Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85785775-7637-3e22-84a3-fd8ccadb968c.roa
File:                     85785775-7637-3e22-84a3-fd8ccadb968c.roa (raw, json)
Hash identifier:          0NBYJle4xVaa3oDp6eYgbKjqgi03NZKOP4SRwonDM/A=
Subject key identifier:   A2:5B:A7:62:E4:DB:36:7A:45:D1:29:89:42:40:75:2A:32:80:25:B1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6BA97459733C3E08BC22F0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85785775-7637-3e22-84a3-fd8ccadb968c.roa
Signing time:             Thu 30 Dec 2021 05:00:00 +0000
ROA not before:           Thu 30 Dec 2021 05:00:00 +0000
ROA not after:            Thu 03 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.190.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:a9:74:59:73:3c:3e:08:bc:22:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 05:00:00 2021 GMT
            Not After : Feb  3 05:00:00 2022 GMT
        Subject: CN=8c6951bf-b8cd-45e7-9f34-c504383142bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8c:bf:aa:dd:79:b8:20:11:69:38:0d:e4:c2:
                    f9:08:95:b1:ec:45:b4:4d:b8:26:b0:00:55:a4:fc:
                    00:d3:be:81:7c:c9:36:50:19:53:65:7b:3b:e3:5c:
                    da:c0:d3:b1:49:25:68:3d:b4:53:5f:39:66:ed:95:
                    a9:68:e2:40:89:94:5a:46:47:e3:65:52:f0:8d:a2:
                    93:29:c3:08:f2:17:89:83:56:a2:77:3e:76:29:57:
                    44:28:fd:3d:0b:19:6e:3c:0e:12:09:1f:2b:55:4f:
                    ec:c0:9d:fd:3b:ea:65:8d:41:9d:cc:be:15:75:70:
                    dd:56:8a:d6:f0:35:e5:25:f2:fe:40:b5:11:30:d5:
                    16:f6:f7:8e:39:80:d6:86:7a:bc:3c:5b:2e:60:ef:
                    5e:50:e4:e1:b0:71:e8:15:1e:d0:b6:cf:6a:fa:5a:
                    8f:0d:09:d6:93:e9:eb:e7:69:69:1e:58:4e:92:67:
                    a7:bd:37:b0:61:0d:fb:26:6e:97:d3:4c:ea:2c:bc:
                    62:63:57:58:4b:1f:18:82:ca:2f:70:ec:21:f2:e0:
                    ee:9f:25:e5:a7:65:bd:35:10:5b:b0:d3:ab:d0:1a:
                    a0:88:d0:11:35:b4:6f:11:11:c4:15:eb:a7:3f:fd:
                    88:9c:68:80:d6:e9:7b:42:a2:c4:8e:e0:48:ca:16:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5B:A7:62:E4:DB:36:7A:45:D1:29:89:42:40:75:2A:32:80:25:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85785775-7637-3e22-84a3-fd8ccadb968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:ad:ed:e8:c1:0d:7c:96:ed:29:72:69:d2:37:e9:10:2e:
         0e:73:d4:ac:e0:7a:d0:1c:1e:3c:84:25:d6:d3:6c:1c:e8:c1:
         df:4f:ad:cc:28:51:32:00:9f:8b:52:9c:93:0d:7d:30:5d:32:
         72:a7:33:af:7f:66:f7:9b:90:bd:ba:2d:a6:ce:5e:df:40:61:
         2c:66:f5:4f:49:fa:64:89:9a:8f:f1:95:6f:15:4e:c4:cd:76:
         3e:5d:d7:fd:23:ec:b5:7e:28:54:17:5f:1a:32:52:ef:d7:f8:
         41:9f:79:dc:d1:14:99:91:43:79:c4:44:13:9a:fb:7a:e7:5b:
         c0:a5:fc:89:eb:49:3c:51:69:e1:5d:ae:c8:83:b0:c8:c5:35:
         73:4b:b3:69:0c:9c:41:42:dc:3e:1b:48:d9:a3:eb:d9:93:2a:
         16:73:c1:44:21:3d:46:45:70:05:6c:f3:9e:d8:87:14:59:0b:
         65:20:5c:e6:f3:75:10:dc:80:5c:7f:5d:cc:c5:fa:de:3f:b7:
         18:20:6d:bc:4a:ae:67:ea:52:b0:3d:b4:84:cf:b7:77:57:02:
         dc:6f:29:7d:59:20:0c:6a:2b:08:7e:a3:bd:80:7e:6d:d6:97:
         6c:bc:9e:d8:5e:22:f0:9d:ab:92:d4:89:ba:bc:4e:52:e7:51:
         5f:7d:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:15 2025 by rpki-client