Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/167dedf6-2cfe-34c5-9f60-b1e1d515cfbc.roa
File:                     167dedf6-2cfe-34c5-9f60-b1e1d515cfbc.roa (raw, json)
Hash identifier:          1BYLZwN71k7EhKm2Jgf58Vicp9kwMaD0q2Smeor4Ito=
Subject key identifier:   FD:B4:5F:84:12:6F:64:E0:30:52:8D:AD:46:CF:AD:0E:54:29:32:E6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E6FED32CA5BB367A5C42CE9C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/167dedf6-2cfe-34c5-9f60-b1e1d515cfbc.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.148.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6f:ed:32:ca:5b:b3:67:a5:c4:2c:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=5f49ced4-5010-46a6-b8f4-3f06e1aa03ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:98:26:3c:24:0d:82:c3:3c:47:2f:60:13:
                    06:8c:49:bd:96:27:df:2a:0e:43:92:95:1b:85:69:
                    e5:0f:fb:9f:17:ea:59:6e:7a:3f:34:e1:09:75:fd:
                    4b:31:49:4c:8a:f1:4b:8b:1b:12:47:11:91:6a:e4:
                    0b:54:a1:8d:20:81:3a:1c:0a:42:60:ef:8e:e7:be:
                    bc:e0:ef:95:c1:cc:b3:43:57:8d:97:48:81:65:bf:
                    87:91:07:88:9e:af:94:74:68:bc:d1:89:c2:9c:1e:
                    e3:fb:94:b3:c7:de:0e:0b:c6:82:2f:75:83:0d:32:
                    76:92:ac:6e:e1:8a:5b:f8:a0:74:35:58:9b:1e:a0:
                    a3:a6:60:35:18:49:82:ac:cc:c3:ce:48:f9:c7:d1:
                    3e:10:f5:26:86:ed:8a:51:5e:d3:55:20:33:22:a2:
                    76:c4:09:5f:c1:e2:ef:21:67:a2:9c:95:f1:ea:2d:
                    58:b5:eb:6e:79:fa:ab:9a:4d:46:c1:04:3c:ca:76:
                    5d:00:b2:4f:15:87:0e:d5:59:c4:0a:70:4b:b2:85:
                    1a:d9:a2:72:9a:82:0f:6d:e6:b6:93:dd:0f:2a:2b:
                    38:e3:d3:a5:a2:f0:f5:4e:4a:ee:06:47:bf:6d:03:
                    7f:54:23:4f:44:0c:3f:75:bf:1a:ac:a0:de:b5:89:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B4:5F:84:12:6F:64:E0:30:52:8D:AD:46:CF:AD:0E:54:29:32:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/167dedf6-2cfe-34c5-9f60-b1e1d515cfbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.148.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e5:24:5c:0e:c0:84:96:cc:f8:a5:20:f3:96:2a:53:f7:8e:
         56:9e:bf:03:a5:3a:e3:33:e5:d5:6e:78:71:df:52:4c:61:62:
         62:cf:28:7d:e9:73:5a:20:86:87:6b:d3:57:48:fb:5d:53:a5:
         e9:a4:5b:2f:ed:3f:3e:bf:0b:90:ff:d4:6c:5b:a3:3c:fc:82:
         70:36:af:69:00:fb:db:bc:5b:5a:57:41:be:89:17:b5:aa:9a:
         22:43:60:65:3b:63:5c:11:a7:a3:64:e3:ca:5a:98:f9:e4:49:
         27:32:57:3b:6f:80:86:4f:64:59:d6:ac:84:f3:3c:c8:ff:09:
         c0:f1:c8:b5:ad:75:c6:74:c0:72:7d:53:72:f2:7f:6f:b1:31:
         39:d6:53:51:d8:c0:cf:4d:8d:70:66:5d:92:24:bb:c7:87:bd:
         81:12:92:c7:21:82:51:a6:28:70:bb:d8:22:18:f9:55:d1:f7:
         9e:15:aa:1d:3c:7d:40:f1:9c:41:1d:16:b7:90:37:68:29:fb:
         3c:db:00:b8:98:e8:b8:8f:87:e6:ac:00:de:bd:ca:79:4e:b3:
         6b:73:1c:ed:93:45:e4:f3:ad:3d:46:70:34:b6:7e:5c:65:dd:
         31:c4:60:06:d6:9f:cf:a1:db:1d:26:eb:62:d3:04:b8:ad:97:
         8f:f4:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:00 2025 by rpki-client