Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46d34895-0785-37c4-9012-93924afcf3b5.roa
File:                     46d34895-0785-37c4-9012-93924afcf3b5.roa (raw, json)
Hash identifier:          +Bvod3TsUaxGGDZFErO17uuomwUa+RsIJNBZnsEsZLA=
Subject key identifier:   0B:AB:34:2A:5E:03:4B:B4:F0:69:19:3E:F4:22:27:F2:7B:11:20:EA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF61BA96D0DC38BC5FCD8C000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46d34895-0785-37c4-9012-93924afcf3b5.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.176.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:1b:a9:6d:0d:c3:8b:c5:fc:d8:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=f3b32989-efeb-4c88-a2fa-a3fe2d18bcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:c7:29:05:dc:c5:70:f4:c8:47:87:bd:22:
                    27:4d:67:43:35:36:00:60:52:e6:e9:7e:9f:c7:5f:
                    a3:47:87:d9:5c:b3:78:4b:ac:a9:3a:7c:0c:c2:81:
                    3b:b8:60:04:c7:04:6e:9c:be:75:7b:11:85:0f:fe:
                    ea:a7:cd:df:5d:d2:75:03:79:d2:5c:d9:65:0e:ee:
                    c6:c9:08:52:51:e6:96:9a:07:d9:78:06:85:76:82:
                    4c:70:51:f6:4b:a2:3d:22:98:ea:5a:fd:75:5b:26:
                    db:09:b3:55:75:80:42:af:2f:b5:4e:34:5d:7e:80:
                    c2:4a:56:dc:c5:00:96:a7:ea:82:2c:b0:e5:c7:67:
                    41:c7:54:20:64:f6:d6:0a:94:58:40:71:5f:48:df:
                    2d:9e:51:16:e5:76:72:46:f2:b8:91:b2:95:56:42:
                    2d:90:77:9a:6e:cd:dc:3f:e9:9c:0e:0b:4b:74:bb:
                    7d:df:f3:79:be:02:83:e3:d1:92:c1:59:c6:50:34:
                    2a:26:08:d7:6e:35:b7:09:b0:0f:47:f4:80:d6:f4:
                    66:87:02:90:dc:16:32:c4:f3:7f:d3:cb:de:52:14:
                    5e:81:96:97:22:10:91:75:1a:60:6d:3a:ea:d2:cc:
                    7c:a5:e3:2f:0d:57:06:a5:8a:5a:ed:5a:b9:2c:ed:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AB:34:2A:5E:03:4B:B4:F0:69:19:3E:F4:22:27:F2:7B:11:20:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46d34895-0785-37c4-9012-93924afcf3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.176.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:de:e8:f4:bf:da:18:b5:1b:ad:47:2f:92:f4:0f:1a:c8:c5:
         df:78:86:f7:7e:95:49:98:45:84:92:40:02:d1:36:41:17:2e:
         a7:2b:55:c1:52:99:38:57:4f:2c:39:5b:26:85:b8:b9:1a:61:
         6c:c1:12:f8:2c:bc:f6:3d:2a:05:6e:5b:2d:8a:b0:f5:27:00:
         e3:e6:ab:0c:59:9c:39:d1:67:b8:e0:22:5c:0d:ef:b4:40:98:
         ec:42:00:fe:a3:cf:a5:d8:e9:8e:8e:07:1c:1a:41:2b:de:0e:
         03:34:36:d6:f6:08:ab:17:80:82:3e:ad:d6:d6:00:52:f9:a2:
         96:e1:e0:74:9b:fc:82:eb:c7:c2:a3:c8:b8:f3:4b:d9:3b:03:
         cc:fc:0b:c1:d8:47:6c:ca:03:e7:6b:02:ac:37:46:84:cf:d2:
         60:8b:3b:65:91:4a:ea:bc:79:d6:b5:cc:fd:a1:62:9d:b3:d9:
         86:f7:3d:29:3c:34:ad:f8:9f:2d:8c:9f:f8:57:9d:4d:d5:97:
         df:e0:18:10:dc:85:24:b9:a1:5c:60:5c:a1:58:69:b0:40:16:
         3e:00:ec:9f:57:fa:10:5f:d4:b1:16:94:a6:ca:84:a8:a1:b2:
         6a:6e:fa:b4:89:6d:bd:46:d3:53:0f:6a:e7:3c:38:0c:44:ac:
         bd:52:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:49:58 2025 by rpki-client