1b:c9:a5:bd:1c:c9:df:92:9b:
         c1:10:2c:e0:78:fd:a0:e9:77:77:cf:45:2e:58:22:b7:65:1e:
         d8:eb:08:03:62:e2:58:49:ef:4c:ad:a1:75:df:ab:87:6e:ec:
         18:46:40:b6:f9:5e:a2:81:c9:5f:58:44:88:d5:14:2a:15:b6:
         04:da:3d:83:76:95:1a:f6:9f:dc:29:f1:a6:cf:43:d0:fc:d5:
         21:28:00:4f:f6:7a:59:b7:c3:5d:e9:81:72:b1:7c:e2:96:06:
         6c:48:be:0f:64:e5:10:fb:e4:8f:60:c5:b7:59:2f:88:9f:ef:
         a8:38:42:0c:6a:06:1c:b8:61:be:41:d5:d9:aa:51:e9:0e:0f:
         b0:2e:78:72:00:40:2b:7f:9d:95:b7:50:95:ef:cf:3a:f2:5f:
         e9:80:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:54 2025 by rpki-client