Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d358287b-cbe2-3231-914e-d18033673247.roa
File:                     d358287b-cbe2-3231-914e-d18033673247.roa (raw, json)
Hash identifier:          wO9SImlVZlPI2vk8xEl3/Q3ILa1UEvwdNNs7m53bA3k=
Subject key identifier:   46:D5:F6:F6:D7:DB:8B:B4:49:72:D6:9A:43:83:72:1F:28:D2:2D:BA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB6F0CD6C84A9110A9EB8DA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d358287b-cbe2-3231-914e-d18033673247.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.205.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b6:f0:cd:6c:84:a9:11:0a:9e:b8:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=2bca1b18-9b77-47ab-87c9-91d504578d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:de:64:ba:45:d5:b6:4d:0f:47:2f:cb:40:
                    2b:3d:68:ef:20:6d:8a:c2:bc:2b:31:2a:e7:b7:bc:
                    04:95:a4:95:9e:c4:a0:96:80:e3:ed:9b:0c:5a:bf:
                    5f:c1:f3:29:25:fb:b4:64:db:3f:38:5a:63:4b:07:
                    16:d2:5e:e4:a8:7d:b1:f8:48:ed:dd:d9:9b:61:9c:
                    cb:71:eb:29:fb:9d:46:6c:49:20:31:78:6c:73:61:
                    0e:37:ad:38:f3:99:b4:4e:3e:79:62:ff:f1:44:ce:
                    17:19:ca:59:a6:b5:51:52:a7:c5:0b:e1:b1:1e:ec:
                    1e:79:30:bf:b4:d2:f7:00:e6:22:ff:10:ce:5c:21:
                    ef:60:52:d6:be:7a:a8:c9:f6:e9:df:6d:a9:f4:b0:
                    05:4a:8b:56:92:03:b4:cc:0b:c2:28:4e:9a:0a:48:
                    3c:42:05:05:dd:37:0b:d2:f2:eb:ff:fb:51:5b:ce:
                    07:c0:ad:a4:cd:12:33:56:69:a8:34:f3:0a:9f:a0:
                    72:a9:ff:44:ce:b7:a4:27:4d:f6:41:27:72:b4:df:
                    f1:23:db:4f:9f:af:cc:87:9a:4a:f1:f5:cf:e9:51:
                    2e:ca:81:20:36:9f:f1:bc:e8:c8:cf:48:26:03:7c:
                    39:80:eb:79:77:99:99:16:b1:64:c2:46:68:c0:2a:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D5:F6:F6:D7:DB:8B:B4:49:72:D6:9A:43:83:72:1F:28:D2:2D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d358287b-cbe2-3231-914e-d18033673247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:4b:85:67:5f:3f:50:58:13:e6:a9:77:12:6e:a9:5f:7c:
         4f:80:e3:e8:23:bb:f8:b3:70:7a:09:d9:f8:75:6b:85:ec:d7:
         0e:a2:a9:58:d5:0b:2b:de:4a:8b:9f:03:5b:d8:0f:ad:8e:21:
         52:c0:71:28:06:d7:76:6f:52:b8:f7:22:be:6f:4b:f9:f9:f7:
         40:7b:c1:c7:d6:f0:f2:6f:5f:30:ff:e1:72:59:32:20:6f:db:
         a9:55:c5:2f:ac:07:9a:45:24:e4:55:ef:e1:e4:4f:1f:89:1f:
         6d:14:fc:95:5f:97:25:56:3c:45:4f:80:5b:e4:90:0f:44:9c:
         20:9c:08:d7:eb:86:18:e8:05:60:92:2d:38:05:4b:f8:6f:77:
         21:1a:55:a2:06:86:89:20:6b:6a:1b:aa:9a:ea:64:9f:dc:ed:
         5b:7f:79:2c:c8:36:0e:9f:d0:89:f0:72:b1:0f:10:89:79:6e:
         0c:bb:12:ed:3d:56:e9:96:de:17:c8:4c:b3:b5:40:58:0c:5a:
         cf:48:a7:bf:cd:f5:30:04:ba:0d:fc:2e:6d:e9:14:d6:43:3f:
         03:d3:f7:e0:58:34:62:9c:13:8f:36:af:d2:d2:ed:6d:c1:0c:
         64:aa:9d:c4:0d:b3:1b:0f:a7:2f:67:77:ea:60:60:52:3a:52:
         02:cd:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:31 2025 by rpki-client