Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07e6c1bb-b1aa-36ac-8b8b-dd8cdb3ba546.roa
File:                     07e6c1bb-b1aa-36ac-8b8b-dd8cdb3ba546.roa (raw, json)
Hash identifier:          sHPkKwZXErx9+KgLGhIk5XFS8YUw6kOhifWvSgV3imU=
Subject key identifier:   73:77:D2:AA:D8:77:C4:4B:7B:4C:2E:E6:8E:4C:AB:A9:19:8A:2F:BA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E499929EE4FB3432DD3FEC300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07e6c1bb-b1aa-36ac-8b8b-dd8cdb3ba546.roa
Signing time:             Sat 18 Jun 2022 12:00:00 +0000
ROA not before:           Sat 18 Jun 2022 12:00:00 +0000
ROA not after:            Sun 24 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:49:99:29:ee:4f:b3:43:2d:d3:fe:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 18 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2022 GMT
        Subject: CN=1edc559a-7bea-47d5-b0c4-932c8d40dcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:2a:14:36:7d:5a:a0:a2:7d:da:57:06:e6:
                    f9:83:de:6b:78:c8:5f:4c:75:93:fd:85:3a:b0:69:
                    6d:47:2e:98:af:f6:17:b8:9a:dc:50:62:58:41:81:
                    87:43:8f:7c:2a:d1:91:42:f7:1d:39:53:9a:f8:61:
                    cc:0b:8e:02:d9:80:aa:b8:80:b5:d0:1f:36:53:85:
                    a0:68:ce:8c:80:cb:3e:98:8a:82:a1:23:2b:57:a7:
                    56:c6:84:b4:38:18:24:b7:f3:ec:f9:65:b9:33:f7:
                    df:b6:b5:14:28:4f:0f:09:95:a1:8d:c4:01:92:77:
                    e0:dd:91:8c:37:95:56:11:38:32:b6:cd:a1:5d:86:
                    b7:55:d8:93:8c:cb:04:be:f7:1c:01:4e:24:b4:a7:
                    5a:15:56:44:e9:18:dd:fc:7e:82:d1:6a:47:2a:6c:
                    2c:f9:b3:0a:53:83:bf:ff:9a:c1:3c:29:39:93:19:
                    29:6d:ed:07:63:cd:69:e8:5d:e8:bd:72:35:a7:65:
                    97:71:5f:79:93:e9:01:85:c1:7d:ce:69:c3:f0:53:
                    65:3f:5a:78:54:8c:aa:e4:33:e0:9b:56:e5:49:aa:
                    fe:9b:41:20:89:6f:da:fd:3c:d6:76:28:af:69:9d:
                    78:e4:ab:26:53:12:4b:48:e0:8c:f3:c3:45:48:23:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:77:D2:AA:D8:77:C4:4B:7B:4C:2E:E6:8E:4C:AB:A9:19:8A:2F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/07e6c1bb-b1aa-36ac-8b8b-dd8cdb3ba546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:06:c0:db:d6:10:6d:68:2a:5e:68:58:75:63:20:4a:c2:92:
         9f:72:ad:98:fb:d6:3e:90:e9:b4:59:3f:5b:e4:e2:c9:39:8e:
         4b:17:40:f9:73:71:86:12:af:ab:5b:17:cf:94:46:36:71:15:
         f2:66:58:26:25:b5:3e:b1:16:41:00:ca:a0:ca:77:45:10:db:
         97:04:b8:d5:3a:12:f7:5d:24:65:c9:2a:33:c4:99:d4:65:bc:
         1a:80:66:0a:88:aa:70:d9:e2:84:8e:4a:72:61:9d:60:a3:51:
         04:d5:1e:99:59:29:1e:ee:a3:8e:94:28:bb:8a:e3:53:93:0a:
         38:3f:06:dd:46:d9:1b:cf:11:8f:48:c9:9b:27:e1:17:f4:30:
         11:b9:ac:be:52:a1:a5:dd:73:e5:07:a6:71:76:99:8b:e4:d6:
         2b:44:29:21:f3:31:cc:67:c0:7c:5d:c8:8f:87:4b:52:04:9a:
         7b:af:d9:32:63:e3:c1:74:4c:ce:01:10:dd:dd:90:83:b2:02:
         cd:db:9f:54:84:25:ce:78:a5:3b:d5:69:4a:e8:94:7a:e7:96:
         f8:75:4c:f1:5f:d8:f6:4d:2d:c3:5e:24:0c:85:ad:8d:cb:48:
         f3:e8:59:47:88:3c:fb:a1:6b:33:35:65:1b:42:6a:b2:66:89:
         61:ef:f1:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5JmSnuT7NDLdP+wwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxODEyMDAwMFoXDTIyMDcyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MWVkYzU1OWEtN2JlYS00N2Q1LWIwYzQtOTMyYzhkNDBkY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcAqFDZ9WqCifdpXBub5g95reMhfTHWT/YU6
sGltRy6Yr/YXuJrcUGJYQYGHQ498KtGRQvcdOVOa+GHMC44C2YCquIC10B82U4Wg
aM6MgMs+mIqCoSMrV6dWxoS0OBgkt/Ps+WW5M/fftrUUKE8PCZWhjcQBknfg3ZGM
N5VWETgyts2hXYa3VdiTjMsEvvccAU4ktKdaFVZE6Rjd/H6C0WpHKmws+bMKU4O/
/5rBPCk5kxkpbe0HY81p6F3ovXI1p2WXcV95k+kBhcF9zmnD8FNlP1p4VIyq5DPg
m1blSar+m0EgiW/a/TzWdiivaZ145KsmUxJLSOCM88NFSCPk1wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHN30qrYd8RLe0wu5o5Mq6kZii+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDdlNmMxYmItYjFhYS0z
NmFjLThiOGItZGQ4Y2RiM2JhNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEikwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIgbA29YQbWgqXmhYdWMgSsKSn3KtmPvWPpDptFk/W+TiyTmOSxdA+XNx
hhKvq1sXz5RGNnEV8mZYJiW1PrEWQQDKoMp3RRDblwS41ToS910kZckqM8SZ1GW8
GoBmCoiqcNnihI5KcmGdYKNRBNUemVkpHu6jjpQou4rjU5MKOD8G3UbZG88Rj0jJ
myfhF/QwEbmsvlKhpd1z5QemcXaZi+TWK0QpIfMxzGfAfF3Ij4dLUgSae6/ZMmPj
wXRMzgEQ3d2Qg7ICzdufVIQlznilO9VpSuiUeueW+HVM8V/Y9k0tw14kDIWtjctI
8+hZR4g8+6FrMzVlG0JqsmaJYe/x6A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:02:20 2025 by rpki-client