Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b109a161-0794-307c-ab45-7a799e38d72e.roa
File:                     b109a161-0794-307c-ab45-7a799e38d72e.roa (raw, json)
Hash identifier:          xbzznQKl0m1FuruuXq5np8e+6EWklvhzqpdSs9soDWQ=
Subject key identifier:   E0:93:C2:C4:8B:DD:E2:BE:2A:4C:68:07:47:EB:6B:FE:C0:07:A3:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F66D95F1C00B1240EBD8CDBF8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b109a161-0794-307c-ab45-7a799e38d72e.roa
Signing time:             Wed 28 Sep 2022 12:00:00 +0000
ROA not before:           Wed 28 Sep 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.234.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:66:d9:5f:1c:00:b1:24:0e:bd:8c:db:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 28 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=9c8a6023-900b-4e0c-9805-0031d74bcdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d5:8e:eb:c5:c9:51:e9:2f:74:bb:95:58:5d:
                    da:7c:24:75:c4:88:fb:9f:4b:16:4d:1e:62:9b:e0:
                    9c:c1:8c:5e:a2:f6:0d:c4:97:25:8e:0e:b0:21:c7:
                    85:00:d2:a5:94:c9:d4:cb:ea:80:fd:14:2c:36:d3:
                    f8:3b:6b:4d:07:a3:39:51:ad:d6:96:39:4a:d0:d3:
                    b2:ea:c9:7c:08:81:f4:98:c5:38:32:10:b7:ad:9e:
                    54:0b:3a:f2:06:d4:35:e8:73:d7:c3:98:b3:c5:04:
                    8a:91:4b:0b:da:3f:7b:d3:7f:68:7c:c5:de:aa:55:
                    a5:3c:6f:dc:d7:26:4b:fb:01:25:0c:ce:fa:47:60:
                    1f:e0:ea:7f:8d:a5:20:e0:68:f9:47:0f:c7:0d:ac:
                    77:b1:ab:ff:af:b4:bc:f5:d1:0a:a0:32:d9:f1:ee:
                    39:2d:44:d5:20:26:5b:f9:92:40:1a:aa:f3:a6:9f:
                    53:41:11:b2:bd:e0:69:34:96:82:e0:a4:a6:df:37:
                    e5:2c:f5:87:ca:05:6d:48:c0:fc:35:8a:8a:6a:ef:
                    ed:6f:5d:d9:10:45:b3:cc:e2:8d:04:95:4d:6e:6b:
                    ea:0f:06:7a:18:9a:02:17:43:65:21:6a:e6:28:b2:
                    f1:9f:a4:fc:a4:32:4c:92:52:a9:0b:ed:4c:e4:28:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:93:C2:C4:8B:DD:E2:BE:2A:4C:68:07:47:EB:6B:FE:C0:07:A3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b109a161-0794-307c-ab45-7a799e38d72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:de:09:7d:7c:d4:7d:eb:bd:46:ae:4c:67:a0:b8:93:c9:8a:
         b9:68:7f:99:ac:04:8b:b2:61:eb:34:cc:b8:fd:b0:26:a6:93:
         5b:d0:7a:a0:f6:86:ee:01:98:74:87:41:22:6d:d2:49:54:d6:
         b7:c0:19:fe:ab:65:b9:77:5f:18:de:fa:59:db:31:c7:97:82:
         18:51:e5:a5:f2:f9:40:61:c6:a5:8c:20:1c:2a:4e:40:fd:9b:
         20:6b:94:06:27:d0:76:94:39:b1:7a:7a:51:d2:30:7a:63:72:
         78:e3:98:1c:6f:f0:07:c6:e2:cf:c6:19:3b:09:0f:7d:bd:e2:
         14:c2:51:3c:b4:12:31:15:e7:b3:67:a7:c7:67:23:86:30:67:
         f4:92:30:d5:aa:17:b3:6c:1a:01:02:29:1b:f5:b2:b5:94:48:
         2a:f7:6f:cf:8c:5c:93:bf:c6:d5:5b:34:0b:9e:5e:4c:f6:f7:
         09:49:98:37:4e:94:01:aa:ea:29:15:da:f0:90:21:f9:0d:44:
         ba:a5:a5:c0:a2:30:7f:bf:57:54:8f:d2:50:89:2d:83:7b:34:
         e6:69:77:d6:eb:01:40:4f:5f:20:15:d3:aa:a6:4b:20:53:2e:
         7a:18:84:e6:b1:51:e6:dc:e5:ea:82:08:4f:14:42:0c:6d:75:
         25:e5:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:21 2025 by rpki-client