Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07993d71-64d4-3d2c-9a27-19868bd30015.roa
File:                     07993d71-64d4-3d2c-9a27-19868bd30015.roa (raw, json)
Hash identifier:          zzz7fwoN+BAGL6JmdwA6GM+nLT5CSxwcf30dh2LifmA=
Subject key identifier:   7A:E3:46:54:03:EE:37:AB:A8:3D:60:A1:EE:2A:47:D5:82:45:87:E2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD0737F5AFAD43653D24E4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07993d71-64d4-3d2c-9a27-19868bd30015.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.60.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:07:37:f5:af:ad:43:65:3d:24:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=a660397e-9654-48f7-91bb-6b6a87aead0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:1b:6b:75:25:bf:0d:10:67:f8:e0:00:93:
                    ad:3c:48:e8:a8:cc:1b:17:77:80:52:24:6f:ed:60:
                    80:b5:40:b4:90:d2:da:29:71:c8:c1:8f:55:1d:3a:
                    b6:91:46:88:c3:94:f6:0c:0f:b7:6a:8e:0a:a2:7c:
                    06:a6:f2:c2:a8:1b:8c:68:cc:f2:c4:81:7f:6e:d5:
                    f1:8f:43:2f:81:e2:48:4d:31:58:22:9d:ef:f9:12:
                    e4:d1:d1:1c:54:0a:1f:f0:1e:a5:c8:47:fc:7e:9e:
                    a2:38:c4:ac:51:5e:5b:25:c3:75:46:f6:51:2e:24:
                    97:17:23:a5:ad:4b:58:7b:94:dc:bd:64:07:16:2f:
                    43:89:a0:4c:0e:03:1e:a1:79:e2:8e:e8:d2:e1:c1:
                    b5:59:85:41:b1:c7:c2:8a:71:29:81:7f:a3:00:d3:
                    34:2d:9c:48:b1:a6:27:c8:f4:c3:a6:1b:db:4a:db:
                    f1:d0:27:da:a7:3b:f4:a4:0a:31:28:b5:f6:f9:6f:
                    89:67:5f:4d:47:86:25:a0:d2:1c:09:0f:ca:58:82:
                    f0:28:96:2d:23:78:2b:c2:45:9a:26:38:1f:7c:c3:
                    69:8b:0b:57:8a:35:b2:92:5d:a6:60:6d:d3:68:da:
                    52:41:91:30:10:55:68:8e:ff:fb:68:4a:3f:95:2b:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E3:46:54:03:EE:37:AB:A8:3D:60:A1:EE:2A:47:D5:82:45:87:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07993d71-64d4-3d2c-9a27-19868bd30015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.60.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:7d:18:21:43:68:13:09:c1:6d:4e:65:36:a3:ef:28:f5:
         9a:0d:fb:52:be:26:91:a7:40:f9:14:89:8a:d9:6b:be:45:7a:
         09:c0:51:82:66:ad:38:d2:d4:de:b8:aa:90:5d:d5:16:73:42:
         c2:35:51:c5:55:88:a9:08:47:30:74:1c:7d:cf:32:80:19:47:
         99:38:59:b2:cf:ec:77:55:cc:07:7b:a2:e0:bb:e8:4e:f1:c7:
         87:02:67:ff:5e:25:9d:15:3c:2e:3d:03:23:88:f8:4b:9d:b6:
         bd:8c:16:87:cb:92:b8:9b:27:d7:14:67:7f:87:9d:3b:c3:21:
         24:48:21:e8:57:fb:4e:cd:b0:a5:fb:87:d5:e3:26:f5:c2:e6:
         d9:ef:ed:75:13:70:2d:47:ec:17:f8:b9:af:45:f2:1a:a0:07:
         b9:3c:e1:7f:bf:07:45:23:8a:f4:73:fd:ea:07:92:a6:4b:7d:
         b1:79:2e:5e:1c:ff:47:c2:54:8f:88:25:5d:0a:09:a4:8c:76:
         bd:64:9e:32:fa:ac:36:51:9f:6a:df:e1:ee:28:c8:1c:a3:ee:
         91:2c:bf:1b:d1:0b:82:ff:d4:e7:b8:5d:3b:77:f6:55:84:62:
         de:0b:ff:3a:ae:e1:c7:60:40:6c:af:36:8a:48:34:9e:d8:49:
         45:44:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:15 2025 by rpki-client