Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54c4899d-74ff-364c-8116-2bb5c8fa95f2.roa
File:                     54c4899d-74ff-364c-8116-2bb5c8fa95f2.roa (raw, json)
Hash identifier:          CM2V0PKyXuB27WMApu1urDzadOLt/kOXdHYdUuRxtls=
Subject key identifier:   90:97:65:50:36:39:FF:65:93:FB:0F:5F:A3:88:A9:28:CF:D0:C7:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E41C689DA3C73D9FC11D9CBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54c4899d-74ff-364c-8116-2bb5c8fa95f2.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Thu 21 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:c6:89:da:3c:73:d9:fc:11:d9:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jul 21 04:00:00 2022 GMT
        Subject: CN=803d2619-0709-449d-85e2-bc135e4573b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:72:31:6b:13:19:d3:b6:53:b2:41:6a:8c:72:
                    01:cc:95:f2:b1:cb:16:7b:ce:0f:db:16:c6:9f:12:
                    80:5d:25:63:9c:2b:06:6f:6d:fc:20:d0:65:1c:d8:
                    c7:35:d5:df:27:ac:03:1f:ce:3d:d7:0a:83:aa:c5:
                    ef:e4:f0:8d:98:13:2f:85:84:c6:65:c8:23:dc:29:
                    97:71:7a:40:32:b5:72:99:bb:3a:c9:e4:d2:ea:5b:
                    69:87:b7:d8:d7:0b:8b:21:13:f6:b9:75:22:be:51:
                    f2:05:c0:aa:29:41:89:c2:ff:fb:a4:c8:fe:e9:fd:
                    33:37:04:c8:a2:ea:58:46:fd:ab:ca:49:45:e8:60:
                    e0:9f:67:bb:e2:7f:36:d1:9f:76:a0:57:c5:94:44:
                    1b:7f:23:c4:40:b1:96:b3:b2:02:03:50:2d:9d:77:
                    91:79:9e:b4:5b:5c:b3:2f:3f:be:7e:3d:45:5d:09:
                    a7:22:c2:ef:dd:b2:c4:6b:b7:f4:0d:a0:61:20:8c:
                    be:9a:2e:5b:72:0b:e4:09:03:77:8b:f2:a5:00:02:
                    70:4d:21:9b:cd:d2:95:23:87:18:90:c2:99:9b:8d:
                    b1:9f:ed:df:a9:aa:94:46:14:47:b3:3d:20:73:2e:
                    a9:90:45:47:bf:85:11:11:5c:a3:94:b0:25:22:db:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:97:65:50:36:39:FF:65:93:FB:0F:5F:A3:88:A9:28:CF:D0:C7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/54c4899d-74ff-364c-8116-2bb5c8fa95f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b2:3e:9c:e9:d6:c6:bf:fb:80:43:2a:30:93:61:bd:9a:c8:
         20:b5:ed:60:97:ca:ef:0f:9b:cc:65:6d:c8:04:22:b4:61:c0:
         2f:eb:2c:33:71:4e:05:32:5c:15:6e:00:7c:3b:94:28:45:26:
         38:a2:e1:c8:9c:b8:f7:f1:3b:1e:0d:e3:4f:da:07:32:b6:e5:
         89:56:55:2f:ef:92:57:02:fb:22:e7:75:7c:f1:b9:bd:b5:18:
         8c:4a:64:50:7d:3b:06:af:69:22:b3:83:17:17:d3:36:87:89:
         a3:b5:04:b8:8e:20:49:40:3b:43:21:87:6f:70:61:1e:85:a0:
         ff:c7:97:5d:83:bf:d3:dd:31:4f:97:b7:f9:17:c5:c6:33:78:
         bd:33:fa:21:59:48:6c:c5:7a:e2:bb:79:d4:0a:0f:e3:a2:52:
         fc:5b:09:f8:57:9e:1f:1c:3b:96:e7:a8:9d:99:27:d9:a4:10:
         6e:1c:26:2d:8a:7c:28:e3:5f:05:79:3b:9d:12:4a:d1:f9:57:
         eb:71:8c:f1:45:bf:80:09:7b:98:de:49:e2:13:17:8e:4a:9e:
         03:de:51:32:ff:38:10:c3:1a:51:34:3a:72:bf:b4:a1:4a:49:
         e0:a2:42:19:5d:6a:0a:d2:a8:a6:70:43:30:fb:ce:bd:bf:93:
         63:ff:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:51 2025 by rpki-client