Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/064c4bb5-5561-3406-af75-01b11253761b.roa
File:                     064c4bb5-5561-3406-af75-01b11253761b.roa (raw, json)
Hash identifier:          srirgc1CJNktuhuKzqzwygloS9RfqNhA4qyuwEkXHmE=
Subject key identifier:   D4:58:9C:92:5F:4B:E5:42:50:A9:A0:CD:8B:03:52:64:15:E8:CC:DC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCED2197B180E859C53044D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/064c4bb5-5561-3406-af75-01b11253761b.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.74.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:d2:19:7b:18:0e:85:9c:53:04:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=6faea503-053c-43e2-bd8c-c5925ec7168c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ec:42:92:cf:83:68:95:35:77:91:dc:b3:fa:
                    cc:c5:03:63:99:f1:79:1f:ce:89:64:26:2f:55:03:
                    e0:df:a5:ba:e2:34:ad:b4:86:8f:fe:6d:21:a4:5d:
                    fa:2b:a6:07:c6:a8:e6:54:a2:f1:1b:ea:8f:41:2c:
                    78:ee:63:a1:96:97:2b:4b:43:e7:1b:d3:e7:32:32:
                    1a:1a:e0:ba:86:d0:78:db:38:9c:b5:09:6e:f5:32:
                    cf:63:83:36:dc:f6:21:98:15:5d:46:2b:7f:38:50:
                    dc:1f:43:61:76:f2:50:27:7c:97:da:76:93:77:c1:
                    40:5e:36:78:46:9a:13:a2:20:0e:ac:75:65:00:80:
                    9f:6a:09:3d:d3:9f:f2:eb:02:05:a8:c6:b4:ca:96:
                    aa:16:5c:51:36:34:65:c5:64:79:4a:23:d8:95:3a:
                    94:3c:7e:20:80:15:61:0c:da:a2:02:9d:93:d4:43:
                    0e:3a:47:e3:71:f8:06:d7:33:65:1a:f4:97:6b:0f:
                    ee:9e:c7:1f:b5:77:58:ef:44:15:83:72:87:fe:0a:
                    94:26:2e:47:62:ff:ee:88:68:86:df:6e:74:08:ee:
                    5a:c3:64:fd:8a:af:13:10:a8:e9:3a:13:38:01:d3:
                    ff:ac:3c:93:f0:28:5f:42:67:02:95:95:52:80:08:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:58:9C:92:5F:4B:E5:42:50:A9:A0:CD:8B:03:52:64:15:E8:CC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/064c4bb5-5561-3406-af75-01b11253761b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.74.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:51:12:49:1e:f8:10:0b:02:c5:27:18:9e:c3:3e:0c:4a:db:
         0c:06:ad:e4:b8:4d:4b:dd:dc:06:4e:42:53:a1:22:6c:69:22:
         d3:da:a7:82:0e:bb:9d:e8:a3:32:2c:af:3f:2c:d5:ef:93:33:
         fd:b2:1d:03:b7:22:65:19:96:c7:60:34:75:ed:23:c3:73:50:
         53:91:9b:26:7b:ab:85:ac:91:30:ae:c3:7b:bb:d2:66:23:b7:
         ce:8d:66:d7:06:01:c1:f8:37:a0:39:15:6a:e5:5e:2f:4c:85:
         d4:b5:61:9f:14:3b:6b:10:8a:08:b2:f9:9e:e4:94:3c:bb:ea:
         7e:30:e3:de:08:87:d3:fc:1b:31:51:6f:c7:6f:ec:b4:42:f8:
         b0:d3:a8:2a:3b:e0:dd:f1:c0:cd:2f:72:62:13:f6:00:80:72:
         a3:e4:e4:0e:f9:c2:fe:96:e3:62:08:11:33:54:1e:ba:c3:82:
         e4:bb:5c:b0:14:f7:ac:79:00:e1:b7:cb:c0:9e:7f:3d:b9:c6:
         ec:a0:62:83:26:48:a7:9e:2f:37:51:e5:24:a4:24:a0:d4:f0:
         ea:72:0d:45:8f:2e:ff:80:c5:49:d8:2c:60:35:6f:77:09:ee:
         79:ea:3d:5e:dc:c6:0e:d9:48:9e:f1:5a:c4:81:79:52:0a:f3:
         6d:4f:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:16 2025 by rpki-client