Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a9c8955-7e9a-3cc1-859a-4fcd2fcf658e.roa
File:                     4a9c8955-7e9a-3cc1-859a-4fcd2fcf658e.roa (raw, json)
Hash identifier:          EVi7b9lZwGiezWwc9aP48YNE/mJ3Vuu+A5ZmRxMIcXU=
Subject key identifier:   D8:F5:93:08:E5:43:9C:D5:5A:6F:6B:BB:CE:5E:29:2C:F7:F4:35:A4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F33EDD0AAFBAFB549F29FA7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a9c8955-7e9a-3cc1-859a-4fcd2fcf658e.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:33:ed:d0:aa:fb:af:b5:49:f2:9f:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=da8d9cf2-2c1d-4741-aefa-409827105374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:85:34:88:f8:9e:b8:73:70:69:62:18:d3:
                    5d:52:3f:b3:6a:90:71:48:35:c2:c6:ef:27:a3:11:
                    fd:ba:32:fb:db:12:82:25:36:ab:f8:0b:62:cc:05:
                    df:e8:c4:bf:16:f0:a3:a7:1c:46:d2:2a:28:a2:c5:
                    a8:17:81:59:0b:c3:67:a0:d2:f5:e0:34:ea:81:4b:
                    bc:be:19:04:7d:47:47:5d:64:5d:89:77:e8:19:9f:
                    6a:af:bd:f7:d8:0b:76:4d:09:46:2d:f6:61:7b:8e:
                    ff:79:94:d2:bb:59:d5:4d:53:e0:61:2a:22:94:d0:
                    ce:22:5e:3a:b3:1f:39:be:06:fe:86:03:81:99:9f:
                    b4:45:2f:e5:12:cb:b0:f4:1e:41:58:a9:67:7e:a1:
                    0e:5f:32:f6:37:52:94:3f:3b:06:05:aa:fb:87:a5:
                    29:13:1b:df:29:90:bc:ee:4c:3b:8e:ef:45:07:73:
                    e8:56:35:d7:bd:2a:8b:10:f2:ff:03:32:d5:6c:0d:
                    0c:f5:4f:17:81:28:2e:69:7c:0b:04:ae:c4:27:e4:
                    19:2b:05:18:2a:6f:df:91:60:42:8a:4d:5c:41:af:
                    04:46:e0:3c:07:29:cd:ed:5a:f1:86:f4:f4:67:68:
                    d9:8e:f8:e9:24:16:21:c0:ae:62:bf:91:68:77:90:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F5:93:08:E5:43:9C:D5:5A:6F:6B:BB:CE:5E:29:2C:F7:F4:35:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a9c8955-7e9a-3cc1-859a-4fcd2fcf658e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:90:56:37:61:b7:3e:04:59:f9:66:30:5d:0f:ad:19:81:a5:
         53:7b:24:a6:1b:f2:df:5c:08:2e:4d:d7:10:43:43:70:82:06:
         79:53:2e:07:c9:f7:17:5c:02:6a:df:d6:7e:27:98:ba:3f:94:
         03:0f:da:b4:bb:08:b7:08:7e:80:f7:52:b5:6a:6b:46:42:12:
         89:c7:76:cc:01:3e:0d:6e:8f:d6:4b:b5:ee:45:5b:d2:9a:83:
         7c:48:6d:71:91:1d:94:92:f0:40:49:46:d7:04:1f:6b:08:35:
         31:6c:9d:5d:10:bb:1e:18:4f:6d:55:2b:2b:bd:77:6c:9d:51:
         5f:96:c9:38:f2:d7:36:c2:a1:db:fc:a1:8e:37:18:3a:bd:ae:
         25:b1:21:ad:81:d3:a4:34:fa:50:46:b4:1b:ad:48:81:8b:1d:
         d3:bd:d5:dd:19:0c:30:66:09:21:9e:22:8a:26:82:b5:59:5e:
         38:44:82:a9:41:7b:6b:20:fb:ad:ce:2d:2a:e6:e8:ac:eb:05:
         7f:e0:a1:9a:cd:b0:85:a3:ab:37:fb:24:98:d6:f8:bc:be:19:
         f6:da:00:7e:ae:a7:71:d5:03:a4:b4:39:67:6d:26:39:fd:fe:
         58:6d:f8:d1:83:78:25:90:06:b6:53:bf:60:66:7a:88:4c:2c:
         03:94:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:10 2025 by rpki-client