Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d81fd85-64df-3b1a-8026-d3d31b550664.roa
File:                     6d81fd85-64df-3b1a-8026-d3d31b550664.roa (raw, json)
Hash identifier:          S054k5CQOA6y958O519e/xlq2xZU0ajE/orvnynn0AQ=
Subject key identifier:   83:20:67:EB:9B:E4:3B:BC:B9:BD:36:1F:66:0A:69:05:6A:B8:BF:FF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E68BE29582DF59BD403B8CF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d81fd85-64df-3b1a-8026-d3d31b550664.roa
Signing time:             Wed 29 Jun 2022 12:00:00 +0000
ROA not before:           Wed 29 Jun 2022 12:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.222.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:68:be:29:58:2d:f5:9b:d4:03:b8:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 29 12:00:00 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=d8ae2541-8a02-423c-9381-5935068bd470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:49:37:d9:0d:21:6f:69:27:71:a8:29:14:
                    18:34:d8:1b:7c:03:0a:e7:62:2d:90:65:88:10:5a:
                    7b:f0:d1:5c:f0:c2:44:34:4b:f4:9e:d2:b7:8c:7b:
                    07:77:11:3c:ad:4c:a0:c7:69:c2:73:e4:01:30:92:
                    e4:59:e2:43:7c:2d:bc:06:5b:ea:02:da:48:a7:98:
                    83:2e:36:63:c5:f9:1a:f7:29:4d:4f:c9:32:42:61:
                    35:da:20:6e:8b:4f:a9:5e:cd:49:8a:32:c9:9a:1b:
                    03:f0:dd:1f:01:e4:0a:62:84:92:29:9c:11:98:d8:
                    98:02:ef:4a:75:a4:b0:c3:17:bf:e1:d8:9c:de:8a:
                    0b:23:d5:06:a9:f8:46:77:8f:58:78:33:b1:6b:5b:
                    1c:b1:01:e2:89:37:03:b6:7f:66:aa:93:0f:65:dc:
                    18:53:74:95:4e:b4:e6:91:54:1a:0e:0f:eb:a9:79:
                    bb:ea:cf:9b:11:de:58:5b:b7:da:6f:ce:83:fc:10:
                    50:ba:3a:97:91:44:ec:a0:49:8a:76:77:36:10:26:
                    35:73:f9:e8:1b:55:e9:5e:0d:6e:0a:90:96:be:fc:
                    e1:0a:6a:ea:db:46:d3:cb:ac:10:74:60:c2:ad:0e:
                    a2:ec:bd:f6:fe:26:6c:10:37:94:dd:42:e5:3e:7c:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:20:67:EB:9B:E4:3B:BC:B9:BD:36:1F:66:0A:69:05:6A:B8:BF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6d81fd85-64df-3b1a-8026-d3d31b550664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.222.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:18:9b:5e:94:97:47:ba:1f:6f:91:3c:94:c7:c4:08:ee:
         8b:61:1a:c0:a2:2b:27:32:b0:5f:3f:94:8e:12:c7:da:c2:72:
         4c:30:b1:11:e3:b9:28:bb:a4:c0:ea:cd:29:1b:30:82:9c:bd:
         36:67:2e:81:41:be:e0:b0:55:7a:a0:9c:bb:37:0a:4c:a4:2a:
         ca:10:f5:6f:46:9e:c7:33:32:37:d9:a9:f3:57:d9:76:86:27:
         74:6f:c6:d1:e7:22:1f:9a:c4:5f:c8:26:ac:f4:7b:af:cb:15:
         9e:02:59:35:8a:64:8c:93:49:a3:8d:5b:05:de:9a:b1:3d:9b:
         0e:e5:cf:18:de:73:33:6c:d9:8c:23:43:f9:38:f6:9e:ab:f6:
         5c:c0:a0:b6:c5:7f:ad:f2:c0:6f:24:8e:1d:1f:3c:a5:ed:ed:
         48:74:af:88:7f:12:cd:0a:3f:8b:53:6e:d4:3b:09:a8:8e:c6:
         b6:bf:12:a4:9a:e0:49:1e:69:fc:85:f4:51:07:17:a3:47:12:
         45:48:22:b9:8b:d9:76:cb:8b:0f:a0:ad:8f:27:d6:83:1b:f7:
         93:8e:95:87:a2:ff:ad:b9:9c:40:ea:dc:ca:6a:68:bf:e3:a9:
         5d:31:37:99:ba:e2:17:e4:f9:b2:f2:15:7d:15:9a:7b:a6:fb:
         ee:30:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:39:54 2025 by rpki-client