Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07cf55a9-9d98-3870-b19d-4620da9cab4f.roa
File:                     07cf55a9-9d98-3870-b19d-4620da9cab4f.roa (raw, json)
Hash identifier:          QABhpg23yogqNgNXT7E7VVEW3Uw+pRLjo9Zuox7XA8M=
Subject key identifier:   42:19:2C:6B:BE:07:0D:0D:C7:67:59:6B:75:7F:A9:38:26:30:5F:F5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F33339E0E58864D234443C980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07cf55a9-9d98-3870-b19d-4620da9cab4f.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.194.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:33:33:9e:0e:58:86:4d:23:44:43:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=3e0661d2-d737-4ada-bf70-926e33a8b93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:e9:61:a4:bf:46:9b:ec:28:07:0d:c2:42:
                    8f:70:cc:07:af:7f:ae:ed:29:92:47:08:62:0b:b4:
                    4d:dc:27:9a:36:55:96:51:9e:ad:55:f5:64:29:88:
                    15:b1:f9:a8:7d:12:57:4f:3f:6d:bd:16:ac:52:5f:
                    81:a6:8f:e5:3a:9c:b3:b3:c6:39:6b:da:f4:53:26:
                    f8:59:68:3b:a2:24:69:63:4f:73:7e:34:21:e2:f2:
                    60:df:34:ff:e6:9f:a7:8f:82:82:5b:05:48:e3:eb:
                    e8:da:16:20:75:22:37:05:bc:9e:e0:27:3a:ed:39:
                    7b:b2:d4:b8:84:6c:2e:6e:54:9b:a0:16:bf:15:e7:
                    b1:10:0a:ac:a9:9e:df:82:90:c4:b4:a8:7f:fe:97:
                    aa:aa:8d:ea:08:ea:7f:77:6f:7a:91:18:97:0c:be:
                    10:4d:25:30:a3:41:38:17:df:59:82:12:b6:9d:39:
                    f3:98:59:b9:d4:d0:1e:73:e7:b7:93:ff:4b:bd:3c:
                    9f:d5:eb:27:ec:5d:db:c2:1a:8d:df:ea:9e:3e:dd:
                    24:6d:16:05:34:c6:ae:63:ab:49:6a:4f:37:6b:04:
                    ca:52:88:14:e2:ae:24:85:89:ec:78:81:61:1d:84:
                    fd:a5:f0:f9:66:4c:13:7b:34:cf:3b:23:fb:e3:21:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:19:2C:6B:BE:07:0D:0D:C7:67:59:6B:75:7F:A9:38:26:30:5F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07cf55a9-9d98-3870-b19d-4620da9cab4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.194.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:90:98:37:af:b5:68:bd:ad:9f:8c:13:8c:f9:55:54:bb:b9:
         92:a6:d0:2a:53:59:1d:7b:1a:e1:1b:b4:a9:71:39:54:6c:47:
         7d:49:5c:e5:3f:71:3b:b4:1e:ca:10:34:ca:34:6e:ad:aa:5f:
         c2:ba:86:3b:d2:25:16:f1:48:67:cc:f0:06:df:43:8b:5a:35:
         37:ac:f9:99:71:50:7d:0c:76:49:e1:41:0e:ea:bf:ad:88:48:
         53:d2:a2:1d:75:c0:49:f3:38:f6:38:e1:b3:d0:39:78:1c:cb:
         40:ba:5a:68:70:35:3f:5e:82:8b:ee:92:26:d0:a6:01:2f:ab:
         b9:73:6f:29:9d:af:e6:4b:7a:39:b2:42:9b:55:ec:2f:5f:bb:
         98:60:59:dc:d2:2c:7e:9e:34:df:39:7e:b5:3a:9d:b2:20:93:
         24:cd:0b:16:e7:19:7b:4f:03:b9:9f:22:fb:73:94:75:68:fa:
         92:38:67:26:0c:35:b7:9a:68:1d:ec:18:e6:4a:91:af:ee:42:
         0d:fd:c5:8e:79:68:e6:45:ea:30:58:c4:f9:d8:c7:8e:e3:69:
         1c:87:d8:6c:17:13:c0:b0:70:e1:38:d7:8d:aa:06:7c:2b:b1:
         5b:3c:df:65:2a:23:e1:6f:43:a6:5e:38:62:d8:42:72:00:d4:
         e4:82:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:24 2025 by rpki-client