Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/718e4f26-5785-37e1-a598-d882556f212e.roa
File:                     718e4f26-5785-37e1-a598-d882556f212e.roa (raw, json)
Hash identifier:          uammtWvuCqqpPpJ2r6gPm/iYua4CjfCv9oC0DRawMbM=
Subject key identifier:   7D:4F:A4:82:8D:FE:9E:B1:9F:CD:EE:21:05:F4:EA:C0:B5:87:52:A4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584078705AF69C49F48298389F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/718e4f26-5785-37e1-a598-d882556f212e.roa
Signing time:             Wed 04 Jan 2023 12:00:00 +0000
ROA not before:           Wed 04 Jan 2023 12:00:00 +0000
ROA not after:            Thu 09 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.242.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:78:70:5a:f6:9c:49:f4:82:98:38:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 12:00:00 2023 GMT
            Not After : Feb  9 05:00:00 2023 GMT
        Subject: CN=0411ad17-5a0b-4311-887c-3d86220ac1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:e4:3c:44:26:24:41:4a:75:40:7e:23:52:
                    43:5e:e6:a4:94:3b:a1:f1:d1:e7:f4:6a:5e:69:27:
                    56:c8:2b:5b:08:33:dd:9d:ee:3c:0a:95:2f:20:ec:
                    8c:4b:48:fb:a9:b2:d8:a9:e5:c1:b6:ea:59:bc:b3:
                    37:70:1a:61:3e:24:18:78:24:ad:47:cc:71:47:ee:
                    df:2c:26:89:cc:18:3a:3f:03:15:01:01:a0:e0:13:
                    41:2e:a0:76:03:c9:67:8e:1f:ec:c2:c1:93:28:e0:
                    26:0b:fc:a9:4f:b8:8f:62:29:64:62:63:bd:74:c0:
                    ec:a7:1e:10:86:d0:b4:8c:52:af:74:21:8e:e5:db:
                    8b:c4:07:c1:10:44:21:c5:a2:f2:2e:16:ba:19:7b:
                    42:f0:59:37:7a:7f:34:6f:ef:27:98:3b:e1:de:86:
                    92:01:56:97:2c:81:61:2b:b7:18:b3:cc:d9:94:ea:
                    99:67:dd:cf:09:4b:3c:11:32:1a:ed:12:0d:12:a4:
                    43:d3:84:a8:8e:1f:66:ea:33:8d:cc:83:76:0f:96:
                    f8:da:f1:d4:72:88:ef:12:71:08:ca:50:99:9c:55:
                    1e:0b:1e:89:03:1c:47:5e:ed:89:42:b9:01:5c:f4:
                    b3:e3:16:a2:0a:74:06:2f:5e:81:67:26:98:a5:32:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4F:A4:82:8D:FE:9E:B1:9F:CD:EE:21:05:F4:EA:C0:B5:87:52:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/718e4f26-5785-37e1-a598-d882556f212e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:39:eb:32:fb:be:9f:ef:2d:54:3d:af:1e:08:64:92:c5:c4:
         8c:65:2a:d3:a2:a9:e4:f9:f3:0c:9d:47:96:cd:f2:d2:64:99:
         66:79:c8:03:01:91:a0:75:11:6b:de:61:72:ae:b9:2a:df:e1:
         00:57:9d:87:53:9c:3e:0d:2a:63:ed:89:05:e1:ef:1e:54:e8:
         b9:86:82:09:4b:33:2e:83:75:4c:df:0a:05:6b:6e:53:31:82:
         a3:33:0c:b7:13:74:d1:2f:24:71:1f:09:99:7b:59:38:4d:01:
         47:cf:19:43:bb:0c:5e:ee:1f:e4:e1:33:58:6b:e1:26:86:92:
         2a:a3:c7:8c:13:1f:07:82:e4:c6:f1:73:49:bb:d8:1f:42:ce:
         96:40:22:00:40:44:60:01:6b:4a:25:66:c6:43:9a:1e:3b:98:
         64:cf:93:1d:68:36:ca:84:0c:bf:e0:d4:c8:eb:89:5f:77:32:
         8c:c2:63:48:f8:a5:5b:e2:11:df:63:d3:87:85:7a:12:98:2e:
         31:85:ca:2b:10:7b:91:7f:41:11:ba:88:89:b2:09:d5:b8:f7:
         30:c8:1d:c5:43:9a:b3:53:9a:00:ed:76:f1:b8:51:1b:60:3c:
         e9:b4:41:b7:ff:9a:94:32:18:12:b5:bb:d6:dd:55:60:81:a6:
         4c:5d:dd:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB4cFr2nEn0gpg4nwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwNDEyMDAwMFoXDTIzMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDQxMWFkMTctNWEwYi00MzExLTg4N2MtM2Q4NjIyMGFjMWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirzkPEQmJEFKdUB+I1JDXuaklDuh8dHn9Gpe
aSdWyCtbCDPdne48CpUvIOyMS0j7qbLYqeXBtupZvLM3cBphPiQYeCStR8xxR+7f
LCaJzBg6PwMVAQGg4BNBLqB2A8lnjh/swsGTKOAmC/ypT7iPYilkYmO9dMDspx4Q
htC0jFKvdCGO5duLxAfBEEQhxaLyLha6GXtC8Fk3en80b+8nmDvh3oaSAVaXLIFh
K7cYs8zZlOqZZ93PCUs8ETIa7RINEqRD04Sojh9m6jONzIN2D5b42vHUcojvEnEI
ylCZnFUeCx6JAxxHXu2JQrkBXPSz4xaiCnQGL16BZyaYpTISywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH1PpIKN/p6xn83uIQX06sC1h1KkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzE4ZTRmMjYtNTc4NS0z
N2UxLWE1OTgtZDg4MjU1NmYyMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaTnrMvu+n+8tVD2vHghkksXEjGUq06Kp5PnzDJ1Hls3y0mSZZnnIAwGR
oHURa95hcq65Kt/hAFedh1OcPg0qY+2JBeHvHlTouYaCCUszLoN1TN8KBWtuUzGC
ozMMtxN00S8kcR8JmXtZOE0BR88ZQ7sMXu4f5OEzWGvhJoaSKqPHjBMfB4LkxvFz
SbvYH0LOlkAiAEBEYAFrSiVmxkOaHjuYZM+THWg2yoQMv+DUyOuJX3cyjMJjSPil
W+IR32PTh4V6EpguMYXKKxB7kX9BEbqIibIJ1bj3MMgdxUOas1OaAO128bhRG2A8
6bRBt/+alDIYErW71t1VYIGmTF3dfA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:23 2025 by rpki-client