Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1772c6ca-a81a-377b-809f-c24978010ae8.roa
File:                     1772c6ca-a81a-377b-809f-c24978010ae8.roa (raw, json)
Hash identifier:          hIAxU3em/XFj3q8EgIb+xjv0SxM9kXAnshcusYCHwVs=
Subject key identifier:   A7:1E:39:5D:D2:25:D6:AD:AE:22:31:D6:B0:5A:BA:38:3B:2B:33:C8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0B22F88EB298C73C62BD2980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1772c6ca-a81a-377b-809f-c24978010ae8.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.36.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:22:f8:8e:b2:98:c7:3c:62:bd:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=c0e67a02-9eff-4c91-ad83-de1f1aea7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:f6:7b:c3:34:72:fa:c4:ee:4e:36:b6:d4:
                    77:20:46:22:87:13:59:f0:3e:d3:52:c5:81:2a:04:
                    82:0b:ec:3b:68:26:62:6f:c8:8d:b4:0a:fa:a1:a9:
                    be:0a:e1:34:81:8c:e9:b5:08:b2:a7:ea:53:66:b0:
                    58:ac:a4:05:b4:c0:2b:1b:a4:97:6e:4a:1c:ab:98:
                    c7:cf:6a:e7:d8:74:82:1c:54:cf:6c:8b:96:ff:70:
                    77:88:eb:94:8d:b4:af:1d:ec:b0:fa:89:f4:c4:76:
                    f7:33:53:15:9e:52:23:79:6f:8e:43:97:8f:a4:32:
                    55:03:95:8a:9c:89:26:e4:a4:67:de:bf:94:9b:83:
                    12:4e:8b:0c:17:4a:7d:64:41:20:eb:af:87:47:23:
                    ba:43:74:ac:6b:c2:6a:fe:41:16:61:aa:cc:e6:1b:
                    30:18:ad:63:d3:16:ff:ba:e6:98:1c:36:45:17:bb:
                    a0:40:7b:60:82:1f:31:85:e3:73:16:4f:95:b5:62:
                    38:5a:fc:72:95:7e:ec:76:61:a7:aa:ff:d7:3c:61:
                    0b:5b:61:06:de:76:aa:38:b4:d7:e1:5a:d9:1a:6e:
                    36:e8:6e:71:35:71:0d:b7:2d:5b:12:6d:d2:5e:c1:
                    29:91:7a:85:b8:b7:41:5f:e4:56:21:f1:e1:35:0a:
                    e8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:39:5D:D2:25:D6:AD:AE:22:31:D6:B0:5A:BA:38:3B:2B:33:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1772c6ca-a81a-377b-809f-c24978010ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.36.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e6:d4:28:87:1b:33:a7:4f:f0:ca:54:a6:e3:1c:e0:5a:a5:
         11:6e:c9:99:a6:f3:d7:cf:fd:58:e8:19:91:93:f2:01:57:37:
         42:8a:e0:49:87:33:13:52:f1:a3:11:3c:a5:5a:e5:98:13:90:
         16:4f:b3:fb:39:a3:68:38:c2:1a:aa:ea:62:47:19:28:25:51:
         8e:7a:5f:54:a8:34:44:49:5f:45:b9:e8:c2:33:d4:e7:f3:4d:
         ca:b1:e4:d8:0e:d6:2b:7b:21:60:ff:75:61:dd:f1:9d:50:cb:
         a9:2d:7a:5e:0c:3c:9f:58:59:ba:55:02:62:cd:a9:4a:07:b7:
         d2:67:98:58:cb:97:1d:2b:04:71:36:b4:62:dc:9e:44:0e:98:
         dd:96:04:39:00:6d:fd:8a:4f:0d:f6:64:0c:b2:40:40:26:03:
         80:8a:cd:68:fc:3e:e5:2a:a2:b8:d3:bd:30:ac:49:c9:27:f2:
         e5:97:04:d5:29:50:91:7b:07:d4:7a:f3:52:77:04:6b:b3:9e:
         45:0e:90:8f:13:27:7a:4f:51:69:01:e8:02:34:2a:7e:27:b6:
         89:d9:c4:c7:81:05:33:6d:7c:f4:f6:ce:55:17:68:cd:74:5d:
         bc:42:2c:bf:c2:b0:76:8f:df:46:7a:e6:3e:13:68:c1:4f:5f:
         6c:a9:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:54 2025 by rpki-client