Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa48ec4a-c0d4-3dd1-a3b8-5c6db1338f30.roa
File:                     aa48ec4a-c0d4-3dd1-a3b8-5c6db1338f30.roa (raw, json)
Hash identifier:          CgyLMnaGRtYLUAh3Dzldk9DwqnKuv31sa6SuPSusN7M=
Subject key identifier:   BE:DB:27:89:EC:DB:0C:83:AF:75:B4:5F:19:29:9D:92:16:96:AF:AD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D5665C5EB0DA81CF425E54CA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa48ec4a-c0d4-3dd1-a3b8-5c6db1338f30.roa
Signing time:             Thu 24 Mar 2022 04:00:00 +0000
ROA not before:           Thu 24 Mar 2022 04:00:00 +0000
ROA not after:            Thu 28 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.236.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:56:65:c5:eb:0d:a8:1c:f4:25:e5:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 24 04:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2022 GMT
        Subject: CN=e40c5e43-a1b0-451a-b03e-6e2fc06e6bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:10:0f:0b:ef:cb:11:8e:4a:05:b9:e6:7d:
                    38:45:7c:6e:69:97:b4:2f:19:35:ad:eb:f1:6b:7d:
                    e6:b0:7f:d8:31:b2:6c:a8:11:77:0c:db:d6:75:1e:
                    dc:e7:e6:8b:a1:d8:98:f2:81:69:75:4b:07:8d:b4:
                    b9:fa:18:2d:2c:12:1e:38:e0:61:d1:71:6e:a0:9d:
                    3b:c4:4e:22:d0:07:39:5a:c8:bf:48:ee:39:88:28:
                    14:b9:7e:d5:03:83:8f:e9:2b:53:eb:98:51:51:d3:
                    08:0f:6e:07:68:dd:b9:92:c7:82:87:4c:ec:96:58:
                    92:1c:cd:bb:5d:3d:e2:91:1b:80:5d:2b:f8:07:04:
                    9d:0c:af:96:20:c9:5b:da:0f:cc:8d:17:9f:6e:fe:
                    9f:b6:57:07:7d:8e:3e:b2:1a:bd:3a:1f:73:f1:d7:
                    ce:27:7c:a0:ce:9c:07:de:8f:59:8b:55:72:7c:65:
                    cc:43:b5:a5:9c:24:8a:7c:5b:8a:90:9c:06:00:6a:
                    7f:fc:21:50:26:ec:f0:4e:ce:c7:10:d7:e0:a7:e8:
                    25:fc:00:08:e4:ff:1b:93:f8:49:64:a3:45:6d:0e:
                    72:fe:42:6d:28:81:32:72:96:ed:35:00:be:5f:59:
                    7c:c7:91:50:53:0a:be:60:93:0e:d8:f3:0c:64:81:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DB:27:89:EC:DB:0C:83:AF:75:B4:5F:19:29:9D:92:16:96:AF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa48ec4a-c0d4-3dd1-a3b8-5c6db1338f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.236.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:42:c1:73:20:a3:4c:08:f4:e5:a6:e8:90:96:d2:51:5a:59:
         b5:d0:5b:dd:a7:62:a7:29:2c:b6:ee:56:2f:25:33:8f:bf:13:
         c3:af:41:30:d2:2c:2b:c3:1c:7e:9b:71:82:9e:5d:e6:4a:d1:
         b2:2b:f4:2d:b7:97:b3:29:48:47:33:af:e1:4f:89:a3:48:3c:
         f5:42:cf:e7:84:96:f8:b4:1d:f0:6c:6d:b1:b2:9d:e2:61:62:
         3c:be:a6:62:30:de:a8:f8:88:30:91:25:2b:83:66:6e:c9:85:
         b5:09:d4:a7:56:17:04:96:4b:e8:ef:2a:14:3d:a2:f8:33:6c:
         d9:83:bd:2f:75:3e:22:93:a1:7a:eb:80:c1:0c:e5:cd:58:2a:
         3e:a7:cd:28:04:1a:35:4a:3b:63:14:33:a3:a6:9e:53:94:3d:
         5c:db:1a:a5:c4:23:50:2e:a9:6f:36:79:8d:14:fd:5f:db:fb:
         7d:7a:f5:a0:fa:c4:d7:ac:d4:30:97:7a:2a:7e:84:af:a8:b1:
         f7:d6:38:0b:f2:61:85:29:f0:b8:c6:47:27:86:96:96:09:05:
         27:b8:0a:46:d7:60:8b:85:8d:2b:0a:d9:9e:d4:ab:a0:5f:a0:
         80:1f:95:49:0c:e8:d6:00:3c:d6:a9:8e:b7:3c:f2:8d:5b:b3:
         66:f0:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:19:21 2025 by rpki-client