Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/393b9265-32f8-3430-9911-731aef1f2572.roa
File:                     393b9265-32f8-3430-9911-731aef1f2572.roa (raw, json)
Hash identifier:          2aX4E68MNvM2gQMf1yMN+s0TC0xRUmdivoa4xJLoBGo=
Subject key identifier:   AB:3C:24:AB:5D:9D:85:93:8D:2D:F2:5F:0C:8F:9F:CA:B0:7C:3F:95
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F34043436B239CF47C427C568
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/393b9265-32f8-3430-9911-731aef1f2572.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.80.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:34:04:34:36:b2:39:cf:47:c4:27:c5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=b4751aef-6fa7-4e45-8892-58b25689ea72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9b:53:fe:e7:b6:7f:a8:0b:7a:69:f4:26:81:
                    75:48:57:87:14:b5:a2:6a:bd:b9:4e:5b:b1:41:c7:
                    df:8d:89:a0:c4:74:42:66:d9:e3:af:55:cd:f0:17:
                    f1:c5:05:38:e1:59:7f:5c:bc:b7:03:d4:b0:08:67:
                    cb:9c:0b:b9:27:6b:40:94:93:f1:d5:7d:43:36:54:
                    d5:16:4b:ee:06:75:80:d5:06:32:b8:15:53:27:f1:
                    7b:f3:c0:cb:3e:a0:b2:bb:14:f3:84:e8:46:5d:fa:
                    12:c0:e3:58:c5:f5:1e:b6:0b:ae:4e:3e:ad:94:b7:
                    81:b0:bd:73:16:2a:36:e7:f0:03:95:ee:a3:92:62:
                    49:90:80:5d:20:01:03:8c:b9:be:6d:0f:eb:9e:bd:
                    96:34:03:f9:be:1c:f9:c8:e0:71:6d:7b:3e:1f:0b:
                    fa:89:6c:7e:88:de:96:ea:14:2c:44:db:e8:30:dd:
                    49:0c:cb:70:5e:94:f0:f1:dc:9b:32:2b:18:13:e4:
                    e9:d3:ff:e6:c2:11:7a:21:00:80:24:cc:52:64:60:
                    d6:d8:f7:1b:8a:22:ba:3d:7e:f7:bc:19:9f:9d:73:
                    21:a9:cd:03:6a:1a:78:68:1e:c2:8f:32:a5:61:16:
                    ff:a1:96:4c:d2:d3:bb:ef:e8:bf:e0:e8:44:cb:00:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:24:AB:5D:9D:85:93:8D:2D:F2:5F:0C:8F:9F:CA:B0:7C:3F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/393b9265-32f8-3430-9911-731aef1f2572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.80.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:a9:71:3e:b1:57:00:0c:c3:07:da:91:85:bb:e3:78:ba:
         f2:4f:d6:e8:c9:a2:42:c2:6d:87:3c:8c:80:1d:4d:60:8c:27:
         c6:07:9f:73:42:33:87:ba:59:1c:8d:7c:8d:3e:a0:7f:25:c6:
         66:19:45:47:b1:81:05:0a:86:50:f4:98:f0:3d:cf:06:f2:02:
         d4:83:04:30:0a:00:ff:da:15:38:b4:43:09:59:32:ea:d1:8f:
         78:aa:a0:b1:1a:30:7f:9b:50:cc:e7:d3:7e:65:44:2e:d1:cb:
         57:2e:04:02:cf:9b:6b:4e:21:82:89:95:d3:7f:e4:4d:d0:24:
         4a:0d:72:f1:4c:44:96:93:8c:92:d9:6d:99:9d:bb:ee:28:bb:
         fa:02:79:ab:6c:ab:a0:a8:9f:6b:dc:66:35:d6:fa:fa:86:f5:
         41:67:86:e6:3c:cc:a1:27:36:3d:41:ad:d3:1b:07:e5:c5:cf:
         df:6a:b2:1f:67:cd:27:fd:96:25:7f:fa:f0:c1:a2:b8:cd:bb:
         fe:1c:36:e1:17:fd:2f:a6:85:18:c1:1f:1a:fb:ea:86:66:33:
         7f:97:4e:0b:59:61:12:e3:ba:21:58:e9:21:fd:cd:bc:c0:b3:
         50:dc:5c:60:48:47:53:50:bd:85:cc:1f:89:1c:8c:8a:9c:e3:
         4a:a0:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:22:12 2025 by rpki-client