Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0994126-01c0-3d0e-9361-9f396fc024a5.roa
File:                     e0994126-01c0-3d0e-9361-9f396fc024a5.roa (raw, json)
Hash identifier:          WKUJUiLsjEgip1ngQPdUaqE5dkvTHOmnYzWe2ikNIpU=
Subject key identifier:   3D:96:93:E9:D4:75:2E:7F:1A:F6:52:D1:4C:7C:D1:EB:D8:03:50:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840523A167C8F3C7AB8227E9A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0994126-01c0-3d0e-9361-9f396fc024a5.roa
Signing time:             Wed 21 Dec 2022 12:00:00 +0000
ROA not before:           Wed 21 Dec 2022 12:00:00 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.146.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:52:3a:16:7c:8f:3c:7a:b8:22:7e:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 21 12:00:00 2022 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=844ecf1e-7354-4dff-9c20-da3d0d269a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:9f:f5:85:cd:2d:2c:05:fd:3a:4f:ca:03:
                    08:00:df:ad:6f:68:7b:2a:85:aa:22:2d:8f:28:62:
                    65:dc:ae:52:7c:00:59:43:b5:e8:a7:f3:42:e9:40:
                    34:0d:64:23:e7:1d:78:dd:23:15:73:31:80:8c:ec:
                    98:50:96:e2:b6:bc:ab:2b:d1:0b:26:bf:c3:22:53:
                    bf:cc:b9:33:d7:4c:ff:75:81:60:69:41:06:c9:3d:
                    ee:1b:4f:64:7f:26:e8:df:b9:68:c1:f6:5e:64:6e:
                    91:dd:29:0d:55:75:fc:b8:15:2c:c8:f8:14:53:bf:
                    16:f6:37:f0:5d:83:60:c6:8b:27:e5:e1:a8:f4:65:
                    bd:46:fc:b9:77:49:26:88:f9:72:76:0c:d8:9e:09:
                    a3:92:f2:0b:c3:4e:ce:24:d8:2d:7b:97:6e:9b:36:
                    e9:7e:c4:8a:9f:82:ac:87:64:5c:93:3c:37:04:fb:
                    8a:a9:c4:53:7f:aa:38:e0:13:4e:27:28:d0:0d:23:
                    c1:85:c9:e2:95:4b:c7:1f:a8:53:20:1b:b5:60:1d:
                    7c:de:b6:87:4f:42:63:ce:0f:3c:73:78:d9:09:4e:
                    47:13:ee:7a:29:5c:49:70:8a:0a:f9:c8:8b:6c:26:
                    86:b7:ed:c6:74:e6:fa:63:d7:7b:bd:3f:fe:d4:80:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:93:E9:D4:75:2E:7F:1A:F6:52:D1:4C:7C:D1:EB:D8:03:50:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0994126-01c0-3d0e-9361-9f396fc024a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:31:29:9b:5d:c9:44:2d:20:da:e7:4f:d8:bb:76:ff:75:
         4f:93:80:56:c2:57:74:60:3d:d0:87:cc:ab:08:d1:c0:0c:9a:
         72:b0:98:ae:c4:14:06:ef:8d:f2:d6:00:43:a6:10:24:6b:c1:
         a0:ac:e5:96:7a:14:16:ff:e2:9e:c1:64:b2:5c:fc:54:3f:93:
         87:62:d8:a0:d2:d2:a6:c1:0f:7c:23:49:22:75:83:a9:6a:da:
         e5:6b:47:53:c2:b7:fd:b0:c5:47:d3:8b:90:91:38:24:f6:be:
         ab:26:3e:e1:e9:9e:10:c8:a2:94:7a:08:8a:07:7d:07:23:76:
         07:be:bf:d9:31:f3:dc:06:d8:cc:b8:b9:41:61:54:f9:ad:24:
         2a:55:63:20:26:08:ff:41:b5:8e:d6:16:45:2d:01:bc:40:b5:
         3a:22:22:07:2b:27:76:35:86:4c:04:4e:96:8e:7b:9b:28:2b:
         a0:e2:53:23:7a:d2:41:04:5d:d1:48:0b:be:34:95:64:62:9d:
         19:cb:45:0f:9f:f0:d9:db:bc:ca:5e:d8:f3:6c:82:24:7a:5d:
         23:16:37:64:28:a9:26:02:8e:6d:2e:48:94:6f:5f:7b:cf:93:
         13:c4:d0:d1:e1:1e:26:72:86:f3:40:3a:a9:06:17:dc:dc:0b:
         2d:ad:02:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBSOhZ8jzx6uCJ+mgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyMTEyMDAwMFoXDTIzMDEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
ODQ0ZWNmMWUtNzM1NC00ZGZmLTljMjAtZGEzZDBkMjY5YTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc2f9YXNLSwF/TpPygMIAN+tb2h7KoWqIi2P
KGJl3K5SfABZQ7Xop/NC6UA0DWQj5x143SMVczGAjOyYUJbitryrK9ELJr/DIlO/
zLkz10z/dYFgaUEGyT3uG09kfybo37lowfZeZG6R3SkNVXX8uBUsyPgUU78W9jfw
XYNgxosn5eGo9GW9Rvy5d0kmiPlydgzYngmjkvILw07OJNgte5dumzbpfsSKn4Ks
h2Rckzw3BPuKqcRTf6o44BNOJyjQDSPBhcnilUvHH6hTIBu1YB183raHT0Jjzg88
c3jZCU5HE+56KVxJcIoK+ciLbCaGt+3GdOb6Y9d7vT/+1IATbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD2Wk+nUdS5/GvZS0Ux80evYA1BCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTA5OTQxMjYtMDFjMC0z
ZDBlLTkzNjEtOWYzOTZmYzAyNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD5IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOHoxKZtdyUQtINrnT9i7dv91T5OAVsJXdGA90IfMqwjRwAyacrCYrsQU
Bu+N8tYAQ6YQJGvBoKzllnoUFv/insFkslz8VD+Th2LYoNLSpsEPfCNJInWDqWra
5WtHU8K3/bDFR9OLkJE4JPa+qyY+4emeEMiilHoIigd9ByN2B76/2THz3AbYzLi5
QWFU+a0kKlVjICYI/0G1jtYWRS0BvEC1OiIiBysndjWGTAROlo57mygroOJTI3rS
QQRd0UgLvjSVZGKdGctFD5/w2du8yl7Y82yCJHpdIxY3ZCipJgKObS5IlG9fe8+T
E8TQ0eEeJnKG80A6qQYX3NwLLa0CRA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:16 2025 by rpki-client