Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ea2559c-4b1b-34de-a9aa-a48cfdb02852.roa
File:                     1ea2559c-4b1b-34de-a9aa-a48cfdb02852.roa (raw, json)
Hash identifier:          pPtjIGZ97oRKNxXjA1/WCpUCHIQYrX54/7+rnxQffPs=
Subject key identifier:   C6:BD:29:5F:EB:A5:22:D7:A6:F9:5D:81:1D:EB:F5:E5:04:15:85:5F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E1CEDF49369258948D0D3D100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ea2559c-4b1b-34de-a9aa-a48cfdb02852.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.36.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1c:ed:f4:93:69:25:89:48:d0:d3:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=b1c3628a-5cb1-4e17-bc36-6afd058fedf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:f5:2c:71:58:8d:b9:a6:b7:28:e3:1c:60:
                    d0:fc:e5:12:dc:1c:28:c8:ee:0d:ac:ce:d7:e2:7f:
                    dd:ac:30:3f:11:6d:fb:eb:9d:9d:bf:43:8c:4f:f1:
                    66:8a:08:ac:ff:91:4f:eb:82:29:b7:26:1e:ca:a9:
                    f0:72:e0:bf:c6:6d:1c:93:5c:78:1a:9d:b8:57:d5:
                    b2:7f:2f:ff:89:38:fd:e4:f3:19:26:4f:c7:43:c1:
                    8c:1b:d9:d3:06:f6:63:70:08:00:b6:95:bb:b1:58:
                    7a:f7:db:3f:6d:d1:a7:4e:35:6b:54:b3:13:15:1f:
                    26:9b:61:2f:9a:ec:f8:01:8b:d6:62:47:71:a6:cf:
                    d9:7f:3c:04:17:22:60:51:c1:d0:ff:5b:0e:61:0c:
                    93:ea:07:d8:2e:91:8c:8c:1f:5a:20:89:76:48:ae:
                    bc:04:e8:d6:03:27:4a:01:b3:ef:1f:0a:6b:30:be:
                    86:0f:6f:04:e1:6a:38:87:96:22:95:97:60:31:99:
                    b1:9d:0c:26:32:2d:22:df:cf:91:42:b2:d1:49:46:
                    02:aa:d9:43:8e:1b:84:7c:f8:a3:2e:97:fb:ec:c3:
                    eb:31:34:47:fa:19:76:d3:75:ef:dd:cb:e5:6b:10:
                    69:60:fd:64:60:71:d9:9f:d9:9f:31:64:ea:e2:f2:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:29:5F:EB:A5:22:D7:A6:F9:5D:81:1D:EB:F5:E5:04:15:85:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1ea2559c-4b1b-34de-a9aa-a48cfdb02852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.36.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:64:7f:62:53:96:e9:f0:2a:fd:44:01:19:25:d8:7e:fb:fd:
         80:93:7c:94:1b:10:21:f6:3d:1f:9c:37:c0:39:90:12:cc:34:
         99:f6:a8:bb:31:c9:16:48:3d:13:ad:e5:35:f3:17:b9:18:bc:
         57:d0:e9:8f:52:f2:af:ba:86:11:b4:c3:36:57:80:05:b1:7a:
         21:8b:a0:fb:71:49:db:b1:08:b7:39:99:ae:26:8b:f9:83:d7:
         93:fc:54:77:b9:8d:a3:c1:7c:e7:5f:89:8e:8f:51:c9:a9:5c:
         76:2a:f0:f1:80:1d:8a:ba:28:6b:fe:7a:f1:41:30:8e:7e:ce:
         c5:63:d6:23:25:8e:9b:cf:60:8d:e8:05:1d:58:76:43:e5:6c:
         a5:53:37:88:fc:94:b8:27:ce:00:42:7c:22:06:b8:21:04:49:
         f7:b3:d4:42:0a:4b:51:8f:2f:f1:04:b0:72:9f:08:35:46:e6:
         8f:3f:78:1a:52:31:fb:bf:10:21:31:62:8f:31:e1:6a:10:28:
         61:4e:d6:11:4f:50:99:c7:48:74:00:bb:10:7d:1b:3a:ff:79:
         18:7e:f8:cd:99:4b:b9:00:33:b9:9e:7c:ae:8e:29:9b:99:ad:
         99:3c:d0:15:2c:7b:45:c6:8c:11:24:6c:ff:52:cc:69:22:b6:
         15:73:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:20 2025 by rpki-client