Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1717490-6904-3115-b6b6-9dff766cb951.roa
File:                     c1717490-6904-3115-b6b6-9dff766cb951.roa (raw, json)
Hash identifier:          uDkQy5jMFffTh0z6iDZTrHPr0O63wo8IgnfqJfm1E8k=
Subject key identifier:   50:E8:F5:A6:D0:F1:79:B2:C6:F6:99:9D:8B:36:D3:1E:88:86:4C:71
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F4BDCC8CB1B6BE2A685920B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1717490-6904-3115-b6b6-9dff766cb951.roa
Signing time:             Sun 18 Sep 2022 12:00:00 +0000
ROA not before:           Sun 18 Sep 2022 12:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.251.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4b:dc:c8:cb:1b:6b:e2:a6:85:92:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 18 12:00:00 2022 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=d169841a-01b4-4883-8be6-92092381617a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:81:aa:ab:83:ac:47:aa:a0:12:81:3f:57:
                    16:96:82:4a:66:9e:5d:a1:23:26:9d:fc:48:73:d1:
                    26:c1:ef:e8:08:93:3f:d9:7d:3b:c9:d6:3c:8b:47:
                    db:ff:1d:a7:c2:20:76:9b:68:8a:b4:f9:a4:e9:32:
                    b8:85:e9:25:99:5a:ca:5b:0b:0b:e4:e4:7d:4d:24:
                    c6:14:2d:2a:bc:03:99:ef:55:74:cd:a9:7b:04:61:
                    7b:24:53:cf:18:99:a9:d1:f7:47:bd:94:b2:ea:6c:
                    8d:bd:90:63:83:5a:98:01:ca:65:a9:84:d7:3a:09:
                    1d:a0:86:04:9f:30:e5:44:f4:e1:fb:ff:dd:39:e2:
                    b5:48:1b:cb:32:64:d8:ff:43:1c:fa:00:f0:e4:5c:
                    14:eb:c6:04:2c:a6:00:4b:c9:61:29:2c:0c:3a:ce:
                    f6:19:62:75:dc:2e:da:fe:23:9c:65:26:2b:8a:5c:
                    ee:0c:a1:87:a3:a1:4c:7b:67:51:b1:d2:55:8c:98:
                    c3:d9:79:a7:8b:e9:8b:ca:d1:a9:5c:5d:a0:74:dc:
                    da:6d:e1:96:d0:c8:d6:e9:1e:89:cf:98:f3:c1:f1:
                    91:e9:f4:0e:40:cf:0b:1b:52:df:9e:02:6b:11:0d:
                    dc:b7:f1:63:de:4c:f6:4e:6a:f8:59:24:bf:91:c8:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E8:F5:A6:D0:F1:79:B2:C6:F6:99:9D:8B:36:D3:1E:88:86:4C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1717490-6904-3115-b6b6-9dff766cb951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.251.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:02:8e:d5:b5:40:35:a7:c5:8f:ad:56:4e:32:f2:0c:bd:29:
         13:b0:60:16:63:ad:0b:4e:a7:7e:d9:c5:34:a9:0f:6d:d1:10:
         a0:10:7d:54:2d:3b:53:c4:d8:4a:d3:7d:24:b5:db:08:7a:9e:
         55:4c:87:7b:8e:92:40:8a:20:74:0d:3b:a6:7c:77:38:6b:a3:
         1c:31:5f:d4:53:97:9a:e1:8a:c9:30:1f:f1:83:f5:f8:4d:6d:
         aa:79:cb:a6:d0:b6:d1:88:7c:01:31:a1:33:9c:9f:e8:0f:43:
         af:99:af:0f:cd:ac:97:2b:6d:32:b5:a9:9d:2c:89:72:26:7e:
         6b:f5:b3:6a:b8:63:89:75:c1:ab:76:70:0c:f8:87:7d:b5:99:
         e1:9e:da:01:e2:54:39:6c:70:26:a0:70:d6:ee:b3:8e:f1:7b:
         60:ea:81:1c:dd:9c:d5:b2:2f:3d:70:d6:7e:47:52:24:f5:2e:
         9d:9a:da:49:00:5b:3b:ee:59:43:d0:4f:36:53:22:6d:4e:7c:
         6b:c5:50:df:ff:c2:9a:cc:52:60:71:6c:99:df:6c:e7:a8:0a:
         4e:91:6f:b6:b4:73:48:b4:07:32:64:6c:bc:5c:a7:44:74:e8:
         7b:fc:4f:07:37:70:54:48:85:04:f6:29:3e:41:cd:55:cc:22:
         a9:d8:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:35 2025 by rpki-client