Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3c0ab99-34ae-3c1c-b786-ffe070da865e.roa
File:                     d3c0ab99-34ae-3c1c-b786-ffe070da865e.roa (raw, json)
Hash identifier:          DC5uWYI1uEOoIVNNIqPhZr3MCpNUwGgrkrnHJr2K874=
Subject key identifier:   A4:B5:69:F7:72:AC:E0:BB:6A:38:3F:01:3B:7C:C1:9B:7A:09:69:EE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F638FFF71336A2B1B119A9F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3c0ab99-34ae-3c1c-b786-ffe070da865e.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:63:8f:ff:71:33:6a:2b:1b:11:9a:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=abeae7e7-4b9b-4fb6-9d1e-209fb1510629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:19:e9:ce:20:23:28:04:62:61:53:f4:3f:
                    0a:a0:7d:06:30:d2:cf:54:a2:57:e9:46:43:bf:5c:
                    59:85:c3:51:bc:19:8f:b5:8f:e3:89:20:33:46:f0:
                    3f:9f:e5:7a:18:49:77:0e:53:90:cc:33:d5:15:ed:
                    00:ae:03:fa:5a:5b:e2:1b:68:12:93:4f:c6:6a:7e:
                    de:88:3e:c2:6e:dd:e9:d6:3a:db:d1:4f:51:f3:56:
                    29:48:03:04:4c:90:8d:4a:43:f2:e3:07:9b:4f:58:
                    78:2d:fb:14:dc:7b:32:46:c3:95:54:35:d5:a2:70:
                    48:63:32:ae:52:d8:dd:fd:11:ec:5e:5e:2e:00:68:
                    be:a1:77:96:76:25:28:0a:b6:ae:e2:e1:14:44:b4:
                    dd:7f:ff:35:b3:66:b8:d7:ba:1b:04:9f:2b:a4:42:
                    6b:dc:09:3c:11:15:2b:76:b9:4f:4a:06:e7:e3:b6:
                    06:bc:10:3b:5d:e9:f6:82:66:6c:8a:17:33:69:58:
                    86:59:75:13:d1:fb:a1:98:fb:3d:71:e2:4c:54:52:
                    be:8e:39:5b:66:dc:f7:7f:9e:2d:b7:30:c2:4d:ca:
                    d9:03:e4:40:65:45:98:70:ab:5b:4f:11:55:a0:b7:
                    79:f3:6d:48:6d:46:ed:e4:0a:6e:b4:3c:20:e3:98:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:69:F7:72:AC:E0:BB:6A:38:3F:01:3B:7C:C1:9B:7A:09:69:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d3c0ab99-34ae-3c1c-b786-ffe070da865e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:57:a7:f6:a1:2d:52:57:76:16:b2:ee:cb:5e:c5:71:d5:d0:
         de:40:70:f4:ca:c1:07:d8:38:9c:3c:8f:ae:dd:22:e8:b0:fe:
         be:58:67:1a:e2:33:1a:fe:4a:b1:32:bb:9c:2f:0b:67:63:9b:
         74:0d:10:da:4c:52:af:18:f7:0e:28:a6:9c:19:88:b1:86:57:
         6c:11:57:fa:99:92:86:8b:85:69:cd:ba:2c:6a:de:6c:0c:3a:
         9e:09:36:06:56:85:eb:e1:c0:f7:54:89:06:b9:c8:f1:ed:a3:
         f4:82:1f:73:0e:71:3b:68:a3:e5:f4:0a:89:a5:f4:12:6d:bc:
         09:71:2b:ec:39:47:3c:a8:09:3c:03:15:27:36:e9:36:cb:9a:
         7e:2b:af:ff:4a:12:92:e1:38:59:78:8f:b3:b8:eb:0d:b7:08:
         ec:4a:22:ad:5e:30:58:9c:17:4e:1a:14:eb:22:83:03:68:4b:
         4a:a9:4a:ef:c1:a3:a7:7c:c3:56:71:71:ac:81:d8:80:07:62:
         ce:ba:15:c0:27:17:45:77:20:72:28:1f:de:1d:1a:0f:f2:7d:
         10:cf:74:61:c2:fc:ac:1e:3a:91:ae:65:ad:76:67:e3:5f:fd:
         eb:08:21:f3:7f:c9:3b:dd:4c:f3:da:e4:7d:a3:96:8c:e2:ea:
         18:09:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:31 2025 by rpki-client