Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/281dd018-6550-3ce1-b2a7-8c74b841dc62.roa
File:                     281dd018-6550-3ce1-b2a7-8c74b841dc62.roa (raw, json)
Hash identifier:          KHurAhGKk9yYvOCXBmsA8gkXt+txXO6jEDK2Ej3U6qM=
Subject key identifier:   8E:2D:4E:67:C3:A8:5B:A6:9B:AD:9C:9E:29:4B:11:1C:C7:14:54:BB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0CA4011654F47FF9F863CC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/281dd018-6550-3ce1-b2a7-8c74b841dc62.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.116.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:a4:01:16:54:f4:7f:f9:f8:63:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=97f9087d-366b-4ecf-94c0-03d46c655b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:f2:99:6f:bd:cf:22:bd:83:8e:bc:01:69:
                    48:ac:1a:a3:de:7e:c0:fb:5a:04:4f:6b:ad:21:ed:
                    7f:3b:d9:74:bc:e7:1e:6e:9e:91:f2:7b:c1:01:a3:
                    f2:d5:d7:d5:11:37:48:8f:69:30:a2:6c:4c:83:64:
                    c7:17:38:c3:9a:9b:8e:fe:07:a2:3b:61:bc:64:90:
                    f1:f5:32:88:a7:57:60:2a:d0:ae:18:fa:91:13:86:
                    6d:2d:00:62:c7:96:98:bf:ca:8f:ae:2f:4d:a4:4d:
                    fe:d1:c0:19:92:cb:57:a2:e0:c0:d2:7a:a9:6b:6a:
                    9f:6e:52:ea:21:7f:b9:8a:d1:45:b3:b2:e4:69:2c:
                    ed:8f:e0:05:15:42:e6:cd:3d:db:84:ad:32:77:f5:
                    0b:b4:3b:db:28:56:67:b9:22:2b:f1:9e:fa:24:e3:
                    90:08:b0:a5:22:af:3e:6d:6b:37:d6:6a:99:94:6c:
                    cf:3c:84:8c:f5:81:69:aa:9b:bb:36:67:3b:be:98:
                    6b:4b:f7:a4:b1:f5:1a:40:ea:3f:78:90:df:50:12:
                    71:49:c6:c2:68:a7:5d:7c:69:07:86:75:3e:c2:7b:
                    02:36:f6:0a:48:ba:24:c0:8a:38:bb:39:05:5c:ab:
                    9e:47:d1:60:21:28:b0:ac:76:74:50:a8:e1:37:3c:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2D:4E:67:C3:A8:5B:A6:9B:AD:9C:9E:29:4B:11:1C:C7:14:54:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/281dd018-6550-3ce1-b2a7-8c74b841dc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.116.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:91:e3:3b:6a:1b:b2:37:20:20:60:18:48:e0:34:7d:f8:
         11:fd:83:e6:77:0a:77:4f:bd:af:80:34:4d:c2:cf:79:96:d9:
         2c:87:28:63:ce:c6:99:cf:99:47:b5:33:bd:be:f4:1f:69:b1:
         7b:9d:83:15:00:99:34:36:2b:e6:25:5a:fd:3d:ce:c2:5f:1c:
         a4:dc:e2:03:04:f5:91:99:e9:04:2f:c7:d9:fd:9f:87:92:c3:
         60:ae:95:8a:30:41:7e:7e:d0:69:24:fb:af:c2:cf:63:a4:7f:
         bf:1c:86:b3:d3:ff:44:91:cb:82:86:67:18:84:31:4e:0d:b8:
         25:a5:63:f6:7c:c5:34:54:50:a2:3a:f9:75:68:06:ea:be:7e:
         de:66:25:b1:e5:e1:24:52:93:7a:7f:22:09:57:1c:73:7d:95:
         80:50:2a:e1:95:2b:17:c0:e5:3d:b8:8d:1f:b1:98:91:70:64:
         bd:ee:6d:85:31:19:dc:1a:76:9c:36:ce:2e:ad:b3:7d:ab:61:
         14:cf:a2:c4:7e:b1:3f:bf:9d:73:0a:82:6d:f0:d2:08:8f:7f:
         b8:a3:fe:f5:e9:c7:80:34:90:c6:4f:cf:45:98:9b:04:d3:83:
         0a:6b:0e:f6:4e:67:4a:c0:86:1c:36:61:d5:1a:e4:ee:4a:dc:
         03:0c:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:45 2025 by rpki-client