Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e4f6108-30ea-358b-875a-7df81036af1a.roa
File:                     1e4f6108-30ea-358b-875a-7df81036af1a.roa (raw, json)
Hash identifier:          4WOXI2drNpc1nVNCVYkjPmiWHTrJZA8oz68BcCGPurY=
Subject key identifier:   DB:56:8B:A6:F4:02:02:78:13:D3:69:03:B5:94:8F:AC:E6:8C:86:94
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C96077BD0EA9E3CDE402403F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e4f6108-30ea-358b-875a-7df81036af1a.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.132.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:07:7b:d0:ea:9e:3c:de:40:24:03:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=b3283bff-d37b-4578-838e-81517cf881d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:2c:f4:93:53:a3:6b:d8:66:d9:8a:c5:0c:
                    ca:85:7c:44:94:17:8a:53:3e:01:5f:24:64:18:0c:
                    8e:3c:c1:0a:57:11:01:ba:66:c0:06:bb:3a:2d:15:
                    16:de:79:13:d1:d8:0e:30:a5:e1:6f:73:7b:61:78:
                    9b:08:a8:45:91:68:32:3f:1b:1d:d7:1a:43:f5:fc:
                    5e:de:f4:2c:c2:1a:b5:8e:f6:d5:30:a4:76:8a:1d:
                    29:63:88:c0:df:69:27:d9:24:9a:4c:d5:f0:2d:d2:
                    67:cc:5b:c7:0a:78:61:b2:6f:3e:95:93:4c:d0:4c:
                    9d:22:72:6d:d2:17:98:f7:b9:29:a6:12:6c:41:9c:
                    d5:5f:72:64:eb:82:41:55:83:bf:05:f5:a0:da:cb:
                    76:20:71:18:fc:02:26:cc:8e:15:33:be:e3:0e:0c:
                    96:57:03:7e:70:50:b5:76:5d:4e:db:d7:b6:57:8c:
                    5b:c0:a9:57:83:dd:df:c4:15:49:60:a3:8a:d7:df:
                    8c:09:10:2c:f0:79:9e:6c:86:5b:b3:86:43:d0:cb:
                    02:27:99:fc:25:90:02:c1:bb:91:2a:18:6e:61:3d:
                    c5:6a:8c:14:54:f4:03:d6:5e:02:58:77:61:35:a2:
                    15:11:b6:59:06:7a:ad:a9:f7:68:cd:50:f5:64:41:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:56:8B:A6:F4:02:02:78:13:D3:69:03:B5:94:8F:AC:E6:8C:86:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e4f6108-30ea-358b-875a-7df81036af1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.132.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:89:38:e8:ea:a6:b7:80:d5:78:95:64:aa:98:d1:53:74:
         6d:ca:3e:69:e9:ae:8e:e0:1e:3d:87:d0:df:ec:d9:5e:46:4b:
         8e:c8:e8:b5:54:e0:19:c6:b1:15:fe:c2:95:8d:ac:18:f6:dd:
         0e:8e:91:5d:2f:23:2c:ed:25:bd:c1:6f:10:07:62:60:10:e0:
         8c:88:59:29:63:cd:23:99:b5:1d:49:65:b3:71:1d:7a:77:9d:
         08:a1:c5:3c:f5:54:36:58:e7:60:91:cb:cf:c4:b4:52:61:c9:
         cf:cd:52:66:12:50:87:39:83:0c:7e:f3:a4:7e:4f:96:05:4d:
         13:c8:ff:c7:23:ec:c7:8a:ff:81:af:ce:57:ed:f1:20:95:a7:
         56:a9:3e:49:e0:6d:fb:c1:8f:c5:f2:9f:9c:9a:30:64:01:a9:
         9c:3e:7b:af:8f:72:ca:a3:a2:2f:f4:24:eb:97:46:6d:73:3d:
         c9:9d:9b:86:4a:57:a9:cd:80:15:d3:f7:23:c8:8c:22:61:f4:
         b1:12:9b:e3:c3:ed:26:d0:e7:24:52:55:f0:6d:fa:46:c0:b7:
         01:8c:27:a1:73:85:07:89:33:b7:a6:84:fe:f5:24:7f:5a:f7:
         26:88:54:f3:d2:75:54:fe:5f:77:1f:dc:80:87:3d:fd:c0:63:
         76:d9:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:31 2025 by rpki-client