Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62c0e2ae-4c36-3a30-9a40-32d25e09b685.roa
File:                     62c0e2ae-4c36-3a30-9a40-32d25e09b685.roa (raw, json)
Hash identifier:          fPs71mvwuaR5CZx+/zc2nRFu4CBa9efd47/oleasEgI=
Subject key identifier:   91:F4:3B:BB:37:79:ED:D4:56:CE:9E:9E:14:13:A6:0A:BF:62:C6:7B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F6653772C79E7152B2DC29980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62c0e2ae-4c36-3a30-9a40-32d25e09b685.roa
Signing time:             Wed 28 Sep 2022 12:00:00 +0000
ROA not before:           Wed 28 Sep 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.244.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:66:53:77:2c:79:e7:15:2b:2d:c2:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 28 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=25d7f1f8-848d-4523-93e7-e3ba7094f704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:60:42:a3:ab:21:db:41:61:28:84:a8:1f:
                    65:c3:8d:6d:17:f7:4a:28:5e:bf:a7:5b:66:f2:26:
                    de:f9:c3:9d:30:72:ff:e0:17:4d:98:ed:7a:79:37:
                    10:dc:fc:cb:49:a6:bc:3e:36:5f:79:0c:ca:34:0d:
                    85:c2:0d:77:a1:7f:bf:78:98:f2:90:da:24:bd:f1:
                    7e:c4:6c:39:48:af:77:da:50:81:e9:37:eb:5f:ae:
                    9d:22:6c:2a:80:45:2a:6a:2d:39:39:65:91:c5:68:
                    d7:59:6e:45:db:e5:01:2a:c7:56:e8:cb:45:0b:31:
                    96:9c:da:a0:14:22:7f:de:ca:c3:fb:fe:19:be:91:
                    7e:e2:97:91:23:1f:4a:c1:0d:77:01:83:a9:7b:71:
                    6e:2d:fe:09:42:3b:ad:57:cb:e0:52:ef:b2:c6:0f:
                    9b:04:ed:d3:1b:0d:d4:f1:97:0a:d2:e5:6b:3c:d6:
                    3c:4a:65:cf:0b:86:75:2b:0e:e4:b7:b4:4e:6f:5d:
                    d4:d7:0e:40:33:36:ad:02:65:34:e9:5d:7a:1f:5d:
                    e9:e9:f3:8a:3c:1d:70:c8:d3:03:99:88:c4:8c:54:
                    7b:b9:c5:ce:da:b0:b7:99:6b:fa:ed:0d:6f:d6:b3:
                    a7:10:87:01:48:31:11:e6:00:6b:2e:fc:ba:7e:72:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:3B:BB:37:79:ED:D4:56:CE:9E:9E:14:13:A6:0A:BF:62:C6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62c0e2ae-4c36-3a30-9a40-32d25e09b685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.244.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:63:4c:23:d3:46:f3:c2:8c:0d:6c:91:6b:a3:0f:05:3f:9d:
         51:89:57:1c:6f:26:5a:49:72:ca:e7:05:cb:5e:74:fd:0a:df:
         5e:1d:f7:df:65:7e:5b:04:ad:86:ea:d0:ed:cc:87:70:d7:7d:
         43:ae:75:bb:f5:1f:9f:fb:47:98:2a:30:2e:8d:0a:af:7c:41:
         96:15:df:0c:f7:bf:32:bd:5b:f9:a1:7c:6d:ca:ef:2e:e4:fc:
         54:54:8b:b8:f9:07:aa:42:9a:f4:0e:ba:82:71:4c:48:0e:4b:
         44:b0:c2:9d:cf:9f:bf:1b:38:90:b6:1c:40:5f:e9:4a:54:4b:
         44:2a:ee:ee:6e:ea:86:5f:2c:fa:1c:19:b4:bb:9f:f5:82:c9:
         45:0d:7c:1b:e1:2e:8e:6a:40:aa:59:8a:00:77:40:a1:c5:be:
         1a:3c:13:3a:3c:37:d6:af:91:a9:29:b8:4f:8d:50:cf:61:02:
         0c:a2:a4:44:ee:50:0d:c4:3b:34:e2:4d:18:b3:3c:97:80:83:
         99:5e:54:75:ab:5a:52:1c:db:ba:ad:f4:53:02:54:e7:44:d9:
         90:90:f3:c9:8c:5e:14:c7:b0:5b:9d:ef:5b:98:f8:32:07:f6:
         16:47:2a:9c:fe:ff:a6:ac:50:b4:63:41:69:32:33:a9:94:56:
         82:c9:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:05 2025 by rpki-client