Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c0599ad-55b5-35ca-ade4-6b715cd1d3ce.roa
File:                     2c0599ad-55b5-35ca-ade4-6b715cd1d3ce.roa (raw, json)
Hash identifier:          8KbxZj6bvu1Bob4DIcqysDD4DlLtUbLve/4U1oq/jwc=
Subject key identifier:   19:FC:F2:0C:E7:4F:66:5B:A4:04:B7:93:2E:1E:16:CC:70:E6:FE:BF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D59B6B9743B0D7B67285B2C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c0599ad-55b5-35ca-ade4-6b715cd1d3ce.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.191.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:b6:b9:74:3b:0d:7b:67:28:5b:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=21537b45-fd15-45c1-8537-8b232db3607f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:ae:a1:3d:74:e5:df:27:f3:d7:61:1b:14:
                    36:1f:fd:f1:71:e2:60:67:c3:9b:44:9d:88:e5:f6:
                    11:a9:68:bf:5d:cf:6c:69:26:ec:a7:d4:c1:38:af:
                    5d:f1:7c:eb:87:7d:75:63:0f:4e:1d:19:1a:18:20:
                    a8:b1:a0:ae:42:06:1b:d0:a7:37:07:34:a4:50:99:
                    05:bc:48:64:2a:26:30:7d:e8:4c:d8:27:93:0a:ab:
                    d0:b9:1d:e9:87:46:0d:36:29:b0:8c:71:d1:cd:17:
                    da:6f:1a:b7:3c:37:46:e5:a1:bd:12:9a:86:c7:1b:
                    f4:bc:81:50:60:1f:e5:07:1f:85:33:50:50:c4:71:
                    6b:f7:e3:a7:cf:79:43:84:ab:38:89:a7:8f:8c:83:
                    3a:70:ec:f1:a0:bf:f4:12:08:32:57:e8:90:6e:52:
                    b9:ac:f4:0e:4a:5a:55:c2:a3:d4:14:7a:b0:e8:95:
                    b0:f3:d1:6d:40:13:18:e0:03:a9:1a:2b:4c:0c:8d:
                    0f:6a:f3:91:51:03:40:39:52:98:48:84:c1:c3:a8:
                    7c:e8:7e:ce:98:2b:88:35:f0:49:49:bb:67:d7:b8:
                    48:bd:9f:1c:d9:38:2a:0b:07:08:ba:09:ec:38:91:
                    12:f1:f4:78:9c:10:b1:8e:26:7a:66:34:75:41:43:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FC:F2:0C:E7:4F:66:5B:A4:04:B7:93:2E:1E:16:CC:70:E6:FE:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c0599ad-55b5-35ca-ade4-6b715cd1d3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:c7:bf:0a:44:91:5d:45:97:40:5c:d2:88:a0:ee:61:9d:
         b1:58:3e:70:ea:e1:82:cf:50:72:6e:bc:38:6f:69:fb:3c:08:
         a6:f4:e0:24:f8:14:6f:9e:35:7a:73:43:42:cf:89:fa:3c:e0:
         b6:e6:9c:31:37:bf:38:70:bb:ab:65:53:94:1d:6b:77:ae:18:
         68:21:6a:f3:6f:48:70:f7:e6:e2:98:88:56:53:2c:da:20:6d:
         5c:fa:75:8b:d4:72:16:45:9a:fa:de:eb:6c:cc:d4:0d:83:02:
         6f:06:e0:23:2d:99:dc:50:fa:f4:f4:13:71:f8:0b:7d:1a:57:
         7a:fb:ec:08:4f:bd:fa:9d:b6:e7:73:fe:c9:c6:9b:2a:00:37:
         f9:a0:9b:ef:12:97:0c:0f:99:5d:70:23:7e:40:0e:ff:f5:fc:
         fe:cd:29:30:36:c4:28:85:07:e9:19:b8:4d:29:9e:f1:8e:d0:
         8f:76:03:52:c4:a0:92:33:39:3e:b6:d4:6d:91:48:cd:1e:df:
         1e:4a:ba:50:5b:df:58:a9:f0:17:48:32:37:cc:6a:5c:f1:e5:
         6d:1f:04:e5:2a:9b:f1:ba:34:de:27:57:af:7d:fb:05:ec:dd:
         9a:f9:73:72:8f:8a:69:bb:17:d7:fb:2a:72:88:cf:09:6c:e3:
         aa:79:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:29 2025 by rpki-client