Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eab7ec09-d182-35d3-8fb1-8f17392d8657.roa
File:                     eab7ec09-d182-35d3-8fb1-8f17392d8657.roa (raw, json)
Hash identifier:          VZoH/bsXJHP27fg7pAfEg8sqO/R/QKu1hsudC6B20c0=
Subject key identifier:   B0:E6:4E:18:67:61:92:9F:6E:8B:35:A3:48:88:AB:7D:DE:16:9A:E0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E9000745421877F6331BA45C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eab7ec09-d182-35d3-8fb1-8f17392d8657.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:00:00 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:90:00:74:54:21:87:7f:63:31:ba:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 13 12:00:00 2022 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=02fa86d3-2c3d-49cc-b1fe-1cf0aa19415d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:a1:31:c7:98:7c:ab:d9:48:6d:fd:ea:16:
                    d2:65:e2:10:84:11:8d:e1:d4:3c:60:96:9c:a5:2f:
                    e3:27:ac:17:52:59:37:18:7f:ac:74:92:d7:c8:42:
                    74:02:9f:c2:e8:97:6b:ad:a8:14:f7:0b:97:31:31:
                    5c:70:9a:ef:ea:95:05:84:09:b4:9c:98:25:7d:21:
                    6b:ba:d8:82:0e:22:cf:ba:df:d5:74:d6:30:6f:ed:
                    8a:de:1d:d8:9f:b0:08:17:58:3d:bc:91:6c:54:a8:
                    4f:61:27:b2:7b:1b:3b:b9:05:3b:e7:f9:92:91:a0:
                    80:c9:28:1b:00:82:37:13:25:77:10:3b:9d:fa:4e:
                    42:24:df:30:d2:a7:e8:e5:08:3e:5b:02:b9:3a:cc:
                    9e:5f:61:42:9a:77:a5:10:e1:bf:69:2e:42:e4:e3:
                    15:b3:07:23:b5:71:88:37:15:bf:4b:35:f5:2c:ef:
                    0d:a1:d9:ab:c4:fb:39:0b:a3:f7:0f:2e:ed:6e:9f:
                    72:59:c3:3a:64:a1:0b:79:9d:9e:b7:f1:20:79:45:
                    a6:a0:c5:6f:3f:63:7e:f2:19:df:fa:c0:07:73:b1:
                    5d:ec:f6:7a:ea:02:9d:48:4a:77:ad:1e:c2:49:1b:
                    ed:2b:b5:2f:d6:33:1d:0e:fb:47:17:da:6d:5e:34:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:4E:18:67:61:92:9F:6E:8B:35:A3:48:88:AB:7D:DE:16:9A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eab7ec09-d182-35d3-8fb1-8f17392d8657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:81:95:f8:d8:b3:66:74:06:a9:9b:65:52:33:88:c8:65:
         29:f8:45:be:62:c6:5c:c7:e4:e5:58:27:7f:ca:8e:e4:44:0b:
         c6:9e:ee:e9:6e:5c:6f:6e:05:fc:04:2b:3f:c4:d6:71:37:4d:
         69:48:33:21:bd:b1:4a:9e:1b:88:27:ad:f8:c0:62:79:da:ff:
         bf:fb:bd:c8:ef:86:fa:d2:d5:16:24:39:bd:33:02:62:4b:c2:
         0f:e4:38:4a:c5:67:52:d2:28:58:e7:28:81:03:2f:7e:74:72:
         b8:f6:ad:21:c8:bd:cb:1f:d6:d1:88:d6:cb:d8:89:b5:23:67:
         60:bf:16:89:2d:b0:b0:08:66:57:ae:ca:05:9d:a4:16:58:c0:
         bc:ad:bc:b0:e2:9e:70:c5:be:b6:76:4b:21:7e:7c:1d:8e:dd:
         de:3d:8d:2a:a4:68:b9:bd:d6:2f:15:77:fd:77:b3:1d:1c:a1:
         d2:b3:e6:b6:a3:85:d7:6b:5f:ce:43:f4:53:a5:ad:d0:fd:72:
         13:af:e3:6b:fd:47:f6:9e:30:eb:17:23:37:53:5c:e7:f4:e3:
         4f:49:26:d8:24:dd:74:ea:02:52:16:34:e3:d6:f4:7b:b2:d5:
         2f:34:fe:7b:56:00:1a:ce:39:42:2c:ab:17:7e:70:d9:56:95:
         47:0f:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:02 2025 by rpki-client