Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06bb7138-a199-377f-86b9-68e0e5ec7bc0.roa
File:                     06bb7138-a199-377f-86b9-68e0e5ec7bc0.roa (raw, json)
Hash identifier:          uSeZGuof7U86rU1g65w0BZcw1q10/1ddtJaJqFadjyM=
Subject key identifier:   54:B8:91:7F:F3:58:CC:B9:27:FE:88:BB:5D:59:BE:82:E9:1D:6B:5A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF2FCF3A3140A78F451F56C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06bb7138-a199-377f-86b9-68e0e5ec7bc0.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:fc:f3:a3:14:0a:78:f4:51:f5:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=5a90ef9d-0b18-49dc-8968-698991448301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:6b:c9:80:77:32:d6:8b:d9:41:7a:c2:97:
                    63:2b:3e:8a:e3:d0:14:e8:d4:83:6d:1e:9d:0c:b8:
                    ee:8f:c5:20:ec:b5:9b:4a:08:79:62:e5:c1:3d:b0:
                    b8:e9:08:8e:37:f3:c8:36:2b:20:2d:93:d7:d1:57:
                    0a:be:35:df:2c:0f:f3:0c:20:3a:76:91:b2:57:54:
                    80:20:a2:49:f2:06:81:ef:6b:78:1d:17:44:72:64:
                    ed:21:d0:72:90:25:d8:60:a8:3d:de:0d:0a:aa:8e:
                    79:ee:46:66:e8:f3:92:a7:0a:84:37:ed:61:24:15:
                    82:c7:a9:01:33:7f:9e:8a:b8:cb:ea:39:31:77:b4:
                    e4:f1:5d:c0:06:82:d3:41:9e:86:4c:5a:57:86:c7:
                    89:6a:93:49:c5:74:22:2a:a8:0d:b8:a8:2a:83:85:
                    2a:47:e1:ef:f9:5d:6d:0a:be:ea:31:2c:59:b1:d9:
                    16:0f:8f:20:66:7f:21:7e:30:93:48:ca:ce:3c:41:
                    0d:af:d7:e1:27:b4:92:ae:ac:af:fb:3f:56:f3:22:
                    7f:e1:88:a2:ce:d9:b0:17:3a:b3:5f:1e:09:cf:80:
                    99:c2:d4:87:ad:f6:a7:c3:69:b2:ca:ef:e0:d7:57:
                    c0:e8:c3:43:2c:d2:12:b5:02:40:d1:71:28:05:85:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:91:7F:F3:58:CC:B9:27:FE:88:BB:5D:59:BE:82:E9:1D:6B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06bb7138-a199-377f-86b9-68e0e5ec7bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:41:91:9a:0f:4a:eb:34:3f:6b:f2:c4:9c:36:b0:40:70:
         f7:96:14:17:f6:5a:66:7d:04:08:42:5b:7c:bd:0f:c2:d6:ec:
         49:e6:1a:3b:5e:2c:48:d4:de:6b:55:d7:f5:32:3c:2b:40:51:
         53:35:46:8b:0c:ca:93:77:51:06:29:a5:11:26:03:9a:39:b3:
         41:68:3f:8d:80:0e:46:01:ba:6b:b1:39:32:a0:d7:13:eb:bc:
         7f:37:82:71:6c:e3:aa:7f:fc:de:80:2f:f3:90:6b:d0:26:b7:
         ef:ce:db:22:9d:9d:a9:9e:85:00:1b:6e:37:1f:b8:c5:e7:d1:
         30:e9:da:b8:91:72:4f:8a:2c:95:7e:be:30:9e:ed:6b:d7:1a:
         94:dd:17:a2:0d:dc:92:45:50:5c:5d:28:d6:24:f3:e1:27:56:
         6f:8b:42:b2:10:72:b3:f7:9e:30:4c:39:96:11:f0:9a:48:3d:
         f2:e9:9e:c9:50:ad:dc:59:d3:e2:3e:2e:c4:7b:0c:4c:5d:9f:
         4a:46:30:e5:55:d4:39:f9:f6:9c:05:36:27:ad:99:5f:13:4c:
         6c:ad:33:68:72:27:7e:3f:60:44:c8:79:3b:ee:6d:33:d0:06:
         5b:3c:1f:44:1c:6e:48:95:d1:b1:04:f0:00:f7:ff:f5:5b:27:
         dd:05:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:45 2025 by rpki-client