Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/104bbc04-8d6f-3b97-98e1-15f895812964.roa
File:                     104bbc04-8d6f-3b97-98e1-15f895812964.roa (raw, json)
Hash identifier:          VOrwoxdgBMcx8J94mlFm40ZZgrvlTJuEVgip76jmbls=
Subject key identifier:   50:D0:D9:82:12:CD:23:92:8C:FD:23:D9:71:D8:F0:9E:E7:D3:3D:FA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBE8F6D3082CDE0D80B615180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/104bbc04-8d6f-3b97-98e1-15f895812964.roa
Signing time:             Sat 30 Jul 2022 12:00:00 +0000
ROA not before:           Sat 30 Jul 2022 12:00:00 +0000
ROA not after:            Sun 04 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.60.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:be:8f:6d:30:82:cd:e0:d8:0b:61:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 30 12:00:00 2022 GMT
            Not After : Sep  4 04:00:00 2022 GMT
        Subject: CN=78cbc7da-d362-4b00-aaea-9b9e6c3ecabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:f2:51:f8:22:8c:7b:0d:90:4d:67:65:7c:
                    bd:76:f2:8b:07:45:d5:d4:b0:93:e3:9a:56:c4:6b:
                    e9:d4:53:dc:6d:f2:5f:c5:64:0f:a9:be:4c:ea:39:
                    66:6b:16:58:65:63:2d:c3:85:ef:9b:7c:d7:f6:ed:
                    21:30:17:f6:32:42:68:be:a2:97:7e:dd:3c:c6:f6:
                    6a:d9:fc:9a:1b:ea:c6:6e:24:2d:56:c4:d1:9a:e9:
                    92:85:88:df:13:0a:10:3a:e5:3c:ea:bb:1d:07:f9:
                    ab:a6:47:56:eb:0c:f5:aa:3c:f0:11:27:43:e5:ec:
                    b2:26:59:d7:36:7c:66:75:0a:0c:04:56:54:22:6a:
                    38:2a:41:f0:93:dc:eb:5e:55:59:55:18:1b:4b:ad:
                    fa:99:63:e3:fb:43:53:87:02:ac:65:ea:28:1a:d3:
                    6f:4a:4b:cf:03:21:7a:7a:6b:b5:1f:23:12:e5:7a:
                    57:be:c1:3e:d0:91:72:42:13:b1:99:12:57:4f:7d:
                    24:52:a9:fa:f8:a9:a5:fb:01:f6:a0:b6:3b:39:7e:
                    4b:01:02:f7:27:f7:cd:34:83:40:66:87:9e:3a:bd:
                    0a:f7:b7:36:c2:8d:89:66:0d:96:16:a9:e1:74:75:
                    a5:d4:61:3f:d4:82:7d:72:40:a7:c0:f4:74:57:4f:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D0:D9:82:12:CD:23:92:8C:FD:23:D9:71:D8:F0:9E:E7:D3:3D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/104bbc04-8d6f-3b97-98e1-15f895812964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.60.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:71:ea:4b:d0:1e:ce:9d:3d:fb:ea:0e:26:58:01:f1:e7:5a:
         95:db:6e:5f:43:65:1a:02:97:be:f7:68:09:03:9c:9b:ba:c5:
         36:56:5b:38:47:e2:ae:e9:6b:1f:b2:22:8a:6b:7e:38:f5:f1:
         12:c5:a1:e4:32:87:3a:eb:b9:a8:19:9b:33:48:14:80:5f:55:
         1e:23:80:88:04:3b:94:83:f4:e3:2c:24:82:47:35:7f:45:29:
         e7:8d:41:66:3c:d4:e3:54:54:55:81:cf:77:9e:b8:53:17:a3:
         1b:36:2f:1d:11:02:21:2b:d3:e9:e0:a9:c3:71:fb:1d:e6:2f:
         b9:2b:e9:ef:a3:dd:1d:5b:eb:c4:bc:05:1d:e8:a3:62:39:eb:
         3b:8c:fd:4f:0c:c6:53:ec:a6:60:23:4f:ff:4b:d9:45:ce:dc:
         52:5f:f4:9e:07:98:f1:e7:cd:76:67:2e:d5:09:4c:8e:d7:a3:
         c9:48:cd:de:4b:18:a7:68:41:fa:4d:06:37:4c:3b:b1:23:c1:
         cb:00:f1:63:4b:9a:e1:5a:eb:45:bd:30:3b:d6:37:62:88:bb:
         8c:7c:74:f0:7c:91:7e:89:26:4e:b7:ff:44:bb:5e:83:15:42:
         c1:8c:90:46:e1:cc:11:11:11:cb:b1:30:f4:fc:e7:f6:cc:d3:
         33:c0:8b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:28 2025 by rpki-client