Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d0256bbd-d446-304f-8d18-e61dbb9858e8.roa
File:                     d0256bbd-d446-304f-8d18-e61dbb9858e8.roa (raw, json)
Hash identifier:          HSxKos/JOj74KyqJi0wRaYibXl3vyv0WIiUfrnV6tdM=
Subject key identifier:   B5:DA:3A:C6:26:F6:4D:7D:C0:98:1B:ED:27:6B:F6:E9:8C:D4:01:E3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD8DFA6859B38530339EADB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d0256bbd-d446-304f-8d18-e61dbb9858e8.roa
Signing time:             Tue 08 Nov 2022 12:00:00 +0000
ROA not before:           Tue 08 Nov 2022 12:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.202.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d8:df:a6:85:9b:38:53:03:39:ea:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  8 12:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=07c522d0-9520-4e46-8b02-5dfaf6818f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:9f:58:cd:52:b7:f7:f1:c7:af:bb:33:3a:
                    45:45:55:fb:03:52:b1:c5:e4:d7:74:66:eb:19:2f:
                    2d:80:69:e2:e0:07:5b:52:9d:01:bc:4a:fe:40:01:
                    44:f6:4a:99:4a:5d:dc:e7:35:fb:5a:4a:7e:6a:2f:
                    70:d4:33:59:4c:6f:ae:f2:84:b7:2c:0e:b5:e5:f8:
                    0b:80:58:22:f2:13:57:47:69:f3:11:56:bb:50:85:
                    4c:91:9f:c9:48:88:83:3f:1a:bf:c3:c6:b3:d5:e5:
                    ac:e4:60:9a:d2:43:02:5b:b0:6a:ad:ac:00:9c:af:
                    81:5a:69:fb:91:bc:cb:2f:16:87:49:5b:0f:c2:52:
                    2d:08:3b:54:06:c6:12:3c:02:f3:1f:2e:c0:37:2f:
                    65:5f:56:0f:a1:37:a4:49:67:ee:ba:4d:17:33:e2:
                    d8:b2:70:94:1c:d6:7b:3b:be:cd:17:12:a6:0c:f3:
                    c3:ba:39:6c:2c:e7:85:b2:9d:fb:65:8a:a0:dc:bb:
                    0f:5c:e6:84:c3:58:36:3f:1a:34:ee:16:c8:e8:9b:
                    21:61:84:1e:9a:86:c5:80:98:2f:c2:c7:8b:ce:94:
                    46:50:52:de:a1:05:7e:40:aa:93:8e:0a:17:5d:4f:
                    dc:df:87:93:23:38:4e:45:a6:fe:5a:bc:2f:33:72:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:3A:C6:26:F6:4D:7D:C0:98:1B:ED:27:6B:F6:E9:8C:D4:01:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d0256bbd-d446-304f-8d18-e61dbb9858e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:34:f3:3c:9c:5e:cc:2c:48:45:56:6b:75:3b:e0:84:37:
         36:47:dc:ec:fe:23:47:cb:2b:eb:89:61:2c:33:d1:97:ae:e5:
         fe:36:51:05:e3:79:c2:1e:26:8f:b9:48:d6:01:ca:3d:7b:3b:
         c9:17:17:31:21:d6:fe:39:86:14:90:7d:5d:01:35:51:a8:b2:
         ce:5d:58:c4:74:e4:79:75:d6:32:5c:83:61:69:ef:c5:d2:12:
         97:8f:be:5d:32:7a:d8:ac:51:6d:db:f7:24:12:ca:1a:ab:7f:
         1c:89:d5:30:e3:d6:6d:d7:46:0d:fe:16:93:bf:e0:19:17:93:
         17:0b:68:9a:56:5f:8a:c3:0f:48:44:b8:89:1f:3b:5e:d4:85:
         54:bf:7b:3d:b6:0c:19:13:b0:6b:c0:09:21:63:12:26:c8:f9:
         17:09:97:5d:19:39:27:03:df:f1:fb:c1:de:a9:16:ff:05:e5:
         6c:14:a5:aa:b3:d1:22:69:42:65:c6:28:b9:08:77:47:b8:7d:
         10:3e:25:5d:6d:83:a4:0e:0b:5c:e8:53:26:d2:f1:d3:4e:45:
         81:79:00:4b:c7:8f:84:9f:79:4b:7a:d2:30:24:b0:73:2e:3b:
         6e:a4:cf:48:3d:96:ed:9c:e5:b3:7b:03:9d:d8:34:4a:42:7f:
         46:1e:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:06 2025 by rpki-client