Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d36702a6-b56f-3540-86e9-c76d70888d63.roa
File:                     d36702a6-b56f-3540-86e9-c76d70888d63.roa (raw, json)
Hash identifier:          UkPBV30RdmoFErEpZ0gAEq3Sa5W8I02OGU+H10FwxMY=
Subject key identifier:   FB:B7:DA:2D:71:1E:BC:3F:C9:39:46:44:AB:01:28:41:24:D1:30:97
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F66964A0F036AC78641556380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d36702a6-b56f-3540-86e9-c76d70888d63.roa
Signing time:             Wed 28 Sep 2022 12:00:00 +0000
ROA not before:           Wed 28 Sep 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.149.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:66:96:4a:0f:03:6a:c7:86:41:55:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 28 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=fac68bf4-2f3b-46df-aefa-e31391f47810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:54:39:1f:6e:8e:ab:3c:38:ee:3e:65:77:
                    c3:bf:e0:73:2e:a0:e3:bb:e8:ec:40:fb:81:22:4c:
                    ac:41:c9:ef:75:9a:21:03:65:41:29:e3:aa:1f:c8:
                    18:50:df:df:ea:67:31:c9:4a:15:b2:c0:4e:bd:32:
                    bb:15:a3:d6:5b:fb:59:3f:66:13:ed:7c:2b:49:85:
                    82:4c:25:f1:77:2b:57:0f:4b:93:76:09:00:6e:fe:
                    c8:aa:ae:22:ee:13:ab:c8:de:07:8d:d1:03:2c:b3:
                    b8:c3:b5:ed:96:04:13:bd:65:51:0c:17:61:dd:5a:
                    ff:5d:89:1b:b6:05:69:ed:fd:b6:69:b2:d0:48:aa:
                    86:02:62:4e:ba:b4:32:af:57:db:28:f5:90:67:62:
                    18:ac:30:48:cc:31:3e:40:e7:8b:c2:54:35:6a:4a:
                    a0:0d:26:c2:0d:2d:b3:46:93:82:f1:99:f4:c8:a3:
                    f6:3b:cd:bc:79:26:e0:56:79:ac:0c:35:ba:eb:8d:
                    37:65:57:af:fa:65:9e:34:1a:f0:b3:12:c8:84:2c:
                    0a:fb:ba:b4:12:f4:29:8c:d6:71:64:4c:5c:3f:7d:
                    2b:e6:1c:1e:b1:06:f1:02:0a:98:0e:52:29:9e:c7:
                    ef:49:ec:ad:50:e2:75:7e:e6:9d:6d:78:24:d2:a1:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:DA:2D:71:1E:BC:3F:C9:39:46:44:AB:01:28:41:24:D1:30:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d36702a6-b56f-3540-86e9-c76d70888d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:85:27:39:e4:bf:d7:17:d0:6d:67:cf:30:d8:45:94:53:
         87:4a:d3:ba:d9:91:04:2d:03:0e:cf:43:39:c4:4c:75:0f:4f:
         89:84:67:d8:e8:ab:f4:32:42:84:ae:87:78:e7:6d:7d:bb:eb:
         64:1f:a0:c8:b2:c6:78:6c:ec:ed:79:74:ef:c0:ae:16:6b:6e:
         10:59:2d:40:bd:27:cd:22:46:66:52:5f:79:a3:73:21:45:89:
         75:d9:46:75:9d:bd:74:bc:d8:7c:a7:08:f2:d2:67:a4:9d:43:
         4e:a9:d9:99:51:a1:27:0d:9f:53:6d:ae:4d:04:4c:a5:7b:d1:
         45:12:7d:27:ab:ce:cd:22:2d:36:c7:a6:7c:de:0b:3c:71:1c:
         b9:70:36:b5:53:22:c3:8b:ea:c9:a5:77:b0:80:0d:d4:26:54:
         06:6e:ea:e0:2e:06:d5:17:4a:3f:fb:bb:e0:15:84:1e:bb:b9:
         f2:73:ba:0f:51:5c:eb:ac:6b:e7:64:59:7f:6a:dd:02:2e:04:
         98:31:27:5c:be:9f:69:29:e5:0b:c7:23:f4:e3:f1:76:52:fc:
         f6:35:5b:da:6c:af:7d:a9:81:7a:84:e9:cc:59:c2:9d:5e:65:
         22:21:f0:55:c6:3d:a5:7b:18:20:d7:90:09:03:5d:a5:86:55:
         99:a3:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:53 2025 by rpki-client