Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/270f51af-2b5f-3e36-a011-54e9b98ec88d.roa
File:                     270f51af-2b5f-3e36-a011-54e9b98ec88d.roa (raw, json)
Hash identifier:          fKtpspoHsYGSgmAwfvFvMRds7elKACjyDwDfcpviSK4=
Subject key identifier:   8E:0D:E9:60:7C:92:9F:7E:E6:7A:5E:F9:D0:3A:22:0D:39:4B:2B:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E41A151920D1EB385E902B680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/270f51af-2b5f-3e36-a011-54e9b98ec88d.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.197.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:a1:51:92:0d:1e:b3:85:e9:02:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=900c15b7-42f6-4b35-b102-864a0ee3a514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:c0:4f:8e:9f:24:61:08:47:00:bc:87:b8:
                    a9:ee:f3:bb:5b:1e:f8:48:49:ac:c3:94:8d:09:a0:
                    2b:1b:26:ac:f4:ed:db:2d:00:b6:88:9a:f3:4b:54:
                    fe:ae:d9:d2:8f:9a:de:a1:80:f2:28:e6:c0:8d:6b:
                    9f:4f:61:ef:ca:a0:7a:a1:0b:a5:1e:5d:5d:9a:30:
                    5c:fd:0c:b6:f2:9b:70:c4:8f:4e:be:11:9f:cd:0a:
                    d2:a5:d8:c9:9b:9b:48:88:77:c3:b8:41:ad:fe:55:
                    d6:a2:0a:7b:72:59:af:83:a4:76:74:74:cf:17:18:
                    cc:00:fb:85:ce:1e:48:97:07:aa:83:67:cf:6a:a5:
                    0e:57:c1:26:02:e9:25:c9:33:61:48:58:b3:c4:51:
                    86:89:57:f5:51:a0:4c:e9:3d:a2:57:1a:18:12:9c:
                    11:e3:32:0d:0b:2a:de:86:b6:24:66:3f:0c:26:d4:
                    6c:74:0f:8a:fb:74:c0:4a:e3:d0:65:3a:b9:d7:6c:
                    67:b5:44:47:76:5a:bc:01:54:c4:e9:3b:05:72:24:
                    b9:4e:18:1b:87:5d:7b:45:fe:4c:b3:01:d0:f2:87:
                    5e:7a:85:6e:e1:3b:37:d0:63:87:33:e5:c1:1d:d0:
                    87:63:be:c1:38:4a:ef:63:5e:ee:b7:85:13:b7:33:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:E9:60:7C:92:9F:7E:E6:7A:5E:F9:D0:3A:22:0D:39:4B:2B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/270f51af-2b5f-3e36-a011-54e9b98ec88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.197.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8d:72:49:0a:8b:9c:99:1d:17:5a:75:ae:fb:9e:8a:c2:75:
         35:8e:84:c1:8e:51:37:7a:8e:9c:60:07:01:7b:59:ad:a3:07:
         b0:ac:00:44:fd:16:e7:7b:52:fe:2b:ff:70:b5:d1:a0:97:cc:
         9c:5c:6d:35:d1:37:9f:95:30:8e:7d:8c:fb:7d:1f:bd:01:b1:
         b0:1c:ab:ee:b3:66:3c:a4:73:e4:9f:67:48:c3:f8:6a:78:18:
         22:7e:ff:45:95:76:35:c2:36:e5:26:7e:4f:4a:f4:c1:67:74:
         6e:22:fb:26:b0:b1:b5:5b:91:1d:ed:e4:cf:27:6e:20:41:19:
         e4:3e:3f:8f:f8:cd:a4:91:91:24:fb:9c:00:a5:e3:ff:61:a9:
         f3:bf:85:38:9c:ee:ee:31:0a:9f:96:b9:3c:a9:5c:8d:c7:61:
         43:46:be:ab:8f:6d:15:ef:9a:d2:5e:f6:8a:7a:f0:26:36:dd:
         96:4f:43:44:df:13:c7:42:d3:26:c2:93:b1:fc:09:ea:67:27:
         59:03:ec:a1:b6:05:b9:e1:1f:78:5e:b4:a4:52:1b:48:08:c2:
         fd:96:e9:5a:34:6e:05:c3:ab:42:50:60:09:3f:9c:86:3f:30:
         e0:a4:0e:c6:fb:0d:87:2d:58:6a:94:53:ea:53:7c:8e:a7:db:
         d7:5e:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:33 2025 by rpki-client