Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29e6fe72-d80b-3ff2-9c2f-a19412236849.roa
File:                     29e6fe72-d80b-3ff2-9c2f-a19412236849.roa (raw, json)
Hash identifier:          CwJTI680XyGNheEd3Ogkjf3acKdD/tqp5mGVHHeAK2M=
Subject key identifier:   BD:45:1B:1A:48:40:48:78:C6:A6:16:5D:19:08:CA:8B:B1:9C:7E:C2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCC1D722D2B87156C967D0700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29e6fe72-d80b-3ff2-9c2f-a19412236849.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.247.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:1d:72:2d:2b:87:15:6c:96:7d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=c370d8da-110f-4054-a71a-8f8f7942506a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:ce:f9:4d:4c:c8:32:9d:d2:4a:09:cd:62:
                    06:5b:bf:0d:12:66:f0:48:43:0c:3c:4e:8d:ff:a6:
                    28:bb:98:e1:68:48:27:7c:2e:3f:d8:04:22:ae:99:
                    0a:f2:9e:c4:5b:f0:12:84:b5:f9:3d:7c:31:c9:1e:
                    36:5a:a6:a9:5f:45:61:be:9f:5e:02:f0:51:f6:07:
                    ab:c1:4f:42:51:ef:82:62:f8:d2:c0:02:8b:8d:04:
                    bd:50:70:29:af:0c:27:78:7c:c9:94:c6:ea:ce:79:
                    1a:b6:c7:a0:e1:7f:f9:e1:9f:9e:90:c4:a6:56:bd:
                    b1:fc:7d:6b:f3:e6:75:31:ed:d0:ff:06:df:ce:17:
                    0a:ae:b6:83:a6:fe:e6:ed:aa:89:cf:d5:0b:d6:2e:
                    ad:9f:fd:73:65:2e:05:69:93:ee:0f:3e:13:7f:17:
                    96:f9:ed:92:72:4c:cf:c1:ab:4f:97:37:4f:28:eb:
                    06:dd:a9:30:a8:14:84:a6:c6:c0:4b:d6:aa:f2:46:
                    ba:33:fb:39:f9:a1:5d:29:6f:c6:98:fc:0d:45:32:
                    4c:8e:4d:57:8e:03:e7:34:42:02:92:05:3c:a4:fa:
                    b7:14:87:61:9e:86:ff:ba:1d:0f:24:f7:b7:25:f0:
                    db:e8:11:7f:de:19:78:8c:dd:2b:da:76:88:35:d4:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:1B:1A:48:40:48:78:C6:A6:16:5D:19:08:CA:8B:B1:9C:7E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29e6fe72-d80b-3ff2-9c2f-a19412236849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:79:ae:7d:93:81:6c:a9:6a:dc:06:53:bb:4a:5c:fe:6d:
         15:0a:77:12:aa:c3:5d:ab:e8:92:0b:53:50:07:41:8c:39:d5:
         eb:4a:99:75:e3:72:71:b4:24:30:b8:f9:66:c4:fc:6e:44:76:
         89:04:b8:df:6e:5e:4c:2c:fb:9b:88:27:14:ff:09:f6:fc:d6:
         4f:ef:7c:53:7a:11:25:cc:15:04:63:7a:b9:13:da:65:28:85:
         3d:44:5b:ea:fe:dd:03:ed:02:97:81:89:45:43:f9:7b:65:db:
         b3:2a:60:80:4f:91:f4:13:ba:7e:43:34:90:19:cd:83:23:5a:
         90:ff:8c:c6:85:34:f2:23:4e:b5:7f:1d:40:bc:04:c7:a5:9a:
         2d:0b:df:3f:f5:39:38:37:cd:7c:f1:a3:d3:4b:a6:5d:3a:27:
         aa:31:c3:99:ef:9b:ab:ff:05:e0:02:10:60:eb:ed:11:09:b8:
         f1:86:02:13:ca:a9:45:a0:31:3f:8a:15:a3:52:e3:21:e3:bc:
         11:12:8c:73:3a:fb:eb:2d:58:76:48:8c:80:a0:cb:56:87:72:
         22:65:03:bd:95:47:ef:ff:eb:8c:20:e7:59:7f:c9:7c:23:a8:
         19:d3:38:94:c7:a2:ae:95:88:c9:63:4b:f5:dd:e3:6a:4d:13:
         e0:4f:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:44 2025 by rpki-client