Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6b27c7b-09bc-343d-bd9b-ad27497eeadb.roa
File:                     c6b27c7b-09bc-343d-bd9b-ad27497eeadb.roa (raw, json)
Hash identifier:          DDfdnkxAEtRlL4QW+/rSpXhR4tlqBd40keo6Ndya28Q=
Subject key identifier:   32:6B:3D:A7:60:D0:D8:8E:7B:7C:B6:41:7D:98:4C:B3:1C:E4:12:6A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F3F71D1C26397070C6D509980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6b27c7b-09bc-343d-bd9b-ad27497eeadb.roa
Signing time:             Wed 14 Sep 2022 12:00:00 +0000
ROA not before:           Wed 14 Sep 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.196.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3f:71:d1:c2:63:97:07:0c:6d:50:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 14 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=c1fdbce3-d217-4dbc-b6e7-1626836b9a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:46:11:35:28:11:92:fe:c5:9b:ef:ea:f0:
                    93:1a:c1:39:ff:9d:c5:02:c7:9e:40:69:75:57:64:
                    8e:4b:86:7c:c1:42:38:01:d1:17:56:16:24:9c:c9:
                    84:4c:4b:6a:3d:de:d7:ba:da:3c:da:a0:73:ec:3c:
                    6d:33:55:11:1a:f1:65:a7:55:7b:d4:ae:ca:fb:a0:
                    d4:31:11:97:e2:06:ab:fe:cf:35:d8:6b:91:e6:c4:
                    9e:8e:61:b7:4d:f0:af:14:69:bf:cb:fa:ef:24:d3:
                    a4:57:24:71:a1:1a:88:1b:85:80:99:15:a2:38:bb:
                    fb:fc:fe:ad:17:a4:ce:a4:8f:f4:b0:ba:16:c8:c8:
                    b1:75:08:33:48:6b:28:94:cd:7f:fc:53:9a:84:90:
                    74:af:0c:31:61:e8:ab:32:22:e7:72:dd:fa:10:eb:
                    22:b6:5b:c9:1d:7b:d5:c7:3f:97:cb:e8:72:c3:88:
                    40:8d:c8:2c:2f:62:14:72:4c:0d:3f:33:5b:9b:a6:
                    b8:6a:68:8f:83:0e:0f:a4:3e:d9:1e:d0:a3:23:1a:
                    69:47:ed:34:5a:d1:d1:a6:4e:d6:33:89:36:b6:b8:
                    89:81:3b:e6:9d:91:43:3a:fb:51:61:7d:95:09:34:
                    21:4b:83:c9:55:1b:96:8f:55:c1:10:0f:d8:a3:1b:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6B:3D:A7:60:D0:D8:8E:7B:7C:B6:41:7D:98:4C:B3:1C:E4:12:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6b27c7b-09bc-343d-bd9b-ad27497eeadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:54:ce:72:67:7d:55:95:21:43:4d:42:1b:33:cd:97:49:
         49:71:de:79:30:23:5d:50:90:be:a9:0d:47:e6:f3:91:ed:c9:
         66:27:f6:7d:12:cf:d5:01:f4:ae:a0:42:a3:e2:8c:5d:3c:8d:
         29:72:c0:11:66:1b:0e:61:f3:1e:c3:4b:b5:f6:e1:1e:23:ec:
         be:0f:48:40:a7:9b:6a:7e:4e:76:e2:3f:a4:95:ec:3f:35:ea:
         a4:5b:78:eb:a5:e3:9b:df:cc:68:87:c9:6f:85:d7:59:a6:2c:
         54:d3:6c:3a:e3:41:1b:54:a5:c0:ad:a1:fa:4a:83:e4:ea:1e:
         a8:42:bd:ed:22:aa:b1:2a:3f:d3:2d:e2:48:7f:10:bd:15:dc:
         64:c5:f5:20:56:97:89:d8:3f:71:a9:02:d8:c1:06:19:52:68:
         35:81:7a:82:8e:7e:aa:2f:86:7d:86:a3:4e:e0:5d:35:20:5e:
         5f:36:4d:d2:2e:95:fe:8d:16:ce:cb:7f:26:34:49:e3:73:26:
         27:c7:fa:04:3a:d5:b1:05:af:6c:b4:d4:86:7a:ef:c9:be:05:
         a1:af:e7:20:c9:b3:33:59:ef:75:d6:81:c7:21:2e:dc:40:54:
         2d:2a:46:ce:7f:47:16:b6:d9:c6:25:8c:40:94:01:63:49:70:
         af:ba:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:36 2025 by rpki-client