Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a02bc913-bdf6-32dc-adc3-38fb01501ed2.roa
File:                     a02bc913-bdf6-32dc-adc3-38fb01501ed2.roa (raw, json)
Hash identifier:          bzO4B154bM6JZzqo7VnCUgw89qt6iwqHx95/mXm1VfM=
Subject key identifier:   B6:C1:A0:06:3C:55:BD:DB:75:8B:D3:3D:45:53:7F:3B:FD:A6:D4:86
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8E662D9F77CB72639CBF6BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a02bc913-bdf6-32dc-adc3-38fb01501ed2.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.138.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:66:2d:9f:77:cb:72:63:9c:bf:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=72001811-3b3d-4c09-bc9c-cc823cd2b3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:0b:4f:20:99:e8:f3:a4:c8:e4:99:5a:48:
                    6c:da:a3:52:7f:db:a1:e3:63:32:d5:8f:de:48:8b:
                    6c:cb:12:d4:f4:73:e5:97:86:35:6b:da:d9:19:00:
                    b0:02:1d:f4:18:8b:e3:24:bb:5d:b9:fb:79:39:5f:
                    c4:a1:75:8f:d6:d8:e9:47:dc:1a:81:24:f3:8c:1c:
                    c6:3f:a4:61:7b:47:b2:b8:64:db:35:6c:1e:9a:d7:
                    76:f3:43:a6:ec:80:1d:03:1f:50:2d:81:ac:3a:e0:
                    d2:bf:65:96:df:29:2f:a3:73:e2:14:ba:f7:57:b6:
                    ae:0a:75:09:70:ed:20:dd:73:8b:75:fb:bf:39:69:
                    39:0a:78:59:0a:a3:d2:f1:b7:3e:bb:de:99:2f:be:
                    d7:00:c3:28:cd:3c:6c:cf:52:06:46:e8:42:0b:11:
                    8e:7b:67:06:33:19:88:42:a2:29:d3:8a:d4:54:af:
                    38:c3:e2:23:5a:76:b8:06:fa:9d:1e:22:da:ed:92:
                    b7:fd:71:b0:40:20:22:32:23:95:9f:5b:ee:aa:ee:
                    00:54:40:80:36:46:08:8f:9a:8d:fc:f2:be:ae:da:
                    ea:8d:d3:d2:db:63:b5:6a:9f:8a:f7:65:d6:79:00:
                    7e:8c:07:10:e7:d6:fc:ca:fb:59:71:31:7e:41:03:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:A0:06:3C:55:BD:DB:75:8B:D3:3D:45:53:7F:3B:FD:A6:D4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a02bc913-bdf6-32dc-adc3-38fb01501ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.138.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:73:c1:b3:c8:d6:5a:62:53:29:a5:55:29:89:af:5a:3e:84:
         bd:71:d2:96:c4:2c:b2:a0:fb:a5:bf:6e:4c:55:87:99:18:e5:
         43:5f:e1:cd:be:1a:6a:e7:4b:8d:a4:4d:d2:0c:65:38:78:5e:
         99:be:2b:91:62:9d:15:28:66:92:36:e2:c3:32:a8:29:91:c0:
         09:54:2a:72:2d:e6:9b:98:b9:67:e8:47:9b:9b:ff:9c:12:80:
         93:83:31:b8:8d:a5:5e:b3:4c:8a:09:06:4c:50:1f:45:b1:97:
         0f:7b:bc:dd:68:e3:f9:5b:cb:b5:bf:c0:dc:a0:89:f3:e1:ed:
         67:b1:4e:91:19:38:de:ea:25:a6:d3:2a:50:27:d4:83:c4:ac:
         d4:ed:47:e9:e6:ee:29:65:9b:09:5e:e5:1c:6e:4f:b7:92:1d:
         a1:9f:b6:4f:c2:7a:34:72:71:9e:13:a9:82:84:49:5b:12:15:
         7e:d9:d2:a2:fe:7f:99:23:cb:f3:80:23:af:31:f5:e1:94:bd:
         ca:71:fd:20:66:5d:70:5e:61:a5:f4:a6:8d:93:85:2e:d6:2f:
         78:a4:f3:c1:1b:d2:16:d4:2f:08:c3:e1:15:1a:38:67:ce:d7:
         1f:5f:6c:fa:95:27:3a:60:43:b2:6c:ed:22:80:cc:56:65:92:
         f0:f3:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:11:19 2025 by rpki-client