Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2ed3358-a1c8-3fbe-8590-f85c8d006a16.roa
File:                     f2ed3358-a1c8-3fbe-8590-f85c8d006a16.roa (raw, json)
Hash identifier:          d77KYsbVvD/hhV36wwlB7v9eJsr7SFDNX2DPviqlp/M=
Subject key identifier:   80:E0:BE:56:E3:F1:12:6C:7E:EF:5C:78:3E:8F:0A:C7:10:71:8B:3A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F05488CE156DC158E57362760
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2ed3358-a1c8-3fbe-8590-f85c8d006a16.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.184.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:05:48:8c:e1:56:dc:15:8e:57:36:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=0e4d75c1-e093-4abd-8254-dc22ac2894b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:0a:d6:49:12:30:35:61:04:e2:0d:d8:39:
                    e9:0a:5c:a1:42:9e:3d:63:46:23:70:5d:d5:b4:48:
                    35:2c:e5:83:50:19:a9:9a:1b:93:54:7e:6c:cf:c3:
                    42:5f:10:fd:9c:c0:dc:24:e9:f7:ff:2b:b3:6d:37:
                    59:75:5d:da:5e:c2:7d:fc:2d:f5:5d:08:c0:23:49:
                    7e:1b:90:08:4b:46:00:0d:7e:2f:42:6c:c6:c9:07:
                    55:36:50:2b:9a:9f:9b:0a:91:f7:4a:d2:23:3b:9c:
                    01:5e:c3:8d:6a:34:46:fa:b8:03:86:2d:97:4f:4d:
                    e0:bd:11:5b:92:27:97:20:18:c1:14:a0:2d:d3:44:
                    52:14:1d:f9:a6:13:73:be:45:af:47:cc:3c:d0:32:
                    46:82:ae:38:3f:84:59:c9:86:c1:a8:5a:48:a5:8c:
                    c5:61:a9:3e:e0:e2:3e:d2:98:37:39:8b:eb:a8:b8:
                    5c:66:c2:a7:c2:b4:29:2f:44:57:61:fa:cd:ca:1f:
                    66:11:5b:7d:5c:1e:4f:d9:ec:ad:7f:bc:43:ca:2d:
                    fd:89:f1:92:2e:fa:c3:98:f1:ac:e9:e1:93:14:84:
                    e2:e9:f6:09:c2:b7:22:99:d4:f6:f8:d0:9f:47:76:
                    12:e8:ce:8a:33:37:7b:79:de:5d:fa:96:92:e0:1f:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:BE:56:E3:F1:12:6C:7E:EF:5C:78:3E:8F:0A:C7:10:71:8B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2ed3358-a1c8-3fbe-8590-f85c8d006a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:8b:f8:d8:f7:bd:8d:15:c0:47:bc:1f:e5:6f:10:a9:a4:ed:
         e6:be:f0:58:86:86:2f:a6:f5:e9:77:a2:2e:31:19:c7:5c:47:
         b3:2d:53:26:ad:78:c6:26:61:ef:c6:cf:61:be:67:74:26:aa:
         34:36:0b:d2:28:14:d6:56:1c:d9:26:b1:a4:95:04:81:5c:36:
         b0:18:7b:6d:86:b6:49:10:0c:84:29:b9:6e:10:d5:7c:d9:67:
         a8:eb:20:54:58:01:49:91:5e:e3:72:d9:8e:82:b4:35:d0:aa:
         04:03:05:d0:5d:90:9e:f6:e0:d8:81:43:e8:67:02:bb:dc:c0:
         ec:94:07:6d:68:7f:46:e0:f5:02:c0:10:e7:35:4b:34:ea:9b:
         07:82:aa:10:b7:a8:db:3a:2f:92:8d:49:09:10:8f:6c:cb:fa:
         a4:36:b6:3d:ed:4c:33:9a:71:57:fd:7f:7e:bc:cd:75:e6:b9:
         7c:1d:9b:17:b7:a6:7a:f9:a2:31:de:02:42:df:db:02:96:59:
         5f:72:3e:88:a7:05:97:8c:c3:7a:a6:b7:4f:6d:99:c6:79:c0:
         13:c1:0c:56:d6:51:53:29:15:43:aa:56:84:66:f5:df:18:98:
         fd:92:e7:da:77:8b:64:34:84:e2:41:9f:f6:9b:06:24:59:5b:
         a4:fa:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:35 2025 by rpki-client