Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6d615a2-caa3-3709-abe4-15f9dfcb8969.roa
File:                     b6d615a2-caa3-3709-abe4-15f9dfcb8969.roa (raw, json)
Hash identifier:          Bwh3ZnPRBT7B0ueEPGXNfhZDIvNbpkeYHAwZJ/re1ck=
Subject key identifier:   3A:DA:5E:C6:63:E1:B5:20:6B:CE:7F:4D:9C:3B:8A:4A:95:64:52:8F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB7070A4C5F475D1D0F8C9800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6d615a2-caa3-3709-abe4-15f9dfcb8969.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.161.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b7:07:0a:4c:5f:47:5d:1d:0f:8c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=b633391d-f10d-4953-803a-a24759e2ac8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:84:7e:8a:2a:1c:48:5f:57:a4:7c:85:1b:
                    ea:89:23:87:68:33:60:f2:04:bc:be:32:7e:17:ca:
                    42:3d:2d:71:40:12:29:98:56:df:d9:fd:05:80:a6:
                    9e:ef:59:58:39:ef:0b:2f:58:81:3b:6e:98:52:f7:
                    85:6c:2c:92:55:56:22:bd:8e:c4:33:ce:02:3f:59:
                    90:6d:27:6b:c4:7f:b0:c1:f6:63:74:79:0c:42:23:
                    0d:09:46:f5:7d:48:df:74:04:7b:e0:44:55:10:43:
                    f5:32:a9:bd:5c:b1:a6:dc:aa:a0:ac:d4:08:1b:d5:
                    a7:e4:3d:98:b3:68:3e:5e:fd:9c:b2:39:35:12:60:
                    b6:fe:46:5d:9b:0d:5d:c5:6c:7d:0f:f3:3d:c2:ac:
                    d1:29:43:a1:a5:bf:e4:7f:30:d1:50:f6:db:d3:b8:
                    40:11:29:d9:3b:06:85:64:f5:48:31:28:b8:4d:f5:
                    2d:83:68:42:45:dd:76:7e:8e:55:c9:1e:f1:e8:41:
                    89:0a:dd:03:2e:cb:2d:ab:c9:e5:0b:c1:bd:e3:3e:
                    f2:28:5f:68:b2:61:58:16:6c:4c:82:b7:e8:7b:5c:
                    65:7f:4a:12:0e:21:b2:e1:39:63:f2:e5:7f:c6:ec:
                    4a:f6:98:10:28:17:48:18:2c:c6:8f:d6:73:fb:ce:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DA:5E:C6:63:E1:B5:20:6B:CE:7F:4D:9C:3B:8A:4A:95:64:52:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6d615a2-caa3-3709-abe4-15f9dfcb8969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:09:18:2d:3f:0f:0f:bd:f0:b7:74:aa:a5:7f:b2:e9:1f:b0:
         a9:8d:b4:0a:36:01:2b:d7:51:c2:c5:22:9b:1a:eb:8f:dd:89:
         1e:68:9c:62:34:d8:c8:05:b2:37:8c:2a:c5:1c:08:20:c2:e1:
         13:df:7d:fe:da:75:b3:11:32:36:f6:6e:55:3b:60:3a:23:e2:
         ec:28:7d:74:8c:53:72:b1:af:6e:25:99:7e:51:d6:51:d2:d2:
         3c:2b:61:fd:4a:c2:ae:21:7f:3b:a0:e5:f4:4c:33:63:f8:36:
         95:8d:da:ee:fc:a5:fc:07:cd:88:e3:e0:ba:cf:79:b8:98:0d:
         cc:3c:b2:c8:48:ef:13:46:d9:d2:21:cd:42:ef:41:be:a4:09:
         06:29:60:a6:8b:6a:3a:3e:ee:8c:3f:14:1b:53:4e:29:98:dd:
         f9:32:0d:d0:58:a2:3e:e2:86:96:a4:e1:87:63:6f:bf:58:3e:
         76:49:53:d3:78:fa:df:eb:aa:c0:79:e1:93:7f:99:7c:c6:6f:
         30:33:40:ff:30:2a:8a:5a:85:f4:1d:48:92:a4:78:00:3a:13:
         b5:22:93:82:0e:98:c6:3f:bb:9f:67:46:2e:09:32:ce:20:39:
         27:9c:60:1e:75:47:67:05:c9:a1:83:02:a8:a1:2a:5e:05:8a:
         37:c2:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:35 2025 by rpki-client