Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b5e4cda-58b4-3643-97b7-d50a603ad733.roa
File:                     1b5e4cda-58b4-3643-97b7-d50a603ad733.roa (raw, json)
Hash identifier:          gkG1Zp5zN8r1hF2psKzMb/TnqrBACXplom7MnryEHc4=
Subject key identifier:   45:DD:9A:02:48:5F:BB:76:EF:51:B9:07:32:EF:0F:34:61:70:95:17
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8AA5AAF57BDADDC0BC177E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b5e4cda-58b4-3643-97b7-d50a603ad733.roa
Signing time:             Tue 11 Oct 2022 12:00:00 +0000
ROA not before:           Tue 11 Oct 2022 12:00:00 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.180.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8a:a5:aa:f5:7b:da:dd:c0:bc:17:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 11 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=4573b886-a84a-4477-89f5-1d9d371340ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:62:c8:f4:96:cf:ec:ee:68:74:c8:e3:c0:
                    f0:7c:a2:b0:19:a1:42:7c:d7:ed:58:92:81:87:d2:
                    ca:85:6e:7f:80:56:3f:5e:fb:38:36:ca:88:9e:df:
                    b3:0a:33:19:0f:38:a1:22:4c:64:ef:bf:7e:66:7c:
                    fc:4b:76:f8:ab:b7:7f:7c:f4:9c:8b:04:92:88:88:
                    07:31:fb:5a:47:a8:bf:7c:4f:f1:fe:b4:de:a7:b5:
                    27:fe:6e:1a:09:24:83:75:92:36:58:c3:00:7f:27:
                    7d:45:79:48:5f:f6:1b:e4:16:66:a9:46:85:d1:96:
                    ff:92:79:dd:2e:f6:43:dd:f8:49:91:95:a2:5b:10:
                    8a:83:87:c7:db:a1:0d:c4:65:19:2e:0b:a0:9c:dc:
                    48:71:ed:e7:cf:f0:2a:32:64:d0:ed:11:05:bf:f3:
                    ca:75:c9:2d:4e:ad:9e:9f:62:bb:24:0d:1e:96:1c:
                    a1:84:3c:c4:56:6e:84:a7:cd:fc:8e:06:69:f5:ea:
                    dd:d2:f2:04:70:c3:b2:7e:f1:af:39:ea:85:a1:ae:
                    cd:f9:22:8f:fe:ba:25:e2:e9:ac:3f:7a:c7:65:27:
                    c9:c7:2f:60:8d:d3:3c:25:d5:d1:cc:99:14:75:cd:
                    c8:36:a0:e6:bc:2c:d6:6a:b9:99:cc:03:ef:27:da:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DD:9A:02:48:5F:BB:76:EF:51:B9:07:32:EF:0F:34:61:70:95:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b5e4cda-58b4-3643-97b7-d50a603ad733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f0:13:5d:f6:13:c7:11:2f:3d:8c:4a:90:a6:b7:a6:4a:8c:
         bb:ff:e3:47:7d:15:0e:93:55:6c:e8:40:6e:ac:de:22:65:eb:
         8d:f6:14:70:69:aa:3d:ec:cf:53:da:c8:41:7c:1c:47:d6:52:
         41:90:dc:cb:e7:2a:1b:88:46:cc:9e:c1:eb:5b:17:25:0c:fc:
         56:b1:66:93:b7:94:0a:cb:4d:36:31:30:4b:27:12:48:0d:43:
         a6:a9:8c:fc:e5:83:4a:d0:0a:0d:14:5c:60:28:28:34:fa:fc:
         05:34:62:ee:59:ba:12:af:42:21:f4:1a:8b:44:91:06:84:ba:
         fe:f5:e0:a6:09:d2:51:24:85:7d:df:9b:9c:18:72:f6:23:ca:
         40:7e:d7:c9:34:d0:9f:22:ef:56:83:99:e2:14:60:47:51:8b:
         d1:1f:de:10:c9:9b:0d:04:e5:04:89:9b:89:53:e9:d4:c8:87:
         d4:e8:a8:a1:90:c0:60:b2:1e:09:87:66:72:c5:6f:ca:1b:fe:
         57:f8:d9:1f:67:60:b9:16:f2:b7:89:e4:fe:9c:08:cf:b8:50:
         9d:3b:39:57:bf:3b:ec:33:35:95:3c:16:5f:05:ab:33:ba:9c:
         2c:d9:4b:dd:3e:95:0c:e0:25:c3:96:6b:31:80:5b:bc:be:23:
         bd:1f:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:51 2025 by rpki-client