Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/726daa65-c017-3cad-9c37-af7ff41f5215.roa
File:                     726daa65-c017-3cad-9c37-af7ff41f5215.roa (raw, json)
Hash identifier:          vKXCeCbCFMT8LMvF/vuSPb3Ap+3MnN9HksSwKWBVtA8=
Subject key identifier:   AC:DB:DE:56:59:33:17:9C:28:EB:A8:92:BF:C5:3A:90:12:05:2B:13
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E1A66506013760C34C6F1A5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/726daa65-c017-3cad-9c37-af7ff41f5215.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 07 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1a:66:50:60:13:76:0c:34:c6:f1:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2022 GMT
        Subject: CN=9c7cd36c-8dad-4caa-8e3c-83da0a2e4c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:46:69:49:15:d2:70:b1:05:d8:ef:28:79:
                    c5:1e:65:1d:09:18:89:be:ed:ad:be:e0:09:da:80:
                    ac:6f:44:7a:cd:16:a2:c1:5a:d3:b4:bf:59:64:04:
                    18:c4:30:5f:d4:0f:14:c7:2f:97:ea:0c:e8:b5:65:
                    ff:df:20:85:57:77:2b:d5:91:20:bd:87:66:ec:5a:
                    ff:d7:50:90:6f:9b:4a:6c:80:67:5d:10:6a:a4:38:
                    8f:ef:50:04:d3:27:1a:7d:d4:0c:da:d2:08:74:92:
                    9e:13:34:e9:2b:f9:71:a2:20:b4:ba:e7:90:1d:f1:
                    90:52:4d:7d:e1:2f:d4:3b:57:91:4a:89:d2:46:58:
                    5c:9e:f2:df:e4:83:c7:65:a5:ad:7a:e1:17:51:70:
                    14:d6:41:d6:7a:0f:c6:9d:a7:c5:e4:79:78:68:6e:
                    0d:7b:d4:1e:a6:37:86:44:96:2a:0d:6f:60:d3:fe:
                    ed:32:4f:46:13:6b:75:9d:04:52:c2:6a:15:83:2a:
                    42:a8:09:86:ea:2d:a0:53:0b:91:21:46:70:8b:ff:
                    34:09:8c:f8:35:d7:7a:00:32:46:0b:fa:84:15:66:
                    fb:45:af:bd:0b:05:2d:6c:f1:b1:fa:88:05:4b:73:
                    e4:cc:37:e9:45:39:c1:91:e8:4a:a4:7c:45:f2:72:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DB:DE:56:59:33:17:9C:28:EB:A8:92:BF:C5:3A:90:12:05:2B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/726daa65-c017-3cad-9c37-af7ff41f5215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:2a:d8:89:d6:f2:58:9b:0a:0d:d0:ab:74:7c:2a:81:0c:
         58:ca:1d:3f:99:a0:0e:7d:74:ae:65:f3:a6:7d:ae:47:16:5c:
         fc:5b:c6:c8:17:ad:d1:b9:aa:ed:e4:a5:5f:bc:32:1c:63:9c:
         00:43:fa:bc:0e:0f:04:c3:dc:94:a1:70:74:7c:cd:df:b7:98:
         c6:86:b2:c6:52:19:0f:04:0e:3f:01:7f:c0:13:46:05:fe:4f:
         ae:e0:55:5a:47:4a:63:79:12:73:0b:2d:2e:dd:da:48:09:68:
         95:f5:b6:b6:14:c8:06:03:51:a5:09:43:36:b7:7f:a8:35:a9:
         6f:d1:3a:06:4c:bd:11:30:b2:e3:38:68:be:fa:61:ca:43:6f:
         6b:5a:8a:cf:85:b9:33:3b:f9:37:eb:43:2f:36:87:8b:23:6c:
         0c:38:27:29:63:b8:50:bf:8e:db:6d:0a:6a:79:0c:37:92:6e:
         a4:08:84:91:fe:41:2f:93:c3:0d:40:82:92:98:87:80:21:e1:
         f0:0c:66:56:3a:ec:dc:a9:d7:0f:4f:85:8a:83:99:7e:81:58:
         7e:12:d4:f7:32:33:c9:7b:00:9a:ca:ff:ba:c6:c3:5a:5b:fd:
         f4:72:82:6f:3b:39:1c:08:31:23:a3:7e:38:df:47:8b:48:c9:
         37:36:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:32 2025 by rpki-client