Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb5e3765-edc5-3088-9ca3-2ae9590dfd2c.roa
File:                     cb5e3765-edc5-3088-9ca3-2ae9590dfd2c.roa (raw, json)
Hash identifier:          uLiQH/O7p1afei4andoE+Dxm6rNM3A8ukyKzBQ1eaLk=
Subject key identifier:   BD:8E:1C:22:FE:DB:82:0C:7D:4A:C2:8A:2F:58:0C:40:CF:00:C7:5A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCC4A533CF28DF97FBD0AB600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb5e3765-edc5-3088-9ca3-2ae9590dfd2c.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.197.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:4a:53:3c:f2:8d:f9:7f:bd:0a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=1e9f42d3-877b-42f8-a315-4ffbcdd36168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:72:a4:71:5b:05:86:36:aa:09:b5:39:16:
                    13:8a:7e:f9:5c:5a:84:5c:c2:6c:d1:af:84:26:5a:
                    10:73:54:b0:01:89:57:70:3d:c4:f6:99:41:4e:d0:
                    d7:ac:72:81:ae:47:38:d7:db:9f:c9:7f:e9:55:3d:
                    79:ad:3b:34:f1:96:8c:e3:f0:2f:0b:88:56:44:6c:
                    56:40:29:c6:77:c9:4a:9a:fb:f1:90:3b:0a:45:a0:
                    72:b2:55:58:53:13:c8:0f:2a:f8:90:0e:a3:ce:bf:
                    c9:4a:d5:e5:d1:82:c0:f7:03:e5:ef:c2:65:43:6d:
                    15:76:52:5e:ba:bd:9e:a8:5e:06:6f:f6:fa:08:33:
                    17:71:a4:30:0a:19:e1:79:50:65:07:8c:73:c7:4d:
                    d9:db:1d:f3:7a:2d:e3:3b:06:5b:8f:47:89:4c:af:
                    31:a6:ac:0c:2f:01:b9:52:c4:84:65:d9:fe:21:32:
                    60:6d:7d:b4:81:39:fe:74:00:71:0b:13:e0:82:c0:
                    d1:f4:9e:e5:71:32:dc:db:a3:6b:42:ea:bf:78:90:
                    d1:70:fd:e9:b2:8d:8c:20:04:69:73:57:ef:78:7a:
                    6f:7b:bd:d2:58:64:d4:12:3b:ab:21:ec:d2:fa:f5:
                    30:28:fa:90:fa:57:e7:e9:07:eb:96:c3:bb:49:cf:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:1C:22:FE:DB:82:0C:7D:4A:C2:8A:2F:58:0C:40:CF:00:C7:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb5e3765-edc5-3088-9ca3-2ae9590dfd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:f9:23:36:b2:06:34:29:0a:83:29:ba:25:39:9a:16:b9:
         1c:c5:d6:d0:a9:2d:ee:01:90:38:49:96:ad:ab:00:54:1a:c6:
         48:28:9c:af:bd:44:26:e5:e5:ec:22:8e:48:c0:34:9e:92:61:
         d3:8b:40:68:9a:a7:bd:07:bc:4a:ef:ec:0e:9d:bb:74:28:2d:
         b3:60:3a:0a:8d:5a:ea:70:f0:d1:e2:c4:94:cc:8b:0d:10:1e:
         39:b6:18:ed:1d:d0:56:08:47:a4:ab:3f:5a:35:41:8b:36:ac:
         85:d5:ee:34:f4:15:65:1d:be:24:8c:2b:92:8f:29:c6:92:6a:
         9f:0d:cd:de:6d:48:96:06:71:62:44:3c:45:4a:f6:6c:8b:b3:
         48:57:81:16:4c:32:80:8f:db:0b:a4:85:9c:18:bc:6e:dc:33:
         16:33:0f:93:6a:45:c8:27:df:04:95:3c:17:77:e7:54:8c:4e:
         b7:56:32:04:ca:4b:67:eb:a3:d6:17:b4:9b:98:1f:0f:53:d3:
         5f:c9:6e:7f:64:cf:81:de:49:f3:e1:4c:8f:a3:c8:ef:b8:81:
         78:ee:32:16:15:9e:b2:0e:0c:1c:23:07:c1:28:2a:01:7f:d7:
         21:6b:a3:e6:69:eb:4e:46:ea:f3:be:b2:42:bf:f0:d4:d1:09:
         c9:d5:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:01 2025 by rpki-client