Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3ec567c-1cd6-3b6e-862d-dfcb1b8a532b.roa
File:                     c3ec567c-1cd6-3b6e-862d-dfcb1b8a532b.roa (raw, json)
Hash identifier:          E73AEZ/txhSjWYD+P9UQQXFF6H0nzqkNvpZgOlHIMCE=
Subject key identifier:   30:3D:73:F5:B6:08:E5:9D:73:CA:05:04:64:81:FF:67:5B:CB:8F:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D5665DF4041D4EC812F6A2B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3ec567c-1cd6-3b6e-862d-dfcb1b8a532b.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.236.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:65:df:40:41:d4:ec:81:2f:6a:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=fa8d9b25-a85c-4819-81a5-90a48088a10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:bf:19:cf:d2:2f:02:a3:e7:19:f5:4d:2c:
                    28:17:17:50:05:2c:eb:fe:2e:a6:44:a8:20:19:11:
                    9d:1f:71:d1:e6:c1:da:10:a9:8d:69:37:5d:3a:f9:
                    44:d1:9c:99:44:27:b7:94:1a:29:b4:95:5f:92:81:
                    e7:b8:78:f7:85:59:98:71:db:5f:be:98:98:11:a1:
                    07:b7:c1:b8:2c:c3:18:84:8f:16:bd:3f:61:ef:5f:
                    1b:ca:bb:02:03:ed:74:b0:68:75:09:f3:4a:05:ea:
                    39:4a:96:03:90:33:97:94:0c:f8:1b:00:9b:20:21:
                    26:5b:6d:b0:bb:53:de:6c:d2:60:95:2f:4b:3a:06:
                    df:6c:f4:ed:8a:57:65:f3:45:7f:64:e4:4c:c4:40:
                    e5:95:9b:04:6c:27:37:99:2b:99:f2:0d:9a:6c:53:
                    a7:b4:42:e2:c2:c7:b9:d0:71:a3:27:4c:c6:51:e6:
                    c4:7a:cb:c2:0f:fc:e8:a0:1f:81:9d:35:55:76:9c:
                    32:de:62:db:3c:42:ed:bd:b8:33:f5:18:5c:fa:c6:
                    c1:cc:05:77:16:d1:d2:ea:84:d4:a1:57:9e:52:51:
                    d8:7a:48:18:b7:14:9d:29:b4:de:99:20:00:55:f6:
                    96:9b:5c:59:83:f4:c1:53:ae:24:f8:9e:4f:12:a0:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3D:73:F5:B6:08:E5:9D:73:CA:05:04:64:81:FF:67:5B:CB:8F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c3ec567c-1cd6-3b6e-862d-dfcb1b8a532b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.236.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:a3:07:1a:56:07:fd:98:4d:72:3a:4c:a0:77:2c:49:00:
         42:b1:1e:08:e2:73:e4:c8:57:7a:d8:6f:8c:22:1f:c2:47:59:
         3d:94:d2:31:63:7d:7c:65:e9:43:03:95:fc:df:96:30:dd:fd:
         08:18:e7:70:e2:27:6b:60:20:a8:4b:12:45:36:79:8a:ba:36:
         0e:a9:60:ac:8c:13:8a:d3:93:10:8b:f7:72:2a:25:83:69:11:
         90:59:89:6b:bf:74:98:0e:01:21:5d:7c:5f:90:6f:17:48:36:
         93:50:4c:22:d2:6e:f3:bf:c1:be:9e:1e:01:41:d0:cf:d2:b6:
         3a:d7:b9:42:54:f1:15:6c:34:00:aa:4c:07:63:17:ce:62:0b:
         ed:6a:71:f6:e3:6e:cf:db:a8:5e:99:c1:35:9b:5c:73:27:3d:
         e7:bf:d1:c6:7a:8d:b6:fd:dd:93:f4:5a:80:0f:ec:c8:40:4e:
         e2:9e:59:29:91:80:c5:45:57:ef:da:40:6b:d8:02:e7:af:0d:
         f9:a6:f9:25:30:29:cb:12:a4:cc:31:1a:fa:c3:96:10:ec:0c:
         b5:87:68:f3:81:b2:98:ec:b9:34:5c:5e:31:a1:99:cf:9b:74:
         ec:e7:e9:48:8c:dc:97:e0:5a:e5:6b:79:ed:ae:09:13:26:ef:
         29:bf:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:22:04 2025 by rpki-client