Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22c5a642-dde6-3f56-b2aa-d35d828b5b45.roa
File:                     22c5a642-dde6-3f56-b2aa-d35d828b5b45.roa (raw, json)
Hash identifier:          OaEDyssDlXDI5H+rya9nG22XHDEuLHontr1Md402YvQ=
Subject key identifier:   8A:C1:B4:C6:E5:44:3B:3F:D6:E2:C6:63:EC:68:AE:71:8A:74:D7:D1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E53FAC9AF57B02166564DFBAC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22c5a642-dde6-3f56-b2aa-d35d828b5b45.roa
Signing time:             Wed 22 Jun 2022 19:36:07 +0000
ROA not before:           Wed 22 Jun 2022 19:36:07 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.166.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:fa:c9:af:57:b0:21:66:56:4d:fb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 22 19:36:07 2022 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=8bb0694f-b9f8-4c6b-8f3b-abf4927c15fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:86:c0:9e:82:8a:ac:8e:e5:ef:08:dc:24:
                    d7:82:8e:52:65:21:bd:82:8b:79:d7:35:26:23:d6:
                    b7:78:74:53:6a:e0:09:37:1b:a7:4e:74:d8:fd:da:
                    6f:8a:f4:28:8d:24:46:b6:85:e6:67:94:97:06:f2:
                    93:15:83:05:0b:45:44:72:c7:d0:92:97:85:e9:9b:
                    95:38:6a:10:25:81:6e:07:26:c7:81:cd:18:b3:b9:
                    44:e7:f3:92:b7:13:52:e8:c0:af:61:64:b0:9f:1e:
                    d4:54:d1:23:b1:5d:90:0b:f2:2b:b8:6a:89:02:5a:
                    4b:d4:09:5f:85:ff:2a:e0:5f:da:e1:d8:85:7d:64:
                    52:72:78:2d:49:42:43:33:82:16:86:37:a1:c6:fd:
                    b5:f2:b9:80:6b:0a:08:12:e4:1f:a8:7c:d2:16:8f:
                    74:26:f2:ec:99:bd:43:a9:59:df:bd:b5:05:e2:97:
                    27:42:d5:56:61:9c:2b:3f:03:26:f4:e4:45:9c:d4:
                    4e:37:4c:2c:8a:2d:f5:78:c5:37:60:a0:5f:ae:1d:
                    df:f7:f5:79:54:54:81:9d:c7:09:0a:37:23:05:3f:
                    50:58:43:29:3b:c4:82:f9:8f:82:57:df:92:d1:e3:
                    32:e2:f3:89:a1:f6:5b:b4:16:75:4a:5d:13:28:0e:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C1:B4:C6:E5:44:3B:3F:D6:E2:C6:63:EC:68:AE:71:8A:74:D7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/22c5a642-dde6-3f56-b2aa-d35d828b5b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:65:9d:ea:b7:fb:ec:ff:6e:fb:a6:28:76:6f:71:08:81:
         5a:e1:b6:6a:1f:c1:7f:e9:ad:f8:24:43:95:bf:3b:dc:71:29:
         95:4a:bf:17:5e:97:20:af:dd:54:7a:48:58:33:4d:3a:35:35:
         12:9d:5e:0f:4d:ee:32:d4:08:ac:cd:dd:b6:fc:28:23:ea:a8:
         62:21:81:6c:ae:60:bd:c9:2c:a2:67:91:80:b7:01:16:4b:b0:
         c0:a7:21:aa:00:02:44:a4:7b:0b:59:af:19:ce:cb:0b:b2:ec:
         de:2a:d0:77:d0:21:40:de:35:f5:4e:63:82:aa:37:76:d4:bf:
         50:07:5b:c4:0e:2a:05:54:41:73:d3:40:d5:29:87:a1:c1:72:
         88:f7:e2:d6:5c:5a:29:71:61:35:2d:5c:d1:11:01:ce:7a:13:
         de:7d:a2:bb:54:e3:e2:2e:04:85:f3:5e:14:07:70:c9:d1:b4:
         e8:55:54:32:e3:78:3c:94:d7:2a:98:4e:50:8a:3e:36:3f:e5:
         6f:f0:92:3f:65:25:a2:ce:b1:2a:d5:60:4c:48:79:5e:a4:ef:
         c3:15:c9:76:52:f4:48:31:b2:69:44:ea:18:ed:8f:a0:4e:3e:
         f1:69:81:1a:8d:34:31:19:0a:ad:98:99:f4:31:a0:27:79:8f:
         d5:9b:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:41 2025 by rpki-client