Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/024e89e9-4d2a-37b3-ae32-a455dcdc7ed2.roa
File:                     024e89e9-4d2a-37b3-ae32-a455dcdc7ed2.roa (raw, json)
Hash identifier:          SBjNNRueTAlPyg0VHIDhWALC/40w3vKvKhDzu26WnmA=
Subject key identifier:   E3:78:44:EE:EB:54:49:91:9F:A5:F0:7A:A3:2F:FF:47:0F:6D:06:4F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406CE4F71EE3ED3D655834BAC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/024e89e9-4d2a-37b3-ae32-a455dcdc7ed2.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6c:e4:f7:1e:e3:ed:3d:65:58:34:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=355c5488-9ec4-4b7c-ab38-82e12815faec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:88:ec:38:f9:85:ba:1d:ec:da:23:96:60:
                    c7:43:87:1a:6f:d3:26:c6:3a:73:87:c5:86:27:36:
                    b7:96:62:b8:a2:03:67:68:d3:9c:d1:45:70:e2:58:
                    64:4e:21:49:9f:e7:99:84:6d:39:ed:57:78:e9:25:
                    81:33:c5:9d:e6:7b:d9:13:74:c7:7c:76:a0:98:6b:
                    5b:44:f9:4e:2a:55:a2:d2:f7:65:dc:4a:cb:43:88:
                    3d:14:2b:85:a3:9e:af:65:57:38:35:22:00:d4:35:
                    2a:fd:9f:84:10:d8:bd:c4:eb:be:1c:31:0e:8f:b4:
                    13:14:6a:1a:98:0a:c2:a5:98:e7:fd:c8:a1:cc:5b:
                    3b:8b:f1:c6:8b:4e:5a:0e:97:7f:79:42:93:0f:21:
                    ca:c2:ef:2d:6c:b6:13:5d:32:86:41:fd:5e:5f:73:
                    ee:d2:fd:47:71:8f:21:58:de:29:60:12:07:8d:e9:
                    1b:fd:27:65:64:05:d9:2e:22:17:ff:cd:ab:74:89:
                    03:0e:3b:b7:2d:01:fa:04:d8:9f:aa:36:53:89:f5:
                    17:a0:49:d3:6a:bd:3f:a8:15:3b:cd:f0:83:59:0d:
                    80:46:b8:af:af:c3:e2:fd:11:34:5b:41:fc:5c:c3:
                    22:6a:ff:e6:2e:c6:2f:c0:de:b2:be:d3:67:4d:0c:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:44:EE:EB:54:49:91:9F:A5:F0:7A:A3:2F:FF:47:0F:6D:06:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/024e89e9-4d2a-37b3-ae32-a455dcdc7ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:e2:2b:b2:e6:84:0d:91:d2:4d:00:56:b4:2e:91:f6:04:
         32:7c:97:19:a4:80:a0:95:6f:1d:e3:23:b5:4a:ea:00:b9:eb:
         4b:77:bb:d5:82:c2:c7:c6:38:7a:00:11:08:74:b9:b8:33:7c:
         f2:4e:a3:dc:72:14:2c:a3:09:0c:8a:99:2a:3a:bb:1e:6a:cf:
         d4:d4:df:d7:29:89:47:c2:4f:66:f8:fc:41:ce:d7:e4:ef:2b:
         12:a9:f8:7b:b5:8e:a2:12:e5:d1:81:be:d6:46:0a:2b:36:38:
         83:a0:cc:14:b7:4c:42:82:36:3a:28:41:54:71:5d:ed:fb:e0:
         d8:db:b8:3e:38:5a:d1:e6:1c:83:fa:8a:e3:3d:c9:6c:97:4c:
         50:a9:b0:af:fb:f0:3b:d0:b1:01:61:90:19:60:9c:f8:0a:af:
         82:71:86:c3:90:53:1a:84:f8:66:d7:30:9c:03:b4:c2:6b:2f:
         a5:57:ba:61:10:6e:4d:2f:6d:2d:34:05:ce:4e:b5:e8:05:89:
         e7:ba:19:28:16:87:df:62:7f:13:b8:c6:8b:12:05:72:67:b7:
         6e:17:40:f1:39:94:a2:48:d5:19:a6:ad:ab:75:bb:44:8d:85:
         a6:d5:7d:a6:e4:f2:52:47:71:da:23:46:c3:a4:46:15:9b:a3:
         bc:a8:b0:c1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBs5Pce4+09ZVg0usAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MzU1YzU0ODgtOWVjNC00YjdjLWFiMzgtODJlMTI4MTVmYWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPSI7Dj5hbod7NojlmDHQ4cab9Mmxjpzh8WG
Jza3lmK4ogNnaNOc0UVw4lhkTiFJn+eZhG057Vd46SWBM8Wd5nvZE3THfHagmGtb
RPlOKlWi0vdl3ErLQ4g9FCuFo56vZVc4NSIA1DUq/Z+EENi9xOu+HDEOj7QTFGoa
mArCpZjn/cihzFs7i/HGi05aDpd/eUKTDyHKwu8tbLYTXTKGQf1eX3Pu0v1HcY8h
WN4pYBIHjekb/SdlZAXZLiIX/82rdIkDDju3LQH6BNifqjZTifUXoEnTar0/qBU7
zfCDWQ2ARrivr8Pi/RE0W0H8XMMiav/mLsYvwN6yvtNnTQy3HQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFON4RO7rVEmRn6XweqMv/0cPbQZPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDI0ZTg5ZTktNGQyYS0z
N2IzLWFlMzItYTQ1NWRjZGM3ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAk03iK7LmhA2R0k0AVrQukfYEMnyXGaSAoJVvHeMjtUrqALnrS3e71YLC
x8Y4egARCHS5uDN88k6j3HIULKMJDIqZKjq7HmrP1NTf1ymJR8JPZvj8Qc7X5O8r
Eqn4e7WOohLl0YG+1kYKKzY4g6DMFLdMQoI2OihBVHFd7fvg2Nu4Pjha0eYcg/qK
4z3JbJdMUKmwr/vwO9CxAWGQGWCc+AqvgnGGw5BTGoT4ZtcwnAO0wmsvpVe6YRBu
TS9tLTQFzk616AWJ57oZKBaH32J/E7jGixIFcme3bhdA8TmUokjVGaatq3W7RI2F
ptV9puTyUkdx2iNGw6RGFZujvKiwwQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:16 2025 by rpki-client