Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce3d75e-0065-3e93-af71-46fa1d51a020.roa
File:                     1ce3d75e-0065-3e93-af71-46fa1d51a020.roa (raw, json)
Hash identifier:          M+uWVGh3Hnldf25pkwBMJa0Uospgma73n2uInc3QBnw=
Subject key identifier:   CD:59:94:02:F5:A2:1E:72:6B:1C:2B:50:EC:CC:70:79:67:7B:74:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E9718E4D835E04A6765A2E980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce3d75e-0065-3e93-af71-46fa1d51a020.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:97:18:e4:d8:35:e0:4a:67:65:a2:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=d450da85-209a-4bc6-ba3b-8d54309139af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:7b:21:dd:5a:e9:86:b2:9b:c4:9f:41:fe:
                    3e:4f:6c:a1:ae:2b:0f:9e:30:0a:04:60:69:32:2f:
                    33:6d:1a:37:6e:2d:4a:dd:97:bc:b5:51:c5:a9:a9:
                    0d:49:c5:6f:3c:92:a4:30:15:5e:46:3f:bd:ac:b1:
                    42:24:cb:31:7f:a9:fd:23:96:7d:d1:cd:3a:9e:72:
                    1b:cd:f2:98:8b:81:17:8f:f7:3d:c4:40:cf:f1:da:
                    35:42:76:d7:ed:05:ae:da:79:c1:e5:c0:d5:9c:a8:
                    71:29:54:fb:12:4d:22:85:02:14:24:ae:f4:b6:a1:
                    b0:f0:86:af:71:27:7d:9d:bd:9a:52:51:74:3f:15:
                    70:0c:b9:4d:a7:5e:3d:58:76:43:4d:bd:d1:54:f2:
                    46:e6:2a:86:fb:82:a0:c5:7e:08:52:19:cc:c4:c7:
                    3c:5e:8d:4f:02:89:87:3f:a5:ab:29:26:8c:9e:82:
                    99:cb:88:2c:9d:8b:21:53:76:5c:2b:ed:6b:5d:e8:
                    59:ef:08:c0:e9:2b:65:72:66:e4:17:62:83:ea:5c:
                    4d:fa:79:3d:97:95:1b:37:af:06:55:7b:13:3d:28:
                    d8:35:7a:a7:6d:4d:6b:8e:b4:e1:35:e0:a2:3a:1a:
                    8c:76:27:38:01:24:b4:32:f9:c3:41:ca:22:cf:1a:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:94:02:F5:A2:1E:72:6B:1C:2B:50:EC:CC:70:79:67:7B:74:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ce3d75e-0065-3e93-af71-46fa1d51a020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:a8:49:66:21:61:5d:89:19:01:60:01:da:cb:96:2b:b4:
         89:38:a4:89:1f:c5:a2:7b:7b:c1:69:c5:25:d1:47:12:24:f1:
         74:6b:b0:7d:73:da:d7:e9:47:0a:ba:ed:5e:fa:2f:f4:9f:27:
         db:18:f2:9a:7b:0c:70:f1:84:8a:9a:fc:23:91:b4:36:45:bd:
         17:b0:bb:6f:22:65:c8:52:24:aa:f7:b6:27:f5:05:84:17:e5:
         e9:29:00:85:b0:ee:3f:60:7f:87:8a:73:c4:86:99:3c:0f:91:
         ad:b2:27:6a:78:e7:cf:95:40:8b:fa:f8:93:37:45:f0:90:e7:
         d2:67:31:3e:92:17:78:0a:dc:f2:5a:81:6c:95:7a:cc:45:14:
         32:55:9c:8f:61:9b:7f:10:6b:74:ab:79:cc:6b:1d:50:a1:99:
         0d:a7:5c:bc:e5:7d:22:59:90:5a:6a:f5:95:b4:4b:0c:0e:99:
         6c:1e:03:88:53:6e:64:8b:75:7e:3f:18:7a:31:fd:52:28:63:
         5a:69:c5:5c:8a:a4:32:c6:6a:e4:be:ab:89:2c:18:4d:a3:10:
         df:cb:c9:a7:7d:c4:6a:92:30:e5:c0:ec:d2:52:60:d3:f1:25:
         c5:ce:e5:b1:c7:ae:07:b3:2e:ec:6c:6a:d8:2c:9b:d6:5f:4f:
         15:b7:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:19:00 2025 by rpki-client