Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6d7b902-56f7-3c8f-8339-6d7df5a08da9.roa
File:                     e6d7b902-56f7-3c8f-8339-6d7df5a08da9.roa (raw, json)
Hash identifier:          gn9BthTUA8n+m9nj3DLF48shN0r5kEAJoaZqtuQcEtg=
Subject key identifier:   55:87:C7:7F:E5:85:18:5C:3B:0F:3B:20:E0:78:34:54:07:05:00:B4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F2C1B23249567D92B683CE100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6d7b902-56f7-3c8f-8339-6d7df5a08da9.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Thu 13 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2c:1b:23:24:95:67:d9:2b:68:3c:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Oct 13 04:00:00 2022 GMT
        Subject: CN=a7e81acd-a830-45d3-9c40-b464591121c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:de:2e:8b:00:31:eb:2b:84:20:24:b5:55:b8:
                    da:24:c5:94:e7:ae:b6:bd:ac:7e:df:67:59:65:ad:
                    4e:38:bc:db:a1:a0:e1:95:3d:69:c9:b5:67:10:be:
                    5c:7c:1a:09:28:27:0b:6f:89:56:d1:b6:38:18:57:
                    2b:69:19:17:58:f6:29:a7:26:66:5d:b2:4f:76:37:
                    5a:8b:28:6b:62:ba:4c:26:f7:59:0c:76:ea:5c:92:
                    f1:9d:9f:f7:29:d5:a1:95:14:90:ac:fd:4f:d7:91:
                    b2:78:c9:78:ae:e9:b9:e9:4b:24:d4:a5:e1:75:b9:
                    ca:19:96:45:af:77:1d:a1:86:1c:17:54:cd:d7:8a:
                    0c:3a:58:cb:24:99:e9:fe:9a:3f:eb:9b:d3:c9:d6:
                    dc:3a:89:7a:a3:ff:8e:de:68:3d:1b:97:99:fa:ef:
                    de:00:09:13:a7:e2:cc:f5:7c:b9:d3:fe:82:62:c0:
                    42:3f:0b:22:ef:ba:f7:5e:72:21:41:d7:9c:45:33:
                    41:57:f1:34:19:99:b1:c5:cc:24:32:d5:fa:f3:12:
                    83:2e:aa:00:90:0e:a2:22:a1:46:9b:7d:07:2a:46:
                    36:2c:bb:03:0c:db:32:b5:6b:8c:20:a1:e1:e5:8d:
                    19:7f:99:3f:30:3d:49:6a:ac:a9:b8:f0:92:c8:4f:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:C7:7F:E5:85:18:5C:3B:0F:3B:20:E0:78:34:54:07:05:00:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6d7b902-56f7-3c8f-8339-6d7df5a08da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0f:1c:a7:3a:aa:b0:6a:6f:1c:d5:ca:8c:84:af:3c:5e:df:
         34:c7:84:02:21:20:b5:cd:c6:b4:7a:10:21:77:f6:40:50:6f:
         59:c9:ed:9f:1b:c4:71:66:73:6a:77:d4:e1:cd:5c:d9:68:01:
         20:4e:36:87:2f:bd:45:ea:3f:16:13:9b:9f:33:9a:c4:e4:db:
         5d:9f:bc:bb:f7:37:e5:26:a9:14:b4:a7:dd:e1:14:8c:6e:6c:
         51:e5:51:2f:ef:57:c2:02:44:9d:a7:d4:de:18:dd:5e:49:e7:
         c6:b4:eb:c9:67:66:09:7c:e6:d8:f4:6e:2e:5d:e6:1d:01:b6:
         7a:b2:d2:07:51:9b:a8:9c:ba:58:3b:73:ee:74:dd:10:0c:f8:
         70:7c:77:3c:3d:6e:4a:44:ad:ec:87:0c:f9:46:9a:06:e5:a5:
         70:50:a9:76:22:db:8d:9e:15:f1:b2:8a:c9:1a:4c:ef:2a:d2:
         e7:b8:f0:ea:50:0a:9e:62:23:cf:52:a8:4a:91:55:63:d1:be:
         76:8e:16:06:6c:4b:1d:2e:7d:19:2c:a4:54:98:6f:8d:18:10:
         1b:50:0c:3f:b1:0f:8f:af:99:38:28:e5:ef:66:0b:7e:57:b1:
         89:23:c8:57:23:58:0f:ea:66:27:7a:cc:1b:4e:dc:a8:9b:d1:
         b9:15:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:38 2025 by rpki-client