Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35155c13-98a7-3c9b-9c15-646fd149166b.roa
File:                     35155c13-98a7-3c9b-9c15-646fd149166b.roa (raw, json)
Hash identifier:          /MTJhLk6PIdf3P7x5fXBF3o9OcEt+f5zwjC7s0oc80o=
Subject key identifier:   AC:45:9B:5E:5B:C9:42:62:84:24:A7:EA:09:59:E3:F0:10:0D:60:3E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E709841EF31F26E5DEC5ACBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35155c13-98a7-3c9b-9c15-646fd149166b.roa
Signing time:             Sat 02 Jul 2022 12:00:00 +0000
ROA not before:           Sat 02 Jul 2022 12:00:00 +0000
ROA not after:            Sun 07 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.50.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:70:98:41:ef:31:f2:6e:5d:ec:5a:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  2 12:00:00 2022 GMT
            Not After : Aug  7 04:00:00 2022 GMT
        Subject: CN=87826178-bc66-45d2-a9fb-8063cb7c87b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:44:7b:4e:7f:e9:05:17:a7:20:70:41:58:
                    10:16:fe:fd:f9:ca:e9:b1:a0:57:24:a4:34:d3:f5:
                    b0:e8:33:ef:ef:c0:d0:73:c2:68:71:24:79:56:8c:
                    f6:de:9b:a1:9e:92:2b:f9:2e:89:d6:aa:11:46:3f:
                    64:35:ea:c0:d1:26:9c:ce:33:fd:7c:af:9b:7d:7e:
                    60:e0:19:0b:cd:da:bc:92:46:60:d4:8c:70:ba:b1:
                    2f:74:d5:27:f9:ec:af:b4:aa:23:ea:b9:af:dc:af:
                    40:bf:83:c3:36:91:2e:9f:7d:f4:46:ed:1d:6e:b3:
                    41:70:19:ed:a1:a5:84:9b:01:b2:f6:11:aa:c4:e5:
                    df:02:7f:fe:4a:f6:e4:7f:ad:22:58:5c:67:2f:05:
                    3a:ac:a6:70:e5:79:85:73:03:71:31:b7:8f:ea:78:
                    f2:ca:62:3d:d0:66:77:4b:65:1a:7c:4e:1e:8f:d0:
                    c0:41:78:71:fb:fd:d4:25:c4:83:1f:af:4a:4c:d9:
                    c4:58:f4:db:69:d5:8a:04:50:ad:a0:de:75:c7:64:
                    90:0e:b8:04:b9:e4:fe:37:f0:e3:52:38:27:f0:cd:
                    57:46:1e:99:57:1b:97:df:60:2c:3f:11:bf:6f:6a:
                    af:74:28:9c:bf:ba:38:10:4d:df:4b:23:33:2a:05:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:45:9B:5E:5B:C9:42:62:84:24:A7:EA:09:59:E3:F0:10:0D:60:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35155c13-98a7-3c9b-9c15-646fd149166b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:84:10:df:00:9a:ea:03:49:96:07:26:e5:2b:b8:38:6e:fb:
         5c:86:fa:6e:e4:91:ee:ea:a3:c6:82:38:3a:5f:8b:c6:57:4f:
         9f:2b:ee:a4:32:5a:92:0a:93:18:c6:62:c7:ce:27:1d:85:a6:
         eb:ef:71:d0:db:04:de:28:36:35:9d:38:95:ab:66:0c:7a:20:
         30:bd:9a:62:16:23:77:90:7b:13:59:48:a3:8d:a0:be:a4:09:
         67:23:3e:a4:dd:27:50:7a:03:15:5b:43:cd:d7:34:71:3b:aa:
         64:45:92:2c:17:f7:eb:3f:41:91:58:2e:28:e8:04:8e:88:f9:
         04:0d:b4:e6:d8:aa:13:b4:82:01:c4:6c:d9:36:fc:46:7c:61:
         7c:12:fb:1e:b3:7b:62:c1:73:f9:ca:8b:97:80:ca:ed:ca:81:
         12:97:81:36:0e:e6:80:1a:91:4c:4e:d1:53:13:1c:98:26:0c:
         42:12:5b:66:a4:83:8c:03:cf:05:d6:b9:1c:f2:bf:f8:f2:51:
         ef:93:00:a2:ca:31:8a:0e:ad:6b:fa:9f:39:c1:8e:37:4e:20:
         e8:41:73:8c:7f:72:89:83:e7:41:d2:18:1e:49:6e:37:b9:a1:
         38:b1:48:47:bc:98:5d:48:9d:7f:2e:a8:65:f5:04:11:e6:18:
         a0:95:f1:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5wmEHvMfJuXexay8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
ODc4MjYxNzgtYmM2Ni00NWQyLWE5ZmItODA2M2NiN2M4N2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqlEe05/6QUXpyBwQVgQFv79+crpsaBXJKQ0
0/Ww6DPv78DQc8JocSR5Voz23puhnpIr+S6J1qoRRj9kNerA0SaczjP9fK+bfX5g
4BkLzdq8kkZg1IxwurEvdNUn+eyvtKoj6rmv3K9Av4PDNpEun330Ru0dbrNBcBnt
oaWEmwGy9hGqxOXfAn/+Svbkf60iWFxnLwU6rKZw5XmFcwNxMbeP6njyymI90GZ3
S2UafE4ej9DAQXhx+/3UJcSDH69KTNnEWPTbadWKBFCtoN51x2SQDrgEueT+N/Dj
Ujgn8M1XRh6ZVxuX32AsPxG/b2qvdCicv7o4EE3fSyMzKgU6awIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKxFm15byUJihCSn6glZ4/AQDWA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzUxNTVjMTMtOThhNy0z
YzliLTljMTUtNjQ2ZmQxNDkxNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQ4QQ3wCa6gNJlgcm5Su4OG77XIb6buSR7uqjxoI4Ol+LxldPnyvupDJa
kgqTGMZix84nHYWm6+9x0NsE3ig2NZ04latmDHogML2aYhYjd5B7E1lIo42gvqQJ
ZyM+pN0nUHoDFVtDzdc0cTuqZEWSLBf36z9BkVguKOgEjoj5BA205tiqE7SCAcRs
2Tb8RnxhfBL7HrN7YsFz+cqLl4DK7cqBEpeBNg7mgBqRTE7RUxMcmCYMQhJbZqSD
jAPPBda5HPK/+PJR75MAosoxig6ta/qfOcGON04g6EFzjH9yiYPnQdIYHkluN7mh
OLFIR7yYXUidfy6oZfUEEeYYoJXxHA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:30 2025 by rpki-client