Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/409f80a5-6495-3fac-bd30-1592f7df24d4.roa
File:                     409f80a5-6495-3fac-bd30-1592f7df24d4.roa (raw, json)
Hash identifier:          PVzBCunDekROAZJZSNml52c7+KG6hUeRSfnOZZ4TbTE=
Subject key identifier:   63:34:22:4E:C4:1F:8E:5F:45:81:11:85:91:8D:D5:53:A3:C4:98:88
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858401D9EEFD306F0DE0075646C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/409f80a5-6495-3fac-bd30-1592f7df24d4.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:9e:ef:d3:06:f0:de:00:75:64:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=8239f8a6-3249-49b4-bd0d-8bc9f3d9eaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:2a:e9:02:b2:d1:52:3f:bc:95:0e:dd:e0:
                    07:8d:22:d2:23:d8:cf:70:70:97:0f:ab:b2:e8:04:
                    7f:c4:8a:f1:53:72:e4:01:df:a3:ad:85:96:46:a2:
                    53:0b:79:77:ac:ed:9b:44:46:b1:ae:58:c0:71:50:
                    41:f8:e3:52:f3:b4:b1:f7:a4:5b:6b:c0:dd:fc:58:
                    3e:e4:83:58:b1:52:d2:82:a2:cb:b6:57:67:2f:29:
                    d8:44:57:b0:a8:59:84:6d:5e:5b:e4:4c:c1:a8:70:
                    51:b3:ef:86:b5:2f:d8:48:b2:34:c0:92:fd:7f:fa:
                    54:bc:6c:c7:be:02:d3:dc:af:4f:76:db:22:83:6e:
                    51:53:d0:96:b5:5a:8b:40:ea:8e:4a:7f:8a:41:41:
                    8f:04:af:f6:3a:90:42:b2:08:60:35:df:db:4b:2b:
                    f2:e9:30:83:fe:66:86:0c:2f:08:b2:67:71:fd:fa:
                    13:25:ad:bd:f3:f8:ba:f3:35:c3:fe:0c:dc:95:71:
                    3d:6d:95:26:a2:9a:93:03:cf:b4:d8:6b:0a:e1:ee:
                    83:54:5a:97:8d:19:97:9d:39:63:f4:2a:da:2f:85:
                    02:5d:d6:28:ea:a2:9c:5e:d9:86:2b:89:5a:22:cb:
                    ee:90:3d:78:f1:3c:b0:1d:39:f1:19:6f:db:f8:a9:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:22:4E:C4:1F:8E:5F:45:81:11:85:91:8D:D5:53:A3:C4:98:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/409f80a5-6495-3fac-bd30-1592f7df24d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:86:d9:ca:02:fe:fc:13:1d:fa:4d:00:90:3c:9e:40:6d:
         f6:88:e0:8d:32:01:82:2e:e5:10:76:7e:f0:27:b8:75:23:00:
         53:61:28:58:35:ae:5e:e1:ca:3c:9f:8c:29:d6:0c:e1:27:53:
         4a:14:a6:f7:89:da:a8:68:19:c0:bb:d5:dd:59:50:13:87:ad:
         83:f9:d7:f2:6f:6a:e4:ee:73:e1:0d:b0:d5:30:60:ab:51:8b:
         1a:72:c6:5d:c2:c5:55:70:84:fc:85:66:10:57:d5:ea:b3:cb:
         3c:16:a0:bf:08:43:0c:71:35:bf:1c:bb:56:b9:41:c7:b1:db:
         0d:53:26:e9:65:a4:ed:d2:de:db:af:72:52:7a:71:93:52:c4:
         bb:af:ae:d8:49:53:8b:5b:9a:fd:68:cc:19:13:5d:83:bf:07:
         3c:9f:3d:f5:6f:30:b5:da:9c:79:4d:ca:91:00:c3:2b:11:52:
         f9:81:16:b8:aa:d9:45:9c:88:99:f0:df:95:05:43:6d:65:2c:
         e8:46:3c:88:49:fd:91:5e:e4:9e:d3:a3:28:07:eb:6f:2a:ac:
         07:24:3c:ff:9a:d2:4b:4d:d1:5a:6c:a2:a5:7a:ca:23:57:c5:
         c3:79:d8:93:05:43:c8:08:64:fd:c0:c5:8b:f2:e2:db:60:1c:
         91:6d:df:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:08 2025 by rpki-client