Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02c59960-f514-3989-9c9f-682909045369.roa
File:                     02c59960-f514-3989-9c9f-682909045369.roa (raw, json)
Hash identifier:          khhHq9l5F+ZGBQN/1nouzO1a3eqpukV6r4FrVoyZbow=
Subject key identifier:   2A:F9:37:C5:C4:6B:FC:E3:71:DD:E6:F5:FB:E9:19:8F:B0:E9:2C:2F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5AB8EA0183FF22978F1937C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02c59960-f514-3989-9c9f-682909045369.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.192.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5a:b8:ea:01:83:ff:22:97:8f:19:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=cb0bf95d-19f9-4f87-8cae-5c28c084f80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:a0:3c:fe:0d:9c:04:40:42:cf:74:67:ab:
                    63:aa:0a:45:a2:61:d2:7d:72:ee:a9:b5:3b:32:5b:
                    01:e2:90:53:94:b4:ed:51:45:c9:c8:bf:a5:6c:55:
                    06:12:7e:74:52:59:5e:c4:74:c7:1f:5e:5b:f6:2e:
                    32:4f:aa:46:3e:41:80:db:50:17:20:84:66:ad:ad:
                    86:0d:81:1d:05:2a:b8:72:26:df:c6:f1:38:d4:09:
                    f6:24:6d:a3:b3:95:0e:d6:e0:a8:c8:54:43:1b:00:
                    cc:16:03:d2:3f:c0:97:b7:7d:8c:d3:3a:20:f7:b9:
                    7e:3c:d3:c9:59:4e:4e:d3:1e:d2:9d:dc:8d:16:b2:
                    5d:07:d4:c2:a3:0f:23:6d:b2:f3:96:42:af:31:ba:
                    68:14:c0:50:72:ba:10:e0:23:d1:35:5e:63:54:ba:
                    64:09:1a:a3:c0:11:f4:70:4e:33:93:63:9d:7e:9f:
                    f5:35:64:e2:92:27:f3:9c:de:1e:44:61:16:01:7d:
                    a2:f2:e8:e6:68:51:c7:b4:a2:d0:cd:25:db:4f:4e:
                    b4:8e:43:1b:93:50:6a:70:20:f7:30:16:b1:c2:ce:
                    ed:ff:59:a8:30:cb:8b:9f:b6:2f:3c:45:2a:5f:d9:
                    f2:d5:e7:b1:e1:d0:9f:f6:09:bf:3e:36:45:cb:ef:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:37:C5:C4:6B:FC:E3:71:DD:E6:F5:FB:E9:19:8F:B0:E9:2C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02c59960-f514-3989-9c9f-682909045369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.192.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:3a:ec:30:23:b1:c8:5f:ce:bb:14:6a:7e:c4:34:01:c2:
         16:80:a7:3f:08:20:58:47:b9:29:64:45:92:69:60:a1:5d:10:
         c9:e9:42:6f:2a:71:da:7f:b2:35:d3:ff:d0:80:2d:32:ab:c1:
         e2:b3:b1:0f:3a:bd:8c:0c:22:ab:34:ae:5a:c1:4f:05:64:d1:
         68:6a:c7:db:2b:c0:ab:ad:34:1d:ef:00:96:ac:c7:79:c0:ae:
         62:74:b3:05:36:4f:05:29:70:73:ad:46:1b:33:ab:4c:4a:54:
         ac:13:a0:99:10:4d:97:36:4a:2d:81:7e:75:20:43:d4:09:ef:
         d1:05:3a:80:e5:00:78:8c:c8:0d:59:0e:b0:0d:e0:24:d2:e0:
         30:47:7d:a1:03:3a:c0:87:1e:85:cb:f1:a9:58:02:f1:5e:a2:
         f5:b5:23:2b:1d:83:21:98:d3:d3:ed:ba:98:ed:86:97:3d:0a:
         ca:f7:d6:c3:95:b3:6e:d1:74:61:d0:e3:88:2e:a9:7f:38:d4:
         e7:c4:19:68:6f:0e:2b:0f:6f:a3:e5:84:14:0e:b3:8b:6c:df:
         06:cc:fb:06:26:bf:03:df:ff:2b:58:1a:dd:a2:f9:83:b6:c0:
         ae:27:12:7e:b1:2f:33:38:18:a9:72:ba:16:0a:cc:fb:31:44:
         8a:eb:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:47:52 2025 by rpki-client