Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cba56d4-58ee-3e39-b636-8b3fbd1b6a03.roa
File:                     1cba56d4-58ee-3e39-b636-8b3fbd1b6a03.roa (raw, json)
Hash identifier:          6xUvRgPCpdeVsu2P1nvprT+Ng5XOWzrp4cjPOXnrtJA=
Subject key identifier:   58:8D:EB:FB:53:32:8C:4C:67:9D:E6:E8:C8:69:42:88:8C:D0:C4:A2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB9963267AB0D3107ED0813C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cba56d4-58ee-3e39-b636-8b3fbd1b6a03.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:96:32:67:ab:0d:31:07:ed:08:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=6c085779-fb82-4c82-9e06-4bb02e88443c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:e6:2a:4f:77:d6:63:89:4d:38:9d:cc:13:
                    ca:ff:7d:26:96:da:0a:2b:6c:ed:c9:51:0a:5e:74:
                    62:c5:d8:f2:a0:3b:8e:b2:72:f2:a4:95:37:01:be:
                    e9:24:f7:54:a7:be:b6:10:aa:f8:5a:f2:2e:1f:32:
                    0e:64:81:7a:78:f4:28:ab:cc:0d:a3:f9:08:3f:87:
                    0e:64:02:49:b4:bc:1a:7e:b3:ec:34:d5:1a:b0:cd:
                    fb:8f:be:38:92:b7:30:60:73:8b:c2:d0:12:36:c2:
                    2b:c7:10:80:29:41:da:e6:1a:16:56:9a:f1:48:2c:
                    db:c8:01:b2:9a:8e:dd:00:4a:23:d5:33:eb:06:c9:
                    22:8d:ee:ad:04:db:11:c0:af:7d:d1:60:9c:d4:1f:
                    de:db:26:1a:6e:a5:87:0a:27:e7:91:0d:66:9a:df:
                    3e:44:34:b8:26:70:d9:a9:c8:40:0f:7c:54:cc:cc:
                    8d:29:3f:5a:62:a6:b7:9c:9d:50:f6:ca:d0:c6:51:
                    d5:59:57:68:1b:73:c4:63:c2:c6:ed:6b:bf:ad:08:
                    5b:c1:22:a4:a6:20:b3:be:6f:0f:0b:35:05:b4:08:
                    58:cc:71:8a:af:ce:58:fd:ab:2c:86:9a:9a:ff:90:
                    58:8d:51:1a:aa:5e:28:61:b8:8b:9d:91:f4:10:76:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:EB:FB:53:32:8C:4C:67:9D:E6:E8:C8:69:42:88:8C:D0:C4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cba56d4-58ee-3e39-b636-8b3fbd1b6a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:6a:57:79:ab:c9:ca:72:de:4f:9a:36:a8:2c:1e:7b:d9:
         af:d6:20:fb:df:40:e4:43:65:3f:c9:8b:5d:b6:3e:fd:f8:0a:
         5a:d5:74:59:9e:91:07:a1:07:78:97:22:a6:8f:f8:0f:34:fb:
         84:9f:d5:72:85:53:47:00:ac:7f:70:ce:d5:a5:eb:06:30:ea:
         96:78:f0:6b:33:8e:5d:52:90:68:54:90:98:d6:c2:45:9a:ac:
         55:15:50:48:8c:d1:b1:3e:02:3d:1c:4f:23:99:09:52:c4:7d:
         bb:06:80:82:42:f2:1c:13:ef:48:9d:3f:86:a2:f1:61:35:52:
         26:f3:0d:8b:0b:76:95:12:65:12:ff:c1:d1:6e:85:6b:ea:4b:
         b2:54:92:29:e1:61:6a:cf:37:07:8e:e8:62:d4:d8:66:ae:48:
         95:01:32:c4:e4:4a:c6:d4:73:9f:68:3d:7a:f3:cf:50:97:5c:
         2c:21:40:2f:05:cd:5c:fb:df:8b:73:93:ca:51:7d:6e:61:a0:
         c6:36:8a:0d:b5:0b:df:c6:42:85:70:fb:50:c8:d3:e5:00:1a:
         a0:06:24:d3:a8:37:ae:08:df:09:e2:86:a8:1a:2a:37:ea:67:
         84:b1:c0:2a:45:1e:4d:3b:8f:dc:f5:c7:1c:8f:37:e4:a7:37:
         1c:f4:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:00 2025 by rpki-client