Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02859528-c400-373c-a035-372748a64d53.roa
File:                     02859528-c400-373c-a035-372748a64d53.roa (raw, json)
Hash identifier:          VK5opk2q7gxd8Mw0n6el4C6JqcmkMMjQ1W6GR1wNNBM=
Subject key identifier:   0D:7B:FB:65:60:05:13:19:CA:45:B1:CC:9C:BD:4A:27:D3:C1:79:97
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F815749CBD9CC4F5B76949800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02859528-c400-373c-a035-372748a64d53.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.154.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:81:57:49:cb:d9:cc:4f:5b:76:94:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=8c296584-cc11-4ac0-a22a-27b2047366b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:57:e5:87:43:90:8c:15:48:6f:85:63:27:
                    0f:fa:1a:03:a7:ea:30:a3:47:e7:1e:9d:c2:0b:75:
                    7b:86:d1:b7:9a:71:a1:fd:6b:89:f4:ae:6c:60:01:
                    b0:a8:c3:fb:f2:72:f6:e1:14:03:89:ba:22:10:43:
                    b6:15:6a:69:50:40:1f:88:ae:d4:67:e0:cf:e9:63:
                    bb:c9:fb:07:af:b6:3d:d1:6a:78:eb:ce:15:75:49:
                    fb:11:0f:26:9a:aa:f3:d5:03:8f:17:68:6f:8a:0d:
                    5a:19:a2:18:be:44:0b:07:2d:40:0d:e3:d1:3e:69:
                    0e:c0:fc:9e:f1:d3:44:81:f2:1a:d3:32:b9:0f:12:
                    b7:0a:80:67:15:cd:48:7f:f3:7a:fc:70:17:b3:fc:
                    de:77:e8:fd:f7:dc:0a:c2:d2:60:c8:4a:ad:c2:fc:
                    cc:d0:37:91:0f:39:ee:9f:63:6d:89:bf:47:bc:bb:
                    0e:83:12:fe:49:77:fc:ad:03:d2:c9:4c:2f:47:fc:
                    51:2d:e1:88:97:04:ac:7c:f5:e9:b5:8d:22:e2:4f:
                    9e:a5:9d:58:71:26:87:54:bf:0a:83:aa:26:10:0c:
                    ab:26:74:82:b8:df:27:03:bc:81:96:9e:4b:b2:fb:
                    22:f1:e4:9d:6f:1b:9c:d3:2f:7a:b7:4e:de:fc:23:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7B:FB:65:60:05:13:19:CA:45:B1:CC:9C:BD:4A:27:D3:C1:79:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02859528-c400-373c-a035-372748a64d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:2b:cc:95:1f:06:31:2d:c6:aa:54:a2:02:0c:ed:82:b9:
         72:47:a4:f4:1c:23:aa:a2:b4:89:9a:ee:56:01:e9:07:e5:58:
         bf:19:f6:df:3d:68:d2:b8:90:dc:68:d9:6e:f3:ad:6f:b8:56:
         3e:5d:07:d2:84:b6:35:7b:44:39:d9:d5:f1:33:4a:89:71:c4:
         8c:62:4e:f6:a6:40:41:2c:61:30:5e:94:d6:4e:2c:68:f5:a6:
         8e:12:d4:03:2d:e0:19:ee:d4:3f:0c:f5:d7:41:79:25:f2:88:
         85:f6:b7:2b:66:f4:5f:30:d7:ae:3c:da:4f:35:79:68:31:a3:
         86:4a:19:40:49:cb:67:84:d3:2d:6f:9e:68:5f:ec:a8:64:21:
         d0:55:25:fc:a3:14:99:23:51:84:8c:55:af:18:61:d5:a2:51:
         2b:9e:d8:a6:c1:f0:63:1d:f4:ca:6c:d1:6f:58:1e:5e:65:aa:
         d6:0f:92:a1:2f:44:f4:7e:a3:fd:c6:d1:c0:43:0f:43:ec:a2:
         24:12:ea:aa:d4:41:51:5d:f1:be:28:5b:e3:df:3b:1e:3b:f4:
         d4:17:a9:9d:90:ab:7c:3f:26:e3:59:70:5c:4a:c1:0e:83:27:
         30:6c:ea:6a:58:00:20:41:d1:a8:2d:10:71:91:61:c5:84:8d:
         ba:d9:15:81
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+BV0nL2cxPW3aUmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwNzEyMDAwMFoXDTIyMTExMjA1MDAwMFowLzEtMCsGA1UEAxMk
OGMyOTY1ODQtY2MxMS00YWMwLWEyMmEtMjdiMjA0NzM2NmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRX5YdDkIwVSG+FYycP+hoDp+owo0fnHp3C
C3V7htG3mnGh/WuJ9K5sYAGwqMP78nL24RQDiboiEEO2FWppUEAfiK7UZ+DP6WO7
yfsHr7Y90Wp4684VdUn7EQ8mmqrz1QOPF2hvig1aGaIYvkQLBy1ADePRPmkOwPye
8dNEgfIa0zK5DxK3CoBnFc1If/N6/HAXs/zed+j999wKwtJgyEqtwvzM0DeRDznu
n2Ntib9HvLsOgxL+SXf8rQPSyUwvR/xRLeGIlwSsfPXptY0i4k+epZ1YcSaHVL8K
g6omEAyrJnSCuN8nA7yBlp5Lsvsi8eSdbxuc0y96t07e/CPKgwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA17+2VgBRMZykWxzJy9SifTwXmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDI4NTk1MjgtYzQwMC0z
NzNjLWEwMzUtMzcyNzQ4YTY0ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEpowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX7wrzJUfBjEtxqpUogIM7YK5ckek9BwjqqK0iZruVgHpB+VYvxn23z1o
0riQ3GjZbvOtb7hWPl0H0oS2NXtEOdnV8TNKiXHEjGJO9qZAQSxhMF6U1k4saPWm
jhLUAy3gGe7UPwz110F5JfKIhfa3K2b0XzDXrjzaTzV5aDGjhkoZQEnLZ4TTLW+e
aF/sqGQh0FUl/KMUmSNRhIxVrxhh1aJRK57YpsHwYx30ymzRb1geXmWq1g+SoS9E
9H6j/cbRwEMPQ+yiJBLqqtRBUV3xvihb4987Hjv01BepnZCrfD8m41lwXErBDoMn
MGzqalgAIEHRqC0QcZFhxYSNutkVgQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:02 2025 by rpki-client