Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50d782f1-b9c2-3453-a1cc-94c6200c4c7f.roa
File:                     50d782f1-b9c2-3453-a1cc-94c6200c4c7f.roa (raw, json)
Hash identifier:          /Y3ftbC6OHOLfgatgZDHpNe/V+VWZrT7bBNYQo7zv9w=
Subject key identifier:   8C:F1:C0:68:67:F8:65:41:1B:F7:CD:0B:47:C3:6F:28:CC:88:DE:C5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858403E3FCE2676BB2B2872C4B200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50d782f1-b9c2-3453-a1cc-94c6200c4c7f.roa
Signing time:             Wed 14 Dec 2022 12:00:00 +0000
ROA not before:           Wed 14 Dec 2022 12:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3e:3f:ce:26:76:bb:2b:28:72:c4:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 14 12:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=5e1352cb-d118-4d92-818e-317e427a9498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d0:c7:86:0c:8e:80:e2:8e:42:c4:73:f0:14:
                    09:48:58:de:d2:39:f4:94:22:40:4c:c6:c9:8f:ed:
                    67:09:b9:47:db:13:75:a9:ba:92:b3:49:9f:0a:a5:
                    3d:e4:18:0d:18:54:f8:85:86:69:73:c3:85:d7:4a:
                    8a:f8:7a:89:13:22:d3:c2:08:20:ce:21:6d:40:67:
                    f8:41:1b:4e:20:8a:d9:f6:41:cb:31:e9:c6:91:77:
                    bb:9a:b6:91:d6:3f:76:51:f4:09:bd:ba:75:75:eb:
                    ae:81:8d:0c:17:c9:a3:76:c7:09:c6:d7:8a:7f:59:
                    ae:97:b9:57:75:e3:50:7b:60:64:91:29:d7:55:da:
                    1e:b1:19:08:40:0c:2b:90:59:51:2c:71:0c:a4:72:
                    23:d3:e3:c1:c5:d5:57:23:27:25:18:e0:af:40:57:
                    dc:fe:85:80:ea:55:c3:85:30:a4:05:30:c9:85:e9:
                    a1:40:09:c3:83:5b:11:22:df:54:f4:39:f6:e1:df:
                    00:10:7b:9b:b8:42:97:13:37:90:79:00:43:9c:44:
                    0f:a1:26:18:67:65:42:9a:71:ec:21:1f:c8:32:69:
                    86:ed:a5:0e:17:5b:0a:05:02:17:64:10:37:44:aa:
                    e3:97:86:10:47:2e:f6:ea:e8:03:ef:99:51:14:5c:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F1:C0:68:67:F8:65:41:1B:F7:CD:0B:47:C3:6F:28:CC:88:DE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50d782f1-b9c2-3453-a1cc-94c6200c4c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:04:25:72:2e:c9:dd:f9:80:67:db:1c:45:96:ef:8c:c7:
         63:90:89:53:0a:43:01:20:47:8c:b1:2a:0f:71:3d:3f:da:ad:
         63:59:25:8e:72:73:2e:89:c0:90:3a:ad:b7:30:be:2c:45:47:
         fe:06:d6:5a:42:92:d5:7a:0b:bf:35:7d:ac:0d:f3:b0:0a:c6:
         9b:f1:46:85:30:52:1e:eb:5f:39:a6:77:d2:0c:43:6d:c7:88:
         ac:1e:db:2f:33:17:12:d0:fe:fe:50:d4:a0:81:2d:17:e6:bb:
         f6:64:d6:e1:dc:e0:4d:86:d0:87:98:8b:c1:68:81:d3:97:6d:
         95:06:49:7a:54:1e:27:d6:1c:14:50:38:ff:a6:67:cc:05:fb:
         7f:d0:d5:b5:dc:f5:e2:b9:54:0f:88:85:05:0b:9b:b7:aa:a4:
         24:8d:de:e2:63:b5:aa:5f:0b:1a:69:23:b5:da:eb:e0:d6:cb:
         90:9f:42:38:07:2f:54:2c:3d:15:a9:cb:d0:eb:dc:02:13:6d:
         00:5b:82:6d:e9:47:ae:04:d3:1c:14:00:de:1e:08:18:62:5f:
         d0:ac:20:f7:6f:8f:85:57:c6:28:bb:e5:01:5b:5e:5f:2b:f7:
         dd:c8:ba:20:6f:19:63:4e:fa:39:cf:5d:8f:f7:c7:36:05:71:
         05:9b:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:32 2025 by rpki-client