Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8d3f271-0ff4-3215-9d60-800d9662473b.roa
File:                     d8d3f271-0ff4-3215-9d60-800d9662473b.roa (raw, json)
Hash identifier:          SxSuxVv/KP6AwSboYlGDQooO4bptOElg0+Mi+x2hyvw=
Subject key identifier:   C3:03:D1:D0:AC:D8:C7:36:09:BA:3D:AE:1A:3F:68:18:99:3E:D8:7B
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328584013A57F9BDEA074EE276A9380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8d3f271-0ff4-3215-9d60-800d9662473b.roa
Signing time:             Tue 29 Nov 2022 12:00:00 +0000
ROA not before:           Tue 29 Nov 2022 12:00:00 +0000
ROA not after:            Wed 04 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.252.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:13:a5:7f:9b:de:a0:74:ee:27:6a:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Nov 29 12:00:00 2022 GMT
            Not After : Jan  4 05:00:00 2023 GMT
        Subject: CN=3678a7c5-8c85-4d5d-963f-ccd1a662ff56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:c6:94:b1:04:ea:fd:d4:da:40:f8:c4:2d:
                    72:d9:47:47:17:b1:e7:55:cb:ad:0d:b3:41:4d:6b:
                    16:41:2e:ca:8e:34:93:c4:a8:05:e6:49:a1:e2:90:
                    c6:90:29:e0:8f:c6:52:04:78:93:df:b2:d6:1e:97:
                    e5:bb:d9:41:3e:b7:cf:8c:1a:48:44:6f:f4:5b:48:
                    02:3c:69:e8:45:9e:76:93:f6:d0:7a:69:ce:6b:5a:
                    b8:92:9d:5b:58:9f:db:33:ae:27:38:3d:aa:7f:bf:
                    01:c8:7c:60:eb:a6:b5:43:bf:f8:d3:5f:03:67:de:
                    14:2b:a0:ad:e5:d8:e4:8a:7a:87:a1:8b:39:e4:ff:
                    1b:21:26:86:67:ae:05:03:1d:95:57:0f:78:60:90:
                    ec:60:27:57:38:75:2b:a4:85:50:6a:8d:92:22:42:
                    bb:9a:a2:85:0b:e9:af:b3:c5:e5:f3:38:aa:21:b0:
                    f4:88:a6:fe:b3:b3:13:67:95:10:90:a5:4d:d2:06:
                    d2:79:6b:24:a7:57:db:16:58:95:27:68:58:64:96:
                    14:5d:0c:dc:31:6c:b7:33:26:01:18:75:d4:4a:4b:
                    4c:00:8e:a2:88:3a:ec:fc:c9:a1:e2:7e:74:98:d9:
                    50:60:b0:43:cc:7e:ad:c3:3f:0d:2c:22:e8:60:d5:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:D1:D0:AC:D8:C7:36:09:BA:3D:AE:1A:3F:68:18:99:3E:D8:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8d3f271-0ff4-3215-9d60-800d9662473b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:80:1c:09:4d:10:0d:fc:a7:f8:22:ee:80:14:13:63:69:8b:
         af:70:97:d1:af:1d:53:8b:61:e1:8f:fa:68:7b:f4:89:c5:a8:
         0b:9c:4a:09:1d:51:3e:74:9d:2f:36:87:b1:3c:0f:37:03:21:
         6f:e0:62:d6:4d:ec:42:14:3e:ab:6e:c7:6c:71:fe:02:8c:10:
         6b:b2:c2:44:c4:65:aa:fa:9e:7f:b3:eb:5e:33:3f:66:dc:3a:
         0d:aa:4e:83:b5:19:18:64:7c:db:c0:56:ae:e1:71:fc:56:3c:
         a6:bc:65:c7:81:66:14:42:c5:2c:6f:09:72:66:c3:12:cf:38:
         8c:98:ec:44:36:33:38:de:8d:57:88:15:dc:fb:16:d7:1f:e8:
         07:4a:34:37:80:60:33:3a:14:2a:19:63:51:c9:ed:bc:92:cf:
         e8:1f:35:0a:d9:fd:42:e6:20:1d:0f:7e:5b:1a:3a:e0:a0:a6:
         f4:22:70:c9:a2:c7:1d:2d:ac:cc:f7:5d:12:6c:fd:90:b3:87:
         a5:d6:c3:63:01:f2:4d:bd:a4:a1:dc:29:a1:ca:b8:e8:c3:c6:
         a4:c1:b3:3f:ff:56:e3:7f:22:2e:0e:29:62:45:75:92:4d:3e:
         76:fa:4e:a9:34:c4:62:e0:da:e4:21:98:00:13:d7:08:23:5c:
         99:c3:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:20 2025 by rpki-client