Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49d786ac-b83e-341c-92dc-f88a50c781b4.roa
File:                     49d786ac-b83e-341c-92dc-f88a50c781b4.roa (raw, json)
Hash identifier:          fjHRJ17NyjcRIfGA+mtOfML9Ga5Yk1thZu87PXxSOUs=
Subject key identifier:   CB:71:48:EB:88:50:9B:F7:C0:D8:6B:FC:90:D9:51:7D:7F:56:C6:AD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0B322C1E70ABCDE16F1174A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49d786ac-b83e-341c-92dc-f88a50c781b4.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:32:2c:1e:70:ab:cd:e1:6f:11:74:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=4d00f990-e54e-4471-9a87-484785cb5aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:2f:36:31:19:3a:85:7c:76:41:38:70:e6:
                    75:68:0d:39:bd:36:a7:d3:f1:b7:4a:2e:d1:ab:56:
                    b0:0b:2b:19:18:80:59:b9:be:18:48:bd:ae:35:dc:
                    bb:28:24:7d:e4:09:a4:42:47:c2:4a:aa:7d:72:54:
                    cd:58:74:8e:e9:a7:76:4d:e9:fb:07:e9:17:bf:6b:
                    cf:45:20:27:81:d5:c0:3b:29:14:69:fe:99:bd:e7:
                    48:b0:de:0d:71:e7:9b:75:3c:56:47:c9:bf:3f:59:
                    36:a8:f4:ab:e7:0d:ac:98:8b:40:e1:63:bb:66:b4:
                    5d:de:2e:f2:13:ce:ee:ec:4e:89:89:69:ea:6c:e4:
                    8e:d1:f1:fc:ce:72:aa:c6:47:18:ac:ec:14:ab:e6:
                    3f:1d:19:e0:d6:1b:2e:d2:c2:94:40:bd:b7:94:1c:
                    d7:9b:ee:34:9e:03:a9:b5:07:2e:b0:8b:9d:7a:07:
                    6a:d6:54:2c:72:29:4a:78:cd:60:4d:60:21:bd:71:
                    4f:fa:03:32:83:c1:0e:57:2c:5a:b1:58:5d:18:c5:
                    ae:66:c3:94:8e:c4:bf:de:ca:9f:f4:20:c3:bf:9b:
                    b0:04:98:e6:42:5b:52:55:17:62:7c:f5:e3:6f:f2:
                    31:aa:b9:c0:d7:f4:84:e6:98:d8:86:7b:84:f3:b7:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:48:EB:88:50:9B:F7:C0:D8:6B:FC:90:D9:51:7D:7F:56:C6:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49d786ac-b83e-341c-92dc-f88a50c781b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:ab:05:09:4b:76:b1:82:b2:be:72:31:22:cd:ee:2a:ab:
         d1:53:7c:90:c7:ff:8f:45:98:80:9d:54:20:4c:77:d9:00:df:
         c5:6a:66:d1:a8:0b:7f:e6:de:68:62:66:29:3a:f9:87:85:16:
         36:4f:c1:8e:e1:9a:bd:98:41:ec:37:bb:67:52:14:2f:02:07:
         2d:c8:7b:6f:e3:90:09:b3:a4:ad:59:2f:30:2e:e8:a4:73:0e:
         55:5b:bd:02:f1:ac:0e:ca:b3:5a:1f:6c:05:d2:8e:72:5c:a0:
         30:ce:a9:d1:fa:57:5f:95:11:cc:64:d0:f7:ea:1a:3a:dc:d3:
         93:09:71:17:4a:a6:f8:69:26:f4:98:67:b1:8a:7c:0b:50:09:
         9e:38:94:e5:81:63:84:34:5d:80:84:68:7e:56:9e:79:cf:37:
         70:50:ba:a6:6d:09:e7:9d:61:2a:84:5b:bc:36:e4:c5:82:69:
         53:27:d4:b7:99:14:81:cc:93:16:f2:9c:6a:7f:cf:06:a2:7a:
         b7:b2:27:3d:d2:a4:24:44:b6:52:41:7b:eb:40:a2:a3:e0:5a:
         ad:ad:25:ce:a4:86:41:c0:47:e0:9d:21:53:2b:39:8f:e6:99:
         ad:58:3d:34:b4:c6:8c:aa:4f:03:f8:62:2f:46:33:26:66:d8:
         3f:a8:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:36:36 2025 by rpki-client