Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d93536fd-68cd-368b-ac61-5d782ccaeac2.roa
File:                     d93536fd-68cd-368b-ac61-5d782ccaeac2.roa (raw, json)
Hash identifier:          SVYqyCoo41gyfQnqEEw5dKdt7VPxNVp/BGN5JMyFKJ0=
Subject key identifier:   0C:52:A5:0F:4C:8C:68:65:34:BB:EC:C6:FA:98:AD:AE:D2:1D:30:31
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FB4E6A5CC540B2D3B7CA32BA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d93536fd-68cd-368b-ac61-5d782ccaeac2.roa
Signing time:             Wed 26 Oct 2022 12:00:00 +0000
ROA not before:           Wed 26 Oct 2022 12:00:00 +0000
ROA not after:            Thu 01 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.242.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:e6:a5:cc:54:0b:2d:3b:7c:a3:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 26 12:00:00 2022 GMT
            Not After : Dec  1 05:00:00 2022 GMT
        Subject: CN=1aeeff21-d789-4309-9010-5e14ccdb5a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:4d:7e:63:58:99:77:c7:f4:7a:04:59:1a:
                    a2:97:fb:03:17:b7:75:b6:61:96:8e:d2:de:86:35:
                    cf:0f:9e:3a:ed:f5:fa:21:a7:2b:fe:37:00:70:3c:
                    47:c7:84:91:a2:ed:90:68:44:b7:49:bb:83:c3:86:
                    3a:fc:51:c0:e7:3a:25:72:21:43:ef:78:87:11:3d:
                    69:51:ca:03:3f:a8:75:83:2c:50:f3:9c:d4:6e:8b:
                    64:28:e5:1f:78:b4:2f:b3:cb:22:df:a0:0b:18:c6:
                    1a:1e:48:89:b4:86:9f:07:d9:bb:9f:9f:0c:ee:d9:
                    8d:78:5a:83:66:48:67:02:a5:ad:59:f4:e7:6a:d1:
                    92:f2:e2:18:ac:9d:c6:cd:98:ee:65:67:67:00:9d:
                    07:d3:20:a7:37:e4:8a:77:f2:de:03:74:db:34:50:
                    ad:45:95:fd:f8:3c:28:1d:6f:df:7b:cc:12:27:34:
                    71:2e:2d:3f:09:02:2e:ac:60:46:3c:3d:22:51:17:
                    ec:5b:0b:71:28:90:21:0a:f1:c2:35:bd:c3:0e:bf:
                    b4:2c:40:bc:e3:fb:af:c7:42:14:b5:66:ea:31:8a:
                    34:14:93:fa:54:19:a4:94:08:39:4d:b8:98:56:32:
                    44:ba:1a:7f:49:ec:29:27:6d:8c:03:96:44:66:0e:
                    f6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:52:A5:0F:4C:8C:68:65:34:BB:EC:C6:FA:98:AD:AE:D2:1D:30:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d93536fd-68cd-368b-ac61-5d782ccaeac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:70:fd:b4:61:e2:6a:c1:c2:ac:03:a0:12:97:58:e4:2e:0c:
         8b:8f:38:29:26:96:57:3f:0a:28:23:29:2e:1d:ad:8f:c6:d7:
         c8:5f:12:b0:7a:c7:c2:64:f5:a3:63:4d:42:88:93:e1:58:34:
         9a:a2:29:4f:15:13:56:0e:a8:3e:35:56:f1:c1:89:15:0b:94:
         fc:67:9b:7c:1f:f2:50:65:d0:d3:43:f3:f3:19:95:d1:8f:fe:
         44:96:cd:18:80:e9:8c:80:b8:f1:d2:3d:af:0c:1a:40:7d:43:
         91:66:cd:15:be:3c:ac:b9:05:9c:0e:34:9f:61:b7:24:ae:5d:
         79:c7:49:b1:91:0b:ac:45:54:a0:1d:2a:3c:35:a8:ef:4e:ed:
         a3:22:24:37:46:57:e2:40:22:97:e1:52:50:09:ad:0f:e9:62:
         24:91:26:15:82:b2:66:20:7b:9b:51:12:29:6d:79:7a:b8:dc:
         3a:cc:16:42:4b:aa:3b:16:18:9d:e5:ad:f6:cd:28:23:a3:93:
         8b:90:b5:75:ff:78:b5:66:5b:f6:c5:8b:2a:90:1e:2b:3e:64:
         86:69:ec:77:48:ad:99:4b:f5:ec:72:4f:1e:9d:8c:9e:d5:2a:
         04:65:27:b3:1a:8b:07:92:ca:23:39:75:fa:50:09:ec:34:0a:
         d0:7d:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:14:12 2025 by rpki-client