Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c785b080-f4b7-3c59-bf32-b6e9049dc9c9.roa
File:                     c785b080-f4b7-3c59-bf32-b6e9049dc9c9.roa (raw, json)
Hash identifier:          MRUqAPDK+QVHam1G3Vne2ubLJFALhokFAqLc7WPb7SA=
Subject key identifier:   A5:BA:A4:E0:A7:B2:E9:2F:8C:E1:13:1F:32:41:BB:EB:71:30:B6:5E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E8FF1A568D45F813ED462A280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c785b080-f4b7-3c59-bf32-b6e9049dc9c9.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.184.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8f:f1:a5:68:d4:5f:81:3e:d4:62:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=534a6934-3cbf-4132-877e-517768ddf5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:3e:85:63:7b:40:a3:8d:a4:f4:92:6c:5b:
                    c9:1c:31:f1:d5:0c:95:3d:93:ae:70:37:96:9f:df:
                    f1:18:ab:dd:bd:09:e4:47:4e:55:6c:25:d9:fc:f0:
                    9b:b8:97:98:30:9a:34:bc:5c:56:d5:70:c1:08:e9:
                    f5:39:83:02:21:5e:52:40:5c:27:fd:b0:d1:9d:3a:
                    c2:98:d8:95:e3:be:48:06:27:d4:73:ae:b9:38:52:
                    c3:27:dd:b8:81:2d:92:67:cb:9d:58:52:e7:1e:81:
                    2e:8e:c1:33:f8:f1:14:b9:3f:00:13:41:a0:b8:5e:
                    95:9b:f9:e4:d5:b1:9d:78:c9:b2:c5:f4:15:f5:c2:
                    3e:b9:2c:30:37:ae:5b:aa:0d:68:74:ad:fe:b4:5a:
                    2e:34:c9:18:79:a0:33:94:76:f3:d2:d2:35:fb:ae:
                    e5:47:60:26:bd:bf:ee:83:91:69:e8:ed:e7:f3:a9:
                    43:ef:e9:2a:02:af:ae:d4:af:9b:c0:31:90:3d:5d:
                    72:1c:b0:df:11:0e:18:d0:38:e8:0f:b6:ea:c8:c4:
                    ed:43:b4:ac:70:95:12:c6:58:31:d8:8f:38:86:82:
                    41:27:8f:6d:2c:ab:22:3a:0f:19:65:6c:c7:43:8e:
                    b0:0e:92:6a:5c:0f:c4:43:45:e6:a1:1f:54:fc:c7:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:A4:E0:A7:B2:E9:2F:8C:E1:13:1F:32:41:BB:EB:71:30:B6:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c785b080-f4b7-3c59-bf32-b6e9049dc9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:29:23:6f:3c:3b:40:e3:96:13:f8:39:73:e1:3c:91:92:
         f9:7a:ba:e2:40:8c:db:b9:b0:69:e4:04:85:52:16:f9:f2:d4:
         13:92:35:d6:05:7d:9a:c3:ef:3c:3d:6b:46:cb:46:f0:7c:54:
         77:e2:d5:21:dc:70:de:3d:43:82:54:99:f0:7d:ea:4f:fb:84:
         6c:98:ec:a0:38:da:dd:97:89:e0:51:4b:7a:0c:5b:cd:54:e3:
         74:48:42:10:1e:4e:67:a0:36:08:78:d2:df:d1:d1:55:4e:e0:
         5e:c1:c8:7f:f8:de:9f:8a:73:03:a8:dd:c1:dd:71:0d:10:03:
         b2:1e:86:c3:73:3c:d5:be:2a:82:f4:3d:9e:cd:e0:01:94:ab:
         84:ea:e1:0d:dd:54:14:a1:2b:3e:93:cd:b6:34:0f:de:7d:1a:
         e5:24:e6:41:dc:7e:ef:0e:b7:bd:be:a8:97:33:20:74:09:e4:
         37:80:8d:fa:7e:9e:b0:3e:1a:2b:6a:8c:c6:9a:c5:fc:96:82:
         8c:01:0d:fa:52:54:48:76:bc:fc:a3:7c:19:23:ca:13:7a:b9:
         52:a3:21:ca:a5:53:82:8c:60:1a:80:d1:21:85:b2:5d:c0:04:
         fa:8a:11:aa:c7:3c:af:94:05:e0:d1:4e:55:c6:9c:ff:94:bd:
         41:21:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:12:05 2025 by rpki-client