Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/45b24027-91e8-38b8-9639-3ba65dc9bb45.roa
File:                     45b24027-91e8-38b8-9639-3ba65dc9bb45.roa (raw, json)
Hash identifier:          K9enpxbyK4Ikdrztx4ScIhKhuPuQVcG5HWSohQIxE8c=
Subject key identifier:   98:DA:6A:F4:E7:B0:80:61:19:3C:93:F7:C7:5F:A2:F1:BB:46:EF:2B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840196EB06E078994765DEDD6E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/45b24027-91e8-38b8-9639-3ba65dc9bb45.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.146.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:6e:b0:6e:07:89:94:76:5d:ed:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=40115459-7935-4132-8a9c-5f9c0d503c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:88:23:d9:9d:9e:b1:3d:28:a5:ba:7d:5f:
                    0b:8d:b3:70:6a:db:3d:6d:f3:50:a4:2e:b5:87:6c:
                    60:a1:8e:d1:42:48:bb:ea:40:87:a2:3c:d3:85:18:
                    74:1e:c0:b7:04:f3:5f:d8:95:6e:b9:a2:5e:4a:8d:
                    fe:59:7e:b4:90:ae:57:ff:51:13:55:99:8e:52:53:
                    c5:fd:0c:3b:e4:46:76:15:77:73:49:5b:a8:2b:68:
                    e9:cd:4a:00:c1:52:66:8c:19:ae:fd:6d:e1:46:cc:
                    bc:8c:d1:37:11:75:ac:cb:dc:c7:d2:dc:d2:4f:e6:
                    22:65:ee:8e:00:21:5f:e7:af:6f:ee:60:3e:74:15:
                    ed:07:7b:01:0d:e2:0e:d5:92:a6:dd:b9:ba:da:fc:
                    55:78:b5:38:0e:d8:db:77:a5:49:c0:88:e9:c1:9a:
                    dc:b7:8d:1f:ef:c5:a7:fd:c9:be:d0:65:13:7e:5b:
                    fb:f6:d9:84:52:f5:05:68:f2:cb:ff:ff:9f:fd:2d:
                    c7:10:ad:8d:06:de:e2:38:72:8e:b2:1d:49:a6:70:
                    d0:ea:0a:02:77:fa:58:82:0d:2b:37:b7:85:5b:72:
                    38:22:17:5c:72:1a:c0:00:89:c4:30:ca:00:cf:cb:
                    1d:d3:7f:14:7f:0f:2d:3d:62:97:ee:15:3c:6a:63:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:6A:F4:E7:B0:80:61:19:3C:93:F7:C7:5F:A2:F1:BB:46:EF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/45b24027-91e8-38b8-9639-3ba65dc9bb45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.146.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:94:8f:ef:ba:dd:cf:7b:7d:af:48:4a:8b:01:bd:f1:08:a8:
         2f:36:8d:ad:7b:f0:28:52:9e:3b:a2:0d:b1:b1:38:e1:0a:c8:
         0f:d6:f2:19:af:8c:45:8c:a0:1b:0f:47:9e:7d:e6:23:2a:57:
         c5:8e:c4:d1:f7:da:10:0c:9a:4a:3c:8c:40:33:8f:bc:b0:9a:
         a1:c5:70:fb:04:b8:59:22:94:a8:c1:10:15:ae:95:89:bd:9d:
         34:93:b4:15:9d:f0:c7:ca:1b:9b:44:99:d4:0f:cb:dd:cd:55:
         c3:3f:fb:d1:76:c9:a6:13:91:30:0e:6c:ab:b8:5d:66:62:38:
         f4:9f:48:0f:64:dd:31:d9:51:63:2d:b1:fa:29:af:52:19:50:
         31:4a:a4:58:8a:a6:05:ee:45:f1:ca:00:d2:e9:92:03:5a:cb:
         d6:54:f4:94:5a:f6:b7:4e:29:65:e5:da:03:81:82:d0:32:95:
         78:fc:9b:69:a7:9f:8a:c5:f1:a6:69:d0:1b:be:41:db:3f:44:
         b8:9f:a7:b1:b1:3e:76:83:84:84:2d:10:12:7f:62:7c:0d:dc:
         8d:60:b7:50:f3:aa:f8:a4:c6:a0:d7:99:87:85:3e:a8:10:1b:
         34:72:75:da:8a:13:f8:7a:00:c7:96:bf:ef:49:0a:55:a0:15:
         21:2f:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:22 2025 by rpki-client