Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0866bb5d-4bf4-388f-91b0-4888350b5935.roa
File:                     0866bb5d-4bf4-388f-91b0-4888350b5935.roa (raw, json)
Hash identifier:          dAH8F+KvvdUQN8PlX4Wzpclg6oGhUODb3ez3V/PINjI=
Subject key identifier:   9B:9C:18:72:C9:49:9E:0C:4D:A5:13:30:0D:8B:F8:DF:DF:CB:60:A3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F541EE892C605D1C8F16947E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0866bb5d-4bf4-388f-91b0-4888350b5935.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.193.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:1e:e8:92:c6:05:d1:c8:f1:69:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=262d4ad7-a8b6-44f1-b83b-80de72b58a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:38:9c:45:21:fa:5d:b5:37:5f:25:6e:10:
                    8c:38:2e:b3:eb:60:04:00:93:fa:b4:c8:91:de:14:
                    97:1b:f5:88:56:6c:c1:10:83:88:e2:d3:f1:e1:3d:
                    b9:bc:7a:4c:26:fd:83:1b:c6:4c:33:04:77:0a:69:
                    a8:a1:76:a5:f3:be:0a:bc:80:d7:7f:1d:6c:ae:ba:
                    ef:75:40:b2:14:dc:c6:c1:ea:d3:ab:e4:c8:b6:1e:
                    18:7e:25:68:22:2d:10:0d:47:cd:f0:1f:a0:e5:2b:
                    b6:6b:98:73:37:0c:be:e4:7c:5f:81:9f:0d:02:31:
                    e3:fd:21:da:98:ae:72:dd:d2:19:b8:ea:79:97:77:
                    34:cb:a1:1d:4e:3e:54:76:2d:01:7a:80:ab:1f:3b:
                    b1:27:39:0d:5c:57:c5:a9:87:5c:2d:3f:ab:e3:e6:
                    54:00:6e:9e:3c:61:3b:d5:93:86:fd:b9:a6:21:f1:
                    6a:97:51:0c:ed:59:1f:7d:fe:e1:f2:b1:20:0e:da:
                    8f:0b:dd:c2:e4:0c:3d:ea:bd:72:38:18:6d:8b:f6:
                    a5:40:4e:42:b3:e6:c7:64:af:69:16:eb:81:ba:6a:
                    78:65:59:73:eb:7f:59:8c:3a:a9:d0:21:7c:cd:12:
                    e1:fe:e3:81:e0:31:50:8a:98:5b:ce:73:ea:3e:cc:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:18:72:C9:49:9E:0C:4D:A5:13:30:0D:8B:F8:DF:DF:CB:60:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0866bb5d-4bf4-388f-91b0-4888350b5935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:99:4e:ec:9f:e8:4f:4c:bc:ff:8b:dc:ec:fb:74:29:76:ba:
         47:fd:cf:14:8d:20:9b:e9:b6:a3:e8:66:06:19:76:7f:84:67:
         b7:24:2d:b4:ac:9d:5e:c9:4d:08:1e:24:ba:54:b2:cf:a0:71:
         1f:b3:38:1b:a6:d6:a6:40:b1:88:7f:f4:8f:7a:9a:67:2e:bc:
         e4:54:ef:e4:94:35:8c:4b:2f:22:9d:6c:28:3d:d5:ae:94:3b:
         d7:ec:08:07:ff:42:32:a0:34:26:47:3d:d6:25:57:54:79:14:
         95:32:d3:e4:9e:4f:09:e5:fa:61:93:30:a8:37:6a:ea:1c:3e:
         da:93:17:14:01:c5:9a:cc:ca:8d:0d:b8:a2:1f:46:3b:99:7c:
         52:af:25:2e:68:40:76:28:f5:46:84:68:9c:a8:3a:6e:5b:da:
         f0:93:2b:d1:ab:54:e4:e4:6f:1a:42:10:69:87:62:fd:85:8d:
         fa:75:a3:aa:b6:86:ec:fb:19:1d:ca:9a:b8:fb:40:00:14:6d:
         ab:5d:e3:70:94:10:bc:a9:f5:47:6b:15:81:14:96:e6:ba:60:
         1c:25:74:e4:a6:f1:61:32:b2:58:be:95:bc:90:59:4c:63:9e:
         32:e1:f0:17:7a:7b:23:28:14:92:7b:20:85:90:cc:0f:99:27:
         57:63:f7:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9UHuiSxgXRyPFpR+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMTEyMDAwMFoXDTIyMTAyNzA0MDAwMFowLzEtMCsGA1UEAxMk
MjYyZDRhZDctYThiNi00NGYxLWI4M2ItODBkZTcyYjU4YTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrA4nEUh+l21N18lbhCMOC6z62AEAJP6tMiR
3hSXG/WIVmzBEIOI4tPx4T25vHpMJv2DG8ZMMwR3CmmooXal874KvIDXfx1srrrv
dUCyFNzGwerTq+TIth4YfiVoIi0QDUfN8B+g5Su2a5hzNwy+5HxfgZ8NAjHj/SHa
mK5y3dIZuOp5l3c0y6EdTj5Udi0BeoCrHzuxJzkNXFfFqYdcLT+r4+ZUAG6ePGE7
1ZOG/bmmIfFql1EM7Vkfff7h8rEgDtqPC93C5Aw96r1yOBhti/alQE5Cs+bHZK9p
FuuBump4ZVlz639ZjDqp0CF8zRLh/uOB4DFQiphbznPqPsyxmQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJucGHLJSZ4MTaUTMA2L+N/fy2CjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDg2NmJiNWQtNGJmNC0z
ODhmLTkxYjAtNDg4ODM1MGI1OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlJlO7J/oT0y8/4vc7Pt0KXa6R/3PFI0gm+m2o+hmBhl2f4RntyQttKyd
XslNCB4kulSyz6BxH7M4G6bWpkCxiH/0j3qaZy685FTv5JQ1jEsvIp1sKD3VrpQ7
1+wIB/9CMqA0Jkc91iVXVHkUlTLT5J5PCeX6YZMwqDdq6hw+2pMXFAHFmszKjQ24
oh9GO5l8Uq8lLmhAdij1RoRonKg6blva8JMr0atU5ORvGkIQaYdi/YWN+nWjqraG
7PsZHcqauPtAABRtq13jcJQQvKn1R2sVgRSW5rpgHCV05KbxYTKyWL6VvJBZTGOe
MuHwF3p7IygUknsghZDMD5knV2P3fA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:41 2025 by rpki-client