Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44dc319b-97c2-352f-a101-352ea6794944.roa
File:                     44dc319b-97c2-352f-a101-352ea6794944.roa (raw, json)
Hash identifier:          cuMJRV4WU8RFO43xGWj/V959n95kXX2pSQhfVmFIwCk=
Subject key identifier:   97:1A:16:85:67:B2:9E:A2:01:36:EC:B5:AD:91:F3:8E:9E:5B:BE:43
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0C77609C949BAE17D280CAAC
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44dc319b-97c2-352f-a101-352ea6794944.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.114.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:77:60:9c:94:9b:ae:17:d2:80:ca:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=4efe1cc4-e8a3-4db0-b8d3-f7a037f5ad33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:50:6d:3c:e9:49:66:4b:dc:87:e6:d9:36:
                    ca:7d:78:d5:87:cb:cd:5b:f3:a8:f8:b9:96:9c:eb:
                    ae:82:82:8f:bc:3a:88:91:d5:86:6d:07:bb:13:5c:
                    43:75:ff:bb:b0:fb:2f:0f:6b:67:41:df:26:7a:34:
                    6c:f0:cf:28:77:1a:08:9b:5e:94:b8:32:a3:9e:7a:
                    c2:65:53:0f:a2:3d:fa:a0:12:e7:17:87:61:ab:67:
                    20:54:df:6d:55:c0:dc:45:d9:f8:2f:59:44:32:a8:
                    1e:e5:8c:b2:7e:f5:72:37:d6:38:62:24:c4:d0:a7:
                    1b:dc:fe:93:75:aa:a3:ac:fa:03:02:d7:30:69:47:
                    e3:42:d5:d2:44:db:8e:2d:66:1a:c6:c9:6c:9b:3c:
                    f1:22:42:e7:fe:c0:d2:11:eb:52:d1:2c:1c:42:51:
                    26:f8:f5:15:af:96:b6:69:69:bd:f8:c9:5c:97:8c:
                    4b:38:8d:2f:0a:0c:89:d2:5f:50:54:aa:0f:1b:67:
                    b7:b8:3b:a0:47:bf:0d:df:fd:28:ed:2c:7d:d4:2e:
                    68:37:60:e2:39:9b:9f:de:7c:52:b6:5a:7b:84:c3:
                    1e:63:00:6d:f5:d7:c1:ef:09:8e:02:65:79:aa:28:
                    e1:c4:1e:d6:91:27:9c:91:6d:77:c2:97:fd:ac:43:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:16:85:67:B2:9E:A2:01:36:EC:B5:AD:91:F3:8E:9E:5B:BE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44dc319b-97c2-352f-a101-352ea6794944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.114.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:3c:c8:85:d7:70:9e:1e:c9:84:d8:79:f8:21:7c:ab:70:81:
         9e:ab:13:ad:72:d2:3e:f8:a5:9d:5b:bc:7d:b0:98:17:67:d8:
         ed:73:aa:e9:94:c2:67:07:7a:9b:74:37:9d:5b:0c:3d:be:9b:
         b1:f9:51:cb:ac:5f:d8:2f:fe:48:a4:6f:d7:9f:55:d5:ad:95:
         03:62:ab:85:5f:28:8b:ae:68:f7:44:d3:45:e2:e1:c6:82:7c:
         42:00:4b:c4:14:87:cf:0e:4d:47:63:bc:cf:5a:82:ef:f7:24:
         28:5f:61:d7:2f:61:ee:d9:8d:01:64:4c:8b:98:b2:19:42:59:
         56:4c:ed:86:cd:04:8b:c5:da:fb:75:db:cc:f4:a8:48:a6:2e:
         67:14:f8:2c:3c:33:76:a0:ab:4b:91:da:82:d8:36:1f:73:70:
         b9:11:e7:27:03:f1:5a:55:97:4a:8f:d7:be:b0:c4:8a:dd:e2:
         e1:9e:5a:23:99:86:1c:94:a7:2f:ff:79:69:99:41:1b:c6:7e:
         04:33:9d:0d:0a:f3:57:c2:4e:d4:5d:73:cc:66:28:d2:20:8e:
         64:c0:3c:e4:6e:e0:84:f4:69:0e:f1:b4:a2:24:dc:e1:eb:3e:
         ce:b7:c5:e2:3f:9e:21:5f:16:04:e1:63:5b:72:e4:0a:f8:a7:
         49:7c:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:15 2025 by rpki-client