Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a4f5c5b-76a4-36ee-a172-e1b80cec6c9c.roa
File:                     4a4f5c5b-76a4-36ee-a172-e1b80cec6c9c.roa (raw, json)
Hash identifier:          vo3toRB/ZWIF5h/h3zP4jk8HaPVLgLZfTG7wcdmeJZ8=
Subject key identifier:   93:50:E5:38:B7:78:FC:D1:66:44:7E:44:7D:6A:B9:B5:38:DD:ED:D0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F33A34BC54BB4F7965DBC37C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a4f5c5b-76a4-36ee-a172-e1b80cec6c9c.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.110.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:33:a3:4b:c5:4b:b4:f7:96:5d:bc:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=4fc4c48f-a777-4537-9891-1d7d3f0bd56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:0a:a0:f7:45:f2:97:59:80:31:cf:b0:3c:
                    96:d7:1d:68:39:d0:aa:d5:c5:d4:03:98:c2:91:f0:
                    2f:c8:20:57:85:4e:f6:10:c2:04:f2:47:19:b6:22:
                    03:3d:f1:c6:81:c0:42:a1:7b:47:54:ff:8e:13:aa:
                    81:df:28:f9:b9:7b:07:f9:27:8e:36:6b:e8:24:46:
                    13:35:b7:ff:d9:c2:fa:ec:04:3c:8c:20:f3:75:70:
                    53:62:2e:a2:e8:5e:c7:1e:0f:26:13:c8:7d:a5:9f:
                    25:22:a7:38:20:82:38:42:94:ad:ca:e6:af:9c:33:
                    cc:b5:36:e6:09:f1:1b:2c:36:8c:c3:e8:d4:98:1f:
                    79:06:01:66:71:d7:22:f9:8a:a4:06:3e:d8:4a:c6:
                    6a:2f:f7:ec:10:0d:8b:35:ec:ba:32:7e:ad:9e:c9:
                    b6:ee:73:08:3c:69:60:8e:de:f8:a9:8a:1c:90:4e:
                    f2:60:77:56:b9:3e:73:71:78:5e:ec:bf:1f:1b:fa:
                    9c:6a:ba:d4:82:cf:6e:84:59:32:e2:6e:7f:3c:53:
                    ab:29:3f:c2:69:c5:44:f4:1b:cd:e7:a1:71:8b:0c:
                    2f:63:ae:c3:aa:64:87:78:39:b7:5f:1f:28:39:1b:
                    f6:29:21:f9:c6:93:95:1a:fd:51:e7:4a:ac:d0:22:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:50:E5:38:B7:78:FC:D1:66:44:7E:44:7D:6A:B9:B5:38:DD:ED:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a4f5c5b-76a4-36ee-a172-e1b80cec6c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:05:15:e7:67:0b:65:7b:4a:6f:1e:f7:a6:6b:1d:b8:31:
         ea:04:70:44:53:eb:58:d0:e0:b6:75:22:37:95:40:bd:65:c3:
         60:a4:e4:43:72:c2:b3:c8:24:0d:56:68:b8:f4:e0:4d:f0:5e:
         5b:08:a7:4e:97:6d:ea:4e:ec:12:b6:17:95:19:2e:97:8f:a6:
         f9:18:5f:3b:29:58:36:4d:ba:05:ad:e3:9d:d9:40:75:be:3f:
         15:52:0e:64:a5:05:84:47:04:8a:e4:58:af:09:f5:f6:f5:1b:
         4e:51:21:bd:87:35:14:eb:87:87:c7:9b:68:4e:55:8e:de:b7:
         e3:85:04:0f:35:e5:8a:a6:21:bc:89:81:47:bb:09:16:56:b1:
         f0:49:af:0e:02:9e:07:f0:cf:77:43:d3:fa:9d:05:69:2b:ad:
         31:db:19:81:94:a4:81:a1:18:39:48:ee:0b:9e:4b:c4:f7:5a:
         8d:5e:87:81:8d:a3:7c:24:8b:ee:a2:6c:68:78:eb:c8:5a:a3:
         9e:37:2b:38:fd:9f:18:1f:2e:99:d8:21:bf:e5:00:a3:b7:cc:
         e1:65:bd:16:7d:aa:5a:e0:12:2d:d8:74:e6:e0:69:dc:30:48:
         9e:33:d8:55:38:47:e4:fa:c9:f3:9d:18:58:9e:f0:3d:70:c8:
         a6:40:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:50 2025 by rpki-client