Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fef11333-e9a0-3b68-8ab5-3caffe210422.roa
File:                     fef11333-e9a0-3b68-8ab5-3caffe210422.roa (raw, json)
Hash identifier:          SeSLqVPt8oglUP/l8nSGALCmsHg16Q1RRzu/ewe2qGg=
Subject key identifier:   FD:11:67:E5:1C:67:F9:79:7F:29:AD:E2:54:FF:74:EC:7D:00:C2:95
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7A7AA077C83B2C9655C50CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fef11333-e9a0-3b68-8ab5-3caffe210422.roa
Signing time:             Wed 05 Oct 2022 12:00:00 +0000
ROA not before:           Wed 05 Oct 2022 12:00:00 +0000
ROA not after:            Thu 10 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7a:7a:a0:77:c8:3b:2c:96:55:c5:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  5 12:00:00 2022 GMT
            Not After : Nov 10 05:00:00 2022 GMT
        Subject: CN=f8a45322-3d36-49d4-88aa-57fd96ff5e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:68:31:d7:62:c6:86:ce:4d:3d:76:16:f4:
                    f9:ae:08:17:39:41:b3:38:87:03:41:bb:d7:a8:ad:
                    b7:96:50:8c:b8:9e:27:a6:1d:f1:a2:2b:a0:01:42:
                    df:d8:5b:12:e3:26:bb:f7:03:1f:7b:92:67:3f:1f:
                    7a:2c:98:21:9d:62:37:b2:d2:fe:c9:06:a6:ae:7e:
                    83:e0:80:9f:e9:d8:d5:6e:98:b8:a9:31:0b:8a:1d:
                    92:ae:75:89:43:ab:fe:b2:85:d6:17:68:f4:08:d4:
                    a5:20:c6:44:8c:6e:89:b6:6a:a3:75:87:72:e9:42:
                    d9:ab:54:29:60:71:b7:db:5d:f8:5d:1e:c3:20:78:
                    8c:4b:f7:bf:34:c2:27:a2:be:fa:b1:2d:58:27:bb:
                    db:39:63:10:68:9b:cd:ad:d2:81:30:ed:d3:72:98:
                    ac:74:10:24:d2:70:a3:05:2a:32:c6:6f:2d:1a:3a:
                    c8:fe:1d:cc:00:90:c3:ec:d4:69:74:56:b5:10:10:
                    f6:a9:e6:2d:23:12:45:35:d5:26:af:f7:20:75:7c:
                    53:ba:44:d1:19:ee:d0:18:66:69:5c:2a:29:22:1a:
                    e7:e1:c2:7a:80:4b:a7:87:ae:ff:a5:07:4d:05:5a:
                    ab:4c:2e:e1:30:dc:e7:43:7b:23:5f:5a:56:52:6c:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:67:E5:1C:67:F9:79:7F:29:AD:E2:54:FF:74:EC:7D:00:C2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fef11333-e9a0-3b68-8ab5-3caffe210422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:8c:15:4d:25:f1:65:86:3f:02:1e:42:b4:ba:88:32:ac:
         48:28:35:bb:62:00:3e:9d:84:d4:6b:b2:75:18:8c:37:bf:89:
         22:56:25:0f:ba:30:5f:6e:26:a0:22:36:28:88:b0:b6:7e:1a:
         95:d5:41:4c:41:06:66:ff:92:66:a9:d5:f1:07:b8:bf:3b:27:
         01:2f:23:db:6e:01:2d:72:23:73:d7:e3:78:55:a7:75:99:ec:
         70:70:e6:d1:62:f5:f4:07:30:92:a4:05:80:db:92:08:fb:1a:
         55:d4:55:8e:d4:0b:8b:8a:bb:3c:88:90:cd:31:57:4e:44:8b:
         28:5e:3f:6a:76:e5:e6:a2:b4:d3:49:f5:34:8f:f4:d9:5f:72:
         c6:a2:a7:10:1a:05:43:be:e4:80:c1:a8:af:da:4a:c3:eb:9f:
         31:8a:4e:e6:13:ef:ed:53:ae:d0:53:5f:22:82:09:c0:d6:89:
         df:e3:ee:ed:7b:bb:bd:a9:c3:1a:20:59:ae:3d:84:e2:d3:90:
         14:37:93:d0:f6:e6:09:3a:62:90:1a:de:3c:56:98:25:53:12:
         29:27:1f:6f:ab:3f:37:f9:ba:a7:50:e8:43:c8:1e:15:19:a4:
         f6:55:98:14:d9:55:29:18:fe:88:9e:a1:e6:03:a9:ec:04:45:
         ef:86:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:36 2025 by rpki-client