Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbbdc36c-92b7-3754-8a99-68e8c562d083.roa
File:                     fbbdc36c-92b7-3754-8a99-68e8c562d083.roa (raw, json)
Hash identifier:          6q9XRktBk4VOXnZsX/OnuY6wdByJKxQDzFQ3k8JBgAA=
Subject key identifier:   AC:FC:83:88:F7:37:B5:2B:6B:E5:DF:E2:2B:41:F0:BE:E4:D5:34:47
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F66BB991BE6CEE15DC5ADF180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbbdc36c-92b7-3754-8a99-68e8c562d083.roa
Signing time:             Wed 28 Sep 2022 12:00:00 +0000
ROA not before:           Wed 28 Sep 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.167.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:66:bb:99:1b:e6:ce:e1:5d:c5:ad:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 28 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=c19751e0-a439-47ca-a359-2bbb4beee4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:79:56:9c:74:c9:d3:e9:99:86:e6:d6:05:
                    9e:2c:8c:c8:56:b1:90:36:0e:e2:b6:9c:3f:a6:16:
                    7f:92:3a:63:79:bf:5c:9c:a1:60:a4:22:c4:bf:53:
                    dc:2c:49:7a:9f:4b:3d:ac:31:a3:0e:de:ca:c2:13:
                    5a:01:b4:9a:22:c0:3c:1b:37:f9:db:3c:c6:65:d5:
                    22:52:af:f2:e0:9d:14:53:70:9f:75:c4:b2:6a:e0:
                    7a:87:29:9b:fc:12:f5:5c:37:e4:12:f0:13:24:bb:
                    c2:ef:ce:61:37:79:a9:64:b5:80:00:93:92:1b:06:
                    c1:da:19:21:29:2a:50:87:bb:f4:fb:d9:01:51:4e:
                    2e:91:c7:9a:19:33:a6:ce:46:41:85:4a:02:09:7f:
                    f8:80:8c:73:1d:9f:73:9c:7d:4f:71:11:e1:91:0c:
                    bf:9b:b9:04:ed:80:83:fd:05:03:c4:7b:16:70:9f:
                    93:98:4a:fd:20:09:5b:e2:7f:56:fa:24:b5:8d:fa:
                    77:5e:85:71:53:4c:e7:1a:9d:7a:05:89:2a:d0:fa:
                    8c:83:de:c3:8a:4c:83:5a:c6:be:8a:fe:b2:f4:3f:
                    f4:f7:9c:71:78:4d:15:55:4e:2b:e9:19:03:08:82:
                    e4:72:a4:35:b5:be:3d:84:f8:9f:49:7a:f2:52:16:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:83:88:F7:37:B5:2B:6B:E5:DF:E2:2B:41:F0:BE:E4:D5:34:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbbdc36c-92b7-3754-8a99-68e8c562d083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:6c:52:e4:4a:93:90:cc:b6:14:0d:87:8d:2d:01:54:9c:
         51:35:ee:6e:da:eb:22:e5:e0:31:f9:b1:ed:ab:29:36:40:d8:
         e3:30:fa:1f:32:9b:59:ff:bb:84:e8:21:78:31:e6:da:11:44:
         be:98:b9:3a:b1:f9:02:73:35:5e:d5:94:49:f9:cd:c7:6f:66:
         74:58:dd:78:30:4a:66:5c:44:6f:82:5a:f3:f7:f5:a0:b9:5a:
         6f:4f:b5:69:d7:f7:df:b9:1d:77:74:e6:4e:a1:89:17:e7:13:
         cf:f5:e4:9d:0b:28:ce:0d:0b:c2:4a:60:23:ee:37:1d:b9:b3:
         3c:b5:20:48:62:6b:ae:c2:d2:c7:54:8d:d4:83:eb:19:6d:94:
         e6:5c:df:a8:62:00:51:e5:07:ad:6b:4c:5b:f0:03:f0:08:72:
         37:0b:21:a0:ef:02:ae:4f:66:fb:ae:2c:98:a0:d6:3d:5e:72:
         1f:31:19:7a:f2:78:d1:1c:5b:a6:8c:c8:2e:de:a1:6d:9c:dc:
         e7:dd:ef:30:3f:6c:c3:ff:ae:97:38:6b:6a:2e:ae:b5:4d:f9:
         51:34:c6:96:98:9b:ff:41:88:8b:1a:60:39:28:83:da:dc:35:
         0c:ef:59:63:d9:29:25:f8:3e:88:77:1d:71:a5:7b:d1:50:28:
         5f:b5:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:41:08 2025 by rpki-client