Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/076f83f2-071a-30a5-99e9-d55831ae2718.roa
File:                     076f83f2-071a-30a5-99e9-d55831ae2718.roa (raw, json)
Hash identifier:          Q8aFSjhvEh3yTOrU+ERSRxaxsZQNorrLXcT4q2dT3IE=
Subject key identifier:   BE:A4:89:DF:CC:48:02:96:A1:2F:A6:D6:01:56:2F:C3:73:2E:18:6C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0B7C31CF0B73390DBEE64700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/076f83f2-071a-30a5-99e9-d55831ae2718.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:7c:31:cf:0b:73:39:0d:be:e6:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=e5e148f3-9df4-4ecd-a7e4-f925282ebd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:71:3c:63:e1:a5:fb:a7:fe:4e:3a:0f:ce:
                    39:db:15:83:f9:a0:91:70:cc:bb:4d:1d:f4:55:13:
                    d2:52:b3:c5:02:1b:21:32:0f:16:0b:f6:23:25:55:
                    8d:1d:84:48:6a:21:a2:e1:ce:5f:31:9d:51:f5:00:
                    90:fa:b7:96:c0:ba:d9:54:28:be:11:4c:13:66:c7:
                    93:9a:83:b2:f4:96:ec:cd:dd:c5:e9:fd:5f:93:7c:
                    96:10:ad:1d:41:4e:2f:11:51:b8:07:62:3f:34:b5:
                    9b:56:5e:8e:c8:99:e6:1e:17:74:b7:32:d8:5b:11:
                    fe:09:6b:3d:af:f8:91:d1:f7:7f:34:53:60:a5:bd:
                    e6:27:31:95:dc:f5:a1:7a:a7:15:fe:5b:f7:23:ac:
                    89:ea:ef:a0:ac:6d:6a:1a:ae:c2:f8:f1:e5:9c:ab:
                    40:5d:a2:14:1e:a7:a6:90:0d:e9:3e:f7:ee:dc:2f:
                    8e:0a:78:3a:f0:50:1d:84:b0:57:2b:9c:f0:74:71:
                    0b:4f:cf:ad:65:05:b2:3a:dc:1e:7b:b4:c3:f2:17:
                    6c:df:d7:70:5e:56:8e:99:95:d0:2d:aa:b6:5d:a9:
                    1f:7b:70:c7:48:b0:a6:81:a0:c8:6e:f8:0e:1c:4b:
                    05:23:16:c9:e9:f5:e0:dd:9d:45:36:58:21:34:1b:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:89:DF:CC:48:02:96:A1:2F:A6:D6:01:56:2F:C3:73:2E:18:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/076f83f2-071a-30a5-99e9-d55831ae2718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:07:04:d0:fa:ce:ae:97:0a:b7:90:67:90:4f:87:91:06:
         30:5d:5d:52:21:76:86:64:18:1a:04:c0:f1:f8:91:9a:56:f7:
         13:29:8a:a5:60:df:75:07:4e:19:d0:75:b6:a3:81:d2:65:1d:
         c5:38:fb:3e:1f:35:92:d2:ea:fc:79:df:f9:29:f1:74:56:fa:
         79:5d:b2:63:79:61:02:fc:f1:e4:b6:88:07:58:e0:b7:ac:5b:
         77:e2:2f:3b:cc:2d:26:fd:ac:72:cb:30:91:26:33:cd:47:00:
         17:22:ca:ad:3d:69:71:27:21:65:06:37:8d:e2:0e:ff:aa:12:
         15:92:fb:e2:8c:96:f4:2c:48:92:d9:cd:5d:3c:f7:dc:d6:ed:
         79:a6:c3:c9:73:cb:3c:b6:0d:9e:9b:64:ae:66:60:9a:29:78:
         9d:75:06:06:11:15:f2:9b:ae:24:1d:d6:e8:5f:61:e9:88:f5:
         90:07:1d:e8:e8:e8:78:08:a3:47:8e:96:76:19:85:d5:d5:c1:
         a7:b3:6f:a7:1f:ee:e3:83:e7:ba:17:f0:b0:96:9b:fd:a5:43:
         91:f6:62:08:d7:b4:15:1c:02:75:87:e7:0d:38:cd:4d:8f:8f:
         1c:45:02:42:5f:d8:81:0c:f1:6e:28:7a:4a:08:5c:b5:65:9e:
         aa:74:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:12 2025 by rpki-client