Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa0cad35-5ec0-3fb8-86cb-58ccf2d1a5ea.roa
File:                     fa0cad35-5ec0-3fb8-86cb-58ccf2d1a5ea.roa (raw, json)
Hash identifier:          kAphY3CT1OZ708vme68PnxySe16tpewferOL8vRpgm8=
Subject key identifier:   79:49:6C:9B:DE:71:5B:C6:B0:A9:4E:B9:D3:30:11:67:50:1B:D0:23
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FDC64A0BFA5B3E4D39DA54E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa0cad35-5ec0-3fb8-86cb-58ccf2d1a5ea.roa
Signing time:             Wed 09 Nov 2022 12:00:00 +0000
ROA not before:           Wed 09 Nov 2022 12:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.234.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dc:64:a0:bf:a5:b3:e4:d3:9d:a5:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  9 12:00:00 2022 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=c2edbe2c-2c17-422b-ad62-183f288ba4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:20:52:39:ad:1e:69:0e:8d:8d:21:d3:66:
                    a9:fb:9a:6c:40:50:14:01:e5:7f:d5:5c:13:0f:de:
                    8c:62:59:0c:36:26:cb:ea:bb:f3:bf:37:de:51:e3:
                    ca:1b:3b:55:48:08:b7:1b:31:6a:5d:cd:e5:33:13:
                    c7:cd:46:53:e2:99:d6:94:97:57:1a:ca:06:ef:e0:
                    5c:77:8b:32:ee:d6:d6:a3:50:c8:d0:a3:36:b2:01:
                    49:05:48:95:7d:11:60:d1:ba:36:02:96:31:0f:f6:
                    c2:be:5c:d6:cd:f4:d9:6d:14:e4:ab:6c:75:3b:74:
                    4a:48:49:c4:44:37:fd:57:56:5b:9d:02:32:7c:2c:
                    67:cb:2e:8d:8f:eb:bd:b4:5f:0e:3e:06:9d:0a:c0:
                    c9:d0:45:6f:3a:4e:83:5c:c7:e8:35:08:5c:db:72:
                    d2:22:58:d2:33:0a:b3:3e:53:33:74:63:26:37:46:
                    8a:91:08:05:9e:9e:65:c5:76:5f:47:f1:39:5f:35:
                    83:a2:4c:a6:aa:27:5f:36:da:a7:3b:6b:04:e7:56:
                    be:15:13:8c:69:a3:c4:48:a5:80:a9:b3:c6:bf:c1:
                    17:28:a5:44:36:ef:fc:71:38:b9:4b:d1:3b:de:be:
                    3c:06:6b:52:06:07:55:5d:5b:86:0d:44:77:d2:71:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:6C:9B:DE:71:5B:C6:B0:A9:4E:B9:D3:30:11:67:50:1B:D0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa0cad35-5ec0-3fb8-86cb-58ccf2d1a5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7e:c2:53:f0:c9:e9:bf:3b:68:c1:fd:6a:71:04:ca:10:a7:
         88:0e:01:25:9b:3d:ea:f8:33:73:b7:b3:7c:7a:70:19:9d:be:
         03:15:ea:68:a7:1d:86:13:2e:16:88:b4:bb:fa:41:7d:65:1e:
         33:ce:38:3e:c2:4b:23:5a:5d:0e:95:0d:cf:fe:a8:8d:3c:74:
         49:7a:8a:d8:a1:69:43:92:91:11:db:e2:8d:a7:01:90:13:bd:
         02:2e:f1:a4:6a:49:91:17:c4:8d:d6:6f:34:dd:0b:f3:be:1f:
         bc:2b:9d:77:06:22:8b:c2:2d:df:f9:e6:4f:8a:6d:73:2b:34:
         20:44:d0:be:c1:f7:4e:02:bf:5c:e9:6f:26:42:81:de:6b:ff:
         81:2a:a6:f0:28:28:29:2a:70:cf:c3:92:66:ed:78:2e:2b:c3:
         1b:2b:f1:79:2d:16:a7:3c:9c:53:df:92:ca:62:63:25:1f:a4:
         53:a0:9e:14:3e:2a:f7:17:15:de:41:85:b1:f0:d2:b8:1c:f6:
         10:74:85:ae:ac:6a:b1:15:57:7a:fb:58:7f:07:c6:c8:24:91:
         77:ab:79:b5:e6:ce:1b:04:1b:b8:83:a2:d4:1e:90:7e:fb:53:
         fb:ed:e1:b9:a0:60:f1:b7:5c:4a:6a:0e:9c:4b:ee:0f:28:c7:
         7c:8a:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:04:16 2025 by rpki-client