Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02263dd9-b663-350c-a0bd-4e72529928f4.roa
File:                     02263dd9-b663-350c-a0bd-4e72529928f4.roa (raw, json)
Hash identifier:          +c437drb+0qUgFXfmC2SuoJPdipDGN9K52KFtT1JdyM=
Subject key identifier:   1E:85:3A:58:D7:A4:2B:33:27:79:B9:67:9D:48:01:0F:31:64:51:20
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858401F38630F93E11F00ED405840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02263dd9-b663-350c-a0bd-4e72529928f4.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.116.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1f:38:63:0f:93:e1:1f:00:ed:40:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=29e97907-e404-454b-a9a3-6e539f9f5cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:00:8e:84:e4:c0:54:78:44:3a:e1:b3:d6:
                    47:53:cb:a2:a3:a0:ac:4d:0f:be:db:c5:03:e2:ac:
                    56:c0:d7:e7:bd:15:52:c2:d9:b2:02:fe:78:b6:04:
                    89:63:0f:2c:37:e2:06:71:d7:7d:c7:55:2a:5a:e1:
                    b1:91:8e:2c:74:c3:04:f7:85:ae:c4:b0:1e:2e:dd:
                    59:fd:91:9d:17:76:bb:69:26:fe:ea:e2:94:06:98:
                    02:88:34:04:4e:b6:75:d5:f5:35:5a:53:49:b2:19:
                    c3:64:5e:4d:8a:2f:f7:f6:ae:65:76:26:5b:76:06:
                    a9:97:ed:ee:0d:e8:bb:3a:ff:d4:95:7c:09:0f:71:
                    a0:43:5e:fe:0b:c5:93:ac:f1:ed:0f:86:31:76:bf:
                    62:f9:61:58:92:fe:1b:6d:60:3d:d8:1a:ac:fc:2a:
                    fc:25:55:c3:c7:56:80:a0:c0:2b:f3:27:b9:1a:2c:
                    40:ef:db:ac:43:58:61:db:21:34:11:84:e2:e5:59:
                    1b:41:b7:7f:3d:df:7f:a6:2a:56:1a:34:38:65:99:
                    ca:69:4f:bc:a2:bb:7d:6a:2c:45:19:80:fc:f4:5a:
                    8b:69:76:6c:95:e8:7d:01:b0:a9:94:e8:45:76:91:
                    65:a7:77:ba:97:d3:ce:87:35:f5:1c:30:2d:9f:b6:
                    ee:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:85:3A:58:D7:A4:2B:33:27:79:B9:67:9D:48:01:0F:31:64:51:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02263dd9-b663-350c-a0bd-4e72529928f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.116.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f7:d8:00:83:4b:3c:de:40:30:d0:ae:b6:cf:94:fe:97:29:
         e8:44:37:86:21:58:29:b5:eb:ee:f2:28:e3:67:94:2f:60:f9:
         24:14:78:6a:62:45:69:44:25:73:76:fb:3f:53:63:3a:c7:2f:
         84:48:14:42:97:bc:30:69:97:3f:16:e7:26:9d:5d:e4:a1:9c:
         4f:97:ab:c8:f8:ec:4a:d3:e8:8b:57:1a:72:b9:08:f5:d5:e7:
         45:10:6a:45:30:3f:c2:e5:31:2a:6e:9e:3b:a1:8a:28:fa:d4:
         7d:95:b4:7b:e6:4c:bf:8e:5c:f8:3c:e4:99:f6:30:c9:92:26:
         40:4c:eb:1d:26:f4:88:e7:e3:fc:7e:30:55:c3:ae:7c:ba:27:
         0d:9c:c1:8c:6a:e8:27:fe:70:bb:b6:83:ea:4d:d9:a7:f3:9b:
         f2:59:8f:0f:7d:dd:18:4e:42:32:05:42:c1:fd:be:b3:cc:3d:
         b7:0a:c2:ae:c2:55:b7:74:ad:87:53:ba:5e:e4:3c:ac:89:91:
         9d:dc:65:04:c9:59:3d:dc:a4:15:70:cb:dd:fa:ac:2b:e7:7a:
         be:1c:75:ea:4a:18:47:dc:1d:92:7d:60:7c:c1:18:d3:aa:98:
         8a:22:c0:a4:e2:1a:73:2b:83:17:f7:98:e6:22:ec:6f:05:1f:
         00:4c:ec:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:33 2025 by rpki-client