Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0180c500-f6d3-30f4-9b2d-335c19939779.roa
File:                     0180c500-f6d3-30f4-9b2d-335c19939779.roa (raw, json)
Hash identifier:          9s2K6pkDN8KHZfJ9JiWdhbCDhaErvg4JyoZkGznx8w0=
Subject key identifier:   D2:F0:77:88:7D:C2:82:21:83:8E:BE:52:93:61:24:32:87:73:8C:43
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E2265B9FD369CEF718D0D8680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0180c500-f6d3-30f4-9b2d-335c19939779.roa
Signing time:             Sat 04 Jun 2022 12:00:00 +0000
ROA not before:           Sat 04 Jun 2022 12:00:00 +0000
ROA not after:            Sun 10 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.54.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:22:65:b9:fd:36:9c:ef:71:8d:0d:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  4 12:00:00 2022 GMT
            Not After : Jul 10 04:00:00 2022 GMT
        Subject: CN=f9f444be-905d-4885-a801-be8bb0ff52c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:aa:d1:a0:a3:87:de:b1:b8:ba:a5:9b:d7:
                    43:ea:df:9c:1a:c5:63:36:d2:1a:46:da:56:d7:00:
                    66:14:3f:01:f6:73:98:87:cc:08:79:da:70:58:51:
                    64:cd:42:79:a5:00:e0:d5:4a:a5:0e:1d:ed:d3:35:
                    c2:1e:97:20:ba:33:9b:c3:37:d6:f8:c1:67:1d:75:
                    26:85:f8:16:2b:1c:30:37:07:07:04:8e:ef:3a:dc:
                    ea:a0:e3:db:5d:78:94:12:50:a1:80:f9:21:a6:c3:
                    df:95:0f:21:a7:28:94:a4:e0:ed:85:2e:52:22:12:
                    7d:e2:a0:9f:44:0f:12:7d:7e:53:6d:06:3d:c9:61:
                    d3:8a:f2:c8:8c:40:a2:3d:ed:c6:4c:79:39:11:2e:
                    f0:41:1b:89:c4:7c:d1:77:61:59:13:20:3c:32:e7:
                    da:54:22:41:15:64:33:54:cd:2b:2e:3c:7f:e3:6d:
                    cf:06:cb:79:94:86:52:23:5d:d5:9e:43:00:88:7c:
                    54:83:87:1f:47:0a:f7:78:5a:4a:fe:af:6c:f2:df:
                    62:0c:23:0f:77:f7:49:62:a1:51:54:84:19:4f:4e:
                    44:ba:74:af:06:2d:5f:12:97:d5:07:56:a1:01:f1:
                    84:ae:44:66:68:a7:d4:ef:0b:1e:f6:2d:d3:64:88:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F0:77:88:7D:C2:82:21:83:8E:BE:52:93:61:24:32:87:73:8C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0180c500-f6d3-30f4-9b2d-335c19939779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.54.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:77:fb:3f:23:e4:85:47:52:f3:79:4f:bc:f7:73:fd:2e:
         8e:27:8c:e4:1b:06:3f:28:fd:4c:33:b5:e9:7c:dd:78:2d:27:
         a6:16:10:92:a7:0e:ca:ec:61:83:d6:5a:82:16:68:14:6c:31:
         b4:5c:0b:e4:af:a5:c2:f1:f8:94:2e:8f:53:1f:e4:b7:36:96:
         e6:16:57:18:3d:8e:58:47:c7:fa:01:3c:55:2d:3a:0e:fe:49:
         ae:d7:4b:2e:ea:51:27:4a:22:68:54:a6:a2:19:a1:33:62:db:
         0b:56:2a:e1:4c:c3:3a:65:01:2b:57:42:a9:57:a1:86:e0:1e:
         ac:44:54:47:87:08:ab:07:b7:05:72:aa:ac:50:83:26:22:63:
         42:70:29:2c:8a:3b:51:d4:5a:ef:ca:c9:93:19:cc:7f:c3:81:
         48:8a:c0:d3:3e:dc:ae:8f:8d:bd:d6:7a:21:c5:5b:0b:43:1f:
         7e:46:b3:b1:73:c3:3b:a7:f7:f0:90:8a:85:7b:f0:67:42:38:
         ef:ff:3b:bd:0b:db:73:f0:3c:d5:26:21:00:91:29:aa:59:16:
         24:05:46:13:ef:eb:86:bb:61:4b:6c:56:18:66:94:f8:a6:90:
         e9:29:70:34:ab:a1:a7:a6:86:67:f6:60:ce:99:80:c2:0e:e2:
         9e:68:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:41 2025 by rpki-client