Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3bceb19-91dc-3f12-af9c-bd95f5a829df.roa
File:                     e3bceb19-91dc-3f12-af9c-bd95f5a829df.roa (raw, json)
Hash identifier:          SfyZjoYfTj2t/mfbnxo9Wrkf0mpMgmBbFn2sfHGoNT0=
Subject key identifier:   EA:1A:68:31:05:CA:19:A7:80:B0:DA:98:A4:D7:5A:69:57:D5:E6:F8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7ABD6E0B4C180DD36E0D1480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3bceb19-91dc-3f12-af9c-bd95f5a829df.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:bd:6e:0b:4c:18:0d:d3:6e:0d:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=ec4c5af7-9628-41c1-9678-08fd56facc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:27:f3:26:a2:ab:92:28:54:2b:0b:60:ed:
                    18:88:ad:7f:0f:e3:ff:8a:0c:2e:2a:5f:91:06:f2:
                    f1:b4:6d:97:4f:9d:cb:bd:b2:5e:37:ea:15:19:ab:
                    11:7b:6c:31:49:33:0e:87:22:13:99:54:fb:31:a7:
                    1c:b5:79:24:9f:71:9e:a8:39:a5:1f:23:28:cc:c2:
                    62:f3:ed:97:32:95:00:13:c7:da:18:c2:9a:c5:f1:
                    5c:01:d3:5e:24:95:e0:41:6e:f4:45:0b:e7:c0:6b:
                    9c:d6:44:3f:1c:bb:9c:68:7f:95:d9:84:78:ec:53:
                    ee:13:5b:06:d4:74:dd:8b:10:9a:02:76:ee:4f:86:
                    0a:ab:ac:64:58:a7:f3:d2:58:b1:6b:a3:0e:4c:cc:
                    d7:9f:ab:e6:fc:82:96:42:97:f7:40:a3:f2:82:83:
                    27:10:eb:08:50:08:c5:d3:99:ce:01:b5:3c:4c:e7:
                    dc:4f:52:be:95:58:22:9a:6c:db:cb:5b:d3:76:19:
                    4b:db:11:39:fe:e9:fa:f3:22:c0:b5:86:84:d8:78:
                    df:4e:c3:2c:c8:6e:dc:68:8c:9b:ed:47:1d:4c:56:
                    3a:25:8e:b5:bf:da:bb:f8:cd:0f:ae:8e:1d:33:d8:
                    c0:d1:9e:37:5e:bc:6b:02:77:1b:84:c2:89:b4:d0:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:68:31:05:CA:19:A7:80:B0:DA:98:A4:D7:5A:69:57:D5:E6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3bceb19-91dc-3f12-af9c-bd95f5a829df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:96:f0:25:db:a6:11:cd:ba:c4:a7:f0:b6:0d:d5:5e:af:d7:
         94:ae:db:fb:5d:50:8d:5a:7c:bf:9a:52:61:11:bf:10:00:39:
         89:31:61:b9:5c:4f:44:77:2b:67:70:57:7f:aa:25:98:44:c5:
         1d:05:ab:a0:56:e6:7c:d0:21:51:c7:6a:53:ec:dd:5a:f3:de:
         df:29:4c:68:e6:71:e5:f5:10:57:d9:db:ea:2e:70:23:ca:ee:
         19:40:f8:52:16:42:19:fa:d7:51:3f:8b:f0:e2:32:93:88:f8:
         e4:58:67:00:02:38:38:51:76:4d:e3:82:5d:ff:1e:61:b3:6a:
         af:03:fc:60:b8:d5:df:f5:fd:35:4b:85:40:b2:d9:c0:06:1d:
         01:07:c7:de:70:b3:fd:80:e9:f5:2a:77:e9:37:8a:8b:29:90:
         ab:63:f2:dc:f3:22:96:b2:3a:88:5f:fd:4c:3a:7b:51:36:b7:
         e3:ce:8e:a4:d6:ce:3a:e9:17:cb:6d:c4:02:71:87:f8:2e:5f:
         15:d6:be:c8:d8:c4:b6:b2:8b:64:a9:04:95:ee:05:b6:be:f7:
         55:7b:2b:b4:88:9e:89:a0:43:8c:8a:83:52:c8:1b:57:1f:f1:
         fa:28:f4:cd:1a:34:69:cf:cd:9f:3c:56:a5:bc:c5:2f:94:49:
         fa:ff:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:39:34 2025 by rpki-client