Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc5a3dec-98a3-32b3-a8dc-d83ad84f0ab6.roa
File:                     bc5a3dec-98a3-32b3-a8dc-d83ad84f0ab6.roa (raw, json)
Hash identifier:          kUI/dtmz0xePcXTVDofAu2CjhBhvuqbVm8tA9WkuMN4=
Subject key identifier:   26:C1:58:E7:E7:3E:3C:70:9B:32:96:F6:E0:00:46:E7:B3:04:7F:B4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E689194AFEEA2727FC0FAD780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc5a3dec-98a3-32b3-a8dc-d83ad84f0ab6.roa
Signing time:             Wed 29 Jun 2022 12:00:00 +0000
ROA not before:           Wed 29 Jun 2022 12:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.254.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:68:91:94:af:ee:a2:72:7f:c0:fa:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 29 12:00:00 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=08108799-4fc4-4bf6-86bb-06957db62a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:f1:c9:a4:25:3d:0c:1b:fb:08:d0:bb:dd:
                    83:a9:21:5c:92:22:7b:cc:e7:78:3b:ae:66:02:15:
                    99:0c:e7:63:76:76:42:ba:c7:ff:93:1e:28:08:0c:
                    12:85:75:95:bb:39:09:a9:00:7d:6b:cf:60:ab:ec:
                    01:49:6c:62:92:a2:de:e7:5d:50:63:bb:83:f4:8f:
                    24:37:a1:3d:7b:63:d3:f8:48:e6:86:ec:8c:35:a8:
                    5c:c9:78:f8:ee:c3:63:92:be:02:bd:ad:f9:0f:ee:
                    80:98:4c:8a:c1:f0:6b:6f:5c:67:7c:db:a5:a5:82:
                    e9:7c:f5:1a:f3:bc:ff:52:c8:1f:d8:08:d1:bb:89:
                    01:bd:4e:fd:c2:9e:ce:2b:d0:a1:b6:82:9c:51:8d:
                    74:b2:85:10:65:eb:24:c7:35:27:f7:fa:bb:fe:f9:
                    76:da:ae:a1:02:ab:b4:09:a1:17:3f:27:50:b2:d3:
                    35:74:2e:b4:6c:5c:f4:34:a9:cf:da:63:32:f5:5c:
                    30:17:e9:76:d8:bd:f6:b1:ae:81:e9:22:8e:a7:7a:
                    0b:21:a3:f3:d0:02:1e:27:97:0b:b9:a1:8e:03:a0:
                    20:50:5a:ef:08:3a:92:76:69:7b:52:39:01:d8:1b:
                    89:b5:bb:c7:44:93:98:21:d5:fb:86:4f:78:94:ef:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:58:E7:E7:3E:3C:70:9B:32:96:F6:E0:00:46:E7:B3:04:7F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc5a3dec-98a3-32b3-a8dc-d83ad84f0ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8d:06:62:fa:1b:74:33:f8:83:95:76:27:8c:92:45:1b:eb:
         72:8e:52:79:c0:2a:ef:e1:eb:e3:1b:4a:9c:4e:71:ef:17:89:
         fe:a1:95:6d:f9:6b:48:8b:88:33:fc:a7:8c:57:fa:63:01:61:
         40:cd:b4:0a:52:35:4d:54:66:d5:b7:ae:1e:bf:fb:4c:35:49:
         28:1c:76:29:45:af:14:a7:8f:fe:18:6d:a0:d5:f3:92:53:a8:
         a4:0a:08:8e:94:c0:4e:8a:9a:2f:41:02:1c:de:a6:82:e2:af:
         1a:f6:6e:ba:d4:0c:6f:67:ac:4d:93:00:95:28:7b:53:a4:67:
         fd:f6:0f:be:19:d9:4c:c9:b5:87:66:a3:d9:e9:76:af:d1:73:
         2d:f4:6e:23:8c:92:b2:fa:60:de:49:64:62:8b:cc:fe:f3:a8:
         02:7d:ca:a6:bd:23:bf:2c:93:a2:52:39:7f:c9:89:c0:39:27:
         e8:92:a1:41:8e:21:d2:8c:fd:59:da:fb:12:fe:89:4b:39:de:
         f8:77:29:61:81:01:6b:4c:5c:74:24:f9:7e:50:d2:0c:b2:a2:
         56:db:22:12:db:4a:eb:2e:37:78:f3:92:79:b3:db:87:7d:17:
         3d:b8:8b:91:93:8b:79:67:a8:29:1c:b1:ad:a7:04:0c:85:2c:
         4c:07:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:52:37 2025 by rpki-client