Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c015182a-a851-3e41-a6f3-3cbe8e09ffaf.roa
File:                     c015182a-a851-3e41-a6f3-3cbe8e09ffaf.roa (raw, json)
Hash identifier:          YX36u812wstYS7jv7/iOadS4swfSa+hwx+fvqlqCME4=
Subject key identifier:   0A:93:BE:95:30:A7:47:66:7C:38:72:70:24:21:63:04:9A:90:88:8D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCC33E7F79EE00ED37F6BF980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c015182a-a851-3e41-a6f3-3cbe8e09ffaf.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:33:e7:f7:9e:e0:0e:d3:7f:6b:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=8798de27-9214-4368-bbd8-5fcb138eb2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:75:a6:de:6b:0a:8d:1c:3f:ee:78:6c:df:
                    97:f0:af:c4:42:a6:66:32:b4:57:1a:60:23:a6:ce:
                    16:b3:a9:6d:a0:8a:46:b1:d7:7f:af:3a:2a:58:a2:
                    7d:3e:22:90:86:f7:be:7a:8f:e3:dd:52:e9:99:dc:
                    8c:38:e3:b1:51:6b:37:d6:ef:d1:5a:a0:34:41:87:
                    84:e5:11:32:69:ee:cb:f7:4d:74:1b:21:f5:65:4f:
                    78:86:96:6f:cd:9d:97:12:7f:a0:2a:e4:2e:e3:30:
                    d3:f8:92:4e:68:ee:e0:f0:c3:64:d4:1f:9a:c5:d5:
                    56:dd:89:f5:76:0b:37:15:3e:8d:f2:68:85:6c:a6:
                    99:e4:00:94:df:97:52:e6:da:c9:53:98:a0:c6:80:
                    0d:4a:ef:7f:db:ca:d1:66:0c:11:35:30:02:e7:c7:
                    d4:c4:bf:1c:b6:2c:eb:7f:0d:b0:74:18:60:61:84:
                    25:9b:dd:cb:30:80:d5:10:d7:67:dc:e9:f9:5f:7c:
                    55:79:31:f0:43:3c:27:a0:76:c2:24:14:07:02:2b:
                    36:f2:48:8b:2e:00:e4:b6:bd:59:8a:c7:61:c9:9a:
                    fd:31:26:2f:32:04:ef:f5:27:b0:94:d4:2a:96:ef:
                    35:2c:a8:28:05:7c:f2:dd:3d:00:23:3c:d9:c2:3c:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:93:BE:95:30:A7:47:66:7C:38:72:70:24:21:63:04:9A:90:88:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c015182a-a851-3e41-a6f3-3cbe8e09ffaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:ff:b0:4f:39:df:f7:0e:80:13:c1:a7:2d:c4:70:f0:a5:
         67:87:ba:8c:61:3a:85:03:20:dc:9b:f8:74:6f:88:7d:42:e9:
         cc:25:a5:5f:cf:d1:4a:dc:68:3e:5f:20:94:45:65:42:76:42:
         ec:05:03:f8:96:d1:38:7f:a0:b5:10:ed:0a:af:80:7c:2e:23:
         c6:42:bb:24:5d:8c:ec:65:d6:89:5c:f7:5b:8e:22:59:20:2a:
         29:da:7e:8b:d5:b0:5f:d1:5a:c7:44:5b:ca:c1:47:b4:ba:83:
         10:f4:79:9e:e0:06:a6:7a:da:1e:42:56:fc:fe:83:2c:a2:c7:
         3d:dd:6e:4b:ec:e1:ca:b6:0c:2d:20:aa:50:3b:17:03:13:49:
         bd:cd:7b:28:0c:b5:c9:2e:4b:02:b2:7e:ee:bc:ba:41:e4:00:
         1e:e3:df:fc:19:f7:57:b0:0d:35:ff:4d:a8:7b:d8:b0:56:a2:
         59:75:37:62:2f:d6:81:f4:0e:43:ac:c1:5b:86:42:18:93:07:
         51:99:29:8e:b1:c8:f5:45:67:ba:2e:bd:ec:23:03:a5:3c:b8:
         b3:1c:8b:4b:a3:af:fa:d5:1e:e3:bc:54:ac:e5:d6:70:8a:9c:
         fc:86:5b:8e:27:36:80:62:ca:a3:81:88:c8:c9:72:bb:71:78:
         c0:a0:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:12 2025 by rpki-client