Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b9b3c75-022e-3a35-9d08-5f83ccad4179.roa
File:                     1b9b3c75-022e-3a35-9d08-5f83ccad4179.roa (raw, json)
Hash identifier:          5LovBWJrwNOCcaz3T19kj4WdJ6rCBdznDqhgpZTWt1I=
Subject key identifier:   79:6F:49:22:FC:4E:2C:63:56:B0:8E:98:A3:EF:30:E7:E7:3C:AA:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F80783557103F221B9E511080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b9b3c75-022e-3a35-9d08-5f83ccad4179.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.224.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:80:78:35:57:10:3f:22:1b:9e:51:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=c5703d94-9e06-4008-a149-0b356a952049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:ae:23:24:80:34:c5:95:da:ad:2d:6f:90:
                    09:00:f8:91:40:27:19:9c:48:18:0b:68:88:fc:48:
                    48:f9:f0:41:d3:06:f6:0b:b6:aa:fe:ef:27:f8:c8:
                    80:43:34:13:c3:bb:d0:36:ec:5b:c9:47:ea:60:8c:
                    87:65:7f:4f:a4:0d:1c:22:a6:a3:d1:72:5d:e7:a4:
                    d7:78:77:6b:fa:50:86:24:14:cc:00:dd:c2:ac:0a:
                    41:f0:df:46:85:45:9b:15:39:05:c0:63:ae:37:d5:
                    9d:2f:b8:89:76:33:0f:43:20:b5:9f:81:e2:13:dc:
                    8d:4a:19:36:2c:91:41:09:0e:8d:d2:63:49:fc:cd:
                    78:7c:eb:52:5b:bf:41:8f:d5:b1:98:95:bf:19:4c:
                    9a:fe:b2:26:35:a9:c6:c5:7e:be:b7:d5:2c:68:75:
                    0f:34:a1:3b:e9:62:b7:09:dd:da:b4:44:77:b3:ca:
                    3c:50:71:5a:91:0d:ab:e5:25:cd:d3:e8:fa:65:44:
                    a9:c0:41:f0:a5:cf:d9:db:49:cc:76:a3:d7:19:42:
                    e3:d0:03:4a:3c:47:83:07:38:60:f1:b7:75:74:58:
                    9e:73:b0:af:64:a9:cf:64:eb:ee:2f:f5:1e:28:85:
                    60:69:74:d8:e1:92:66:1f:11:6f:de:b9:f0:35:1f:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:49:22:FC:4E:2C:63:56:B0:8E:98:A3:EF:30:E7:E7:3C:AA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b9b3c75-022e-3a35-9d08-5f83ccad4179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.224.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:78:6f:55:c0:0f:63:db:83:48:f0:19:2d:16:a5:c9:11:3e:
         93:53:a4:00:21:dd:76:37:68:a8:9b:aa:7e:0e:5a:91:a9:55:
         80:d3:bc:1f:8f:62:8d:e3:db:53:ed:2b:1c:60:33:85:84:88:
         a7:22:fb:2d:19:df:a4:21:7f:e6:d4:a7:a5:2c:bc:c1:31:87:
         b2:ac:cb:64:2b:12:e1:57:c4:8d:19:d7:78:cd:14:a8:e2:7c:
         31:29:b8:65:9e:36:f3:ca:78:7b:ed:67:46:d8:3b:78:b0:0e:
         53:e8:26:cc:71:54:ab:ef:6b:07:a1:2f:e5:45:98:51:6b:21:
         f8:69:46:9d:2c:8e:55:f8:8a:30:ae:64:9a:05:b6:58:85:1e:
         06:3e:fa:3d:d4:0c:e4:0e:9d:fd:8a:c9:04:56:ff:09:ad:b1:
         d5:24:7a:28:28:c6:14:69:73:e4:b3:a0:88:4c:e3:fc:61:36:
         eb:dc:02:90:ae:63:3e:62:7b:ee:33:d3:76:7a:45:58:49:3f:
         0a:a8:81:c7:d8:48:3f:63:2d:81:41:99:d5:28:5e:e1:7c:48:
         41:d2:ed:45:bc:ff:0e:4f:fa:c2:d9:b0:d9:ac:b4:04:94:f3:
         f2:62:a4:cd:29:69:8e:50:a6:18:79:3b:0e:86:02:f5:84:81:
         a8:34:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:59:35 2025 by rpki-client