Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/efd7ed54-7270-3ce3-a5b2-1f6b04530b2f.roa
File:                     efd7ed54-7270-3ce3-a5b2-1f6b04530b2f.roa (raw, json)
Hash identifier:          XzZYePf3hvgsvzNHZ1tmP9ivgTXnK+EweaY33rubmnk=
Subject key identifier:   51:89:06:16:02:0C:49:E7:77:22:52:07:C2:28:B6:E3:10:40:F1:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E53DD213AA0E4095854789200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/efd7ed54-7270-3ce3-a5b2-1f6b04530b2f.roa
Signing time:             Wed 22 Jun 2022 19:36:07 +0000
ROA not before:           Wed 22 Jun 2022 19:36:07 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.199.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:dd:21:3a:a0:e4:09:58:54:78:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 22 19:36:07 2022 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=63461082-5441-4a30-a5bf-1f3bc4d70eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:94:4d:32:8c:84:90:f4:96:f4:7a:51:c4:f5:
                    32:94:40:46:29:12:85:b9:0d:3f:92:50:e0:f1:e0:
                    81:af:51:26:f1:5e:4a:08:60:35:a3:9a:44:bc:57:
                    7b:76:35:b7:b9:5b:af:54:0d:da:e8:2a:86:9e:48:
                    86:5a:e3:63:4e:da:89:e3:7e:4e:fb:b0:e4:66:07:
                    bd:de:25:ad:ce:4e:30:6c:31:a3:6d:28:5b:2a:23:
                    a5:a8:ff:8a:4f:3b:cc:7a:de:35:b2:81:2c:11:dd:
                    d6:d4:eb:06:06:37:8d:ee:56:22:88:89:63:d1:15:
                    00:90:7f:b8:f5:59:df:60:fb:ad:63:0a:2b:92:60:
                    de:3c:88:df:d7:4c:21:9d:86:cd:ec:62:ed:6c:0b:
                    b9:cb:22:ef:e7:1c:4b:f9:ca:fa:e7:9b:18:18:7e:
                    89:b2:92:0a:9d:da:68:75:2f:49:3d:5c:71:72:f3:
                    08:55:0d:dc:83:79:58:6e:0b:df:a2:03:27:86:cf:
                    b2:7b:09:dc:58:8f:81:b7:fe:24:94:39:3f:cc:c4:
                    06:a1:c7:8c:a0:60:43:5f:ee:a1:48:7e:92:bb:d9:
                    6c:a2:c3:da:4a:e1:21:8b:3e:22:88:c1:da:f6:58:
                    27:bc:49:01:01:ef:f8:b8:b4:47:5a:d2:09:2c:b9:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:89:06:16:02:0C:49:E7:77:22:52:07:C2:28:B6:E3:10:40:F1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/efd7ed54-7270-3ce3-a5b2-1f6b04530b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:56:eb:fa:6e:0d:a3:2b:0f:ad:21:8a:07:65:19:44:fb:
         72:27:a2:6c:b0:f6:9e:11:80:85:1c:94:5d:97:0a:8f:85:35:
         9e:a8:fd:c1:38:88:d4:d1:60:45:63:24:ef:97:c8:6d:32:e2:
         77:01:1a:c3:7d:16:28:46:36:6f:24:81:f5:25:d2:a7:0f:2b:
         32:02:7f:13:cf:2f:6b:12:99:ab:54:13:4d:7b:c3:82:e6:7f:
         7d:63:a4:96:f6:9c:22:64:10:96:c6:b3:32:7a:3a:f6:46:57:
         de:2b:6e:04:b0:ef:d2:49:65:8b:a9:a1:83:55:80:02:56:96:
         34:35:98:00:46:bb:17:0f:d0:a8:6c:17:34:d2:d9:36:9c:00:
         7e:01:e6:b3:d6:d2:ac:13:bd:fa:68:48:63:4f:c7:d2:76:99:
         2b:dc:16:f7:c2:94:4b:3c:ec:6c:cb:20:c0:fa:cb:39:a9:b5:
         32:66:d4:d5:fb:4f:ce:af:e0:b6:74:14:6d:01:30:b3:1c:a2:
         9c:b6:fd:3d:75:bf:3b:14:26:dd:49:cb:e1:53:38:b5:92:5e:
         f9:98:ba:25:96:69:a2:9a:b9:0f:bd:04:59:fc:18:16:50:60:
         54:03:0b:7d:35:72:c7:55:a6:07:7c:e0:00:67:bd:47:cf:ed:
         9a:c3:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:42 2025 by rpki-client