Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d21cb05b-d356-34c6-9016-cf2b707badff.roa
File:                     d21cb05b-d356-34c6-9016-cf2b707badff.roa (raw, json)
Hash identifier:          mkrMb262lWu18IrW2SY8K6ENWPcKrONp9/fVcSRT4zU=
Subject key identifier:   CE:AE:4E:F8:95:CF:1F:7F:1A:6E:51:53:84:3F:06:9D:28:4F:F1:35
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C92C5C96B83866F8F7FDB8240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d21cb05b-d356-34c6-9016-cf2b707badff.roa
Signing time:             Thu 13 Jan 2022 05:00:00 +0000
ROA not before:           Thu 13 Jan 2022 05:00:00 +0000
ROA not after:            Thu 17 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.161.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:92:c5:c9:6b:83:86:6f:8f:7f:db:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 05:00:00 2022 GMT
            Not After : Feb 17 05:00:00 2022 GMT
        Subject: CN=3e68171f-9448-4310-9dad-336b2f36ca06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:76:e7:93:04:5b:f4:76:00:25:da:7d:c6:2f:
                    9f:30:a3:41:31:c9:51:f1:ce:76:c9:cb:43:4f:bc:
                    dd:b7:f0:c6:6c:56:a8:9e:ac:cd:18:ad:25:e5:15:
                    01:8b:9d:62:13:29:3a:c8:ca:f2:03:2c:16:52:5b:
                    c6:22:7a:bb:8e:75:2e:58:30:01:78:3d:61:19:cb:
                    c7:c9:17:cd:72:fe:8a:a8:4d:d0:92:bd:7e:07:fd:
                    10:2e:ed:bc:c0:08:c1:46:ad:82:ef:ec:c4:9b:16:
                    8e:30:86:e8:9f:7f:c4:cb:ec:13:7e:9a:a6:9f:45:
                    74:84:be:db:46:bb:73:8a:c9:6a:ee:de:d1:ae:a2:
                    23:1e:ed:e4:b3:9c:01:19:25:28:37:c6:96:1f:98:
                    00:e9:20:d1:c6:96:5e:14:7d:92:15:99:b4:3a:f4:
                    dd:90:b8:0d:b9:8e:f1:e3:41:e9:5c:7a:20:18:60:
                    61:58:0c:9a:a3:b9:2d:99:46:78:ea:4d:57:50:17:
                    48:14:fb:a3:a6:0f:9c:29:6d:45:0b:3e:84:75:21:
                    2a:e3:94:95:82:37:50:72:fb:8d:8a:a6:2a:3a:75:
                    2c:0c:d9:72:15:ae:4f:d7:1d:b2:21:39:d4:61:77:
                    d6:71:bc:cb:fd:31:d6:7e:84:d1:de:8e:22:6c:51:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AE:4E:F8:95:CF:1F:7F:1A:6E:51:53:84:3F:06:9D:28:4F:F1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d21cb05b-d356-34c6-9016-cf2b707badff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f7:04:09:8d:aa:4c:c2:72:0d:a7:86:a5:fb:50:34:80:50:
         1a:68:e5:62:89:df:57:49:e1:85:7c:80:63:99:a3:58:74:74:
         6d:2c:5a:56:6f:a6:ed:45:71:f7:23:61:bd:72:43:3a:ac:f5:
         0a:36:21:80:2d:3f:4f:2c:5a:d6:a3:0b:ca:4b:60:ef:e5:5f:
         a7:3f:ae:e4:a9:71:b4:71:62:d4:38:9a:fe:30:cf:81:89:06:
         08:fe:98:92:14:9e:5e:da:d8:71:b1:4c:63:91:bc:e8:fc:b1:
         d0:2d:66:69:58:fa:f2:32:74:d6:7b:2d:1e:40:dd:a7:b1:6e:
         0c:52:c0:c7:68:74:13:4e:44:00:63:7d:d1:ed:b3:b8:43:5e:
         c3:94:68:f9:a4:0d:6f:29:d6:3c:62:cb:c9:94:82:20:b1:26:
         17:1e:76:2e:6b:67:0d:0a:76:03:f9:e5:94:0f:5d:ca:f9:10:
         5b:4c:d7:48:50:94:97:be:37:29:67:36:ee:90:c0:f4:c1:94:
         e7:83:2d:3c:d7:5d:d8:1d:8c:cc:5c:1d:5e:22:ed:99:84:f7:
         4e:e1:4c:db:7b:d0:64:3a:85:13:3b:1c:87:71:52:01:2c:8e:
         c8:21:e0:b9:85:fb:cf:2c:15:da:8c:97:1d:e6:08:41:31:47:
         ca:a2:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:25 2025 by rpki-client