Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4be66004-c971-3c05-9d24-319da45e706c.roa
File:                     4be66004-c971-3c05-9d24-319da45e706c.roa (raw, json)
Hash identifier:          455+scEwtIqlQ0u0HwWeHOckNu4OvxNp/WPXvD7Flig=
Subject key identifier:   18:47:53:1D:5C:76:24:75:A2:DF:70:98:CC:4E:CB:CB:E0:D6:45:BC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0C0F6B40F8D1D7D059A0CA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4be66004-c971-3c05-9d24-319da45e706c.roa
Signing time:             Fri 26 Aug 2022 12:00:00 +0000
ROA not before:           Fri 26 Aug 2022 12:00:00 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.236.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:0f:6b:40:f8:d1:d7:d0:59:a0:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 26 12:00:00 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=aefc7174-a80b-471e-b4b7-ab1ae39ec32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:ae:9b:34:40:44:f1:eb:5b:a5:8f:29:96:
                    a2:d6:99:71:91:8c:17:40:de:b9:89:a4:fb:05:ab:
                    aa:bc:29:cf:3c:19:85:39:4f:25:1d:be:f8:ec:c8:
                    f7:b8:af:66:31:6e:e0:da:04:fc:b6:9f:10:7d:5e:
                    ed:6f:77:ec:e2:b6:19:13:b1:be:ef:70:b2:5c:6b:
                    77:2e:44:ee:38:48:2f:10:19:eb:22:1a:61:94:81:
                    c6:36:ef:83:8a:24:3f:35:d2:44:06:e5:73:ea:76:
                    f7:e0:ef:48:15:a5:72:c0:21:18:84:ab:10:d5:d4:
                    21:4f:35:ca:7c:a7:63:20:13:74:76:ab:f5:9d:1a:
                    d9:e9:c9:ec:66:dd:ad:0b:62:69:8a:c3:b1:e7:c9:
                    b2:d8:68:e9:ce:d0:3e:96:13:df:cc:5d:cf:99:d8:
                    37:e7:f5:20:f4:bb:9c:f1:44:91:22:99:6a:8a:d1:
                    67:ca:3a:7d:d9:80:1c:4d:f1:9a:63:b9:bb:f8:3f:
                    db:ce:b9:80:c2:93:49:80:7f:fd:84:f2:7d:36:9c:
                    06:b7:af:77:8d:9b:d2:76:4b:e7:27:4a:d9:f4:85:
                    11:f1:b3:d0:83:df:a5:ad:57:93:63:1d:f2:20:c9:
                    de:50:27:5b:84:26:e7:9e:0b:13:1b:69:f1:19:07:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:47:53:1D:5C:76:24:75:A2:DF:70:98:CC:4E:CB:CB:E0:D6:45:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4be66004-c971-3c05-9d24-319da45e706c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.236.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:35:fe:3b:7a:07:24:e9:2f:e2:d8:bf:3a:29:32:02:e2:
         a8:58:c9:dd:6b:62:3c:87:4e:df:c3:1c:5a:ca:ca:d3:28:5e:
         63:30:a9:fd:29:d4:85:cd:d4:d1:2b:91:46:8f:6a:19:30:28:
         70:44:c7:14:14:d2:ce:4a:4b:b7:a6:cc:24:97:de:89:5a:f8:
         79:26:4a:24:35:83:27:7e:57:3b:4e:e3:bd:3a:79:df:ea:12:
         e6:85:b6:eb:d1:3c:be:6c:ba:44:80:ec:9a:89:87:74:43:6c:
         65:f3:29:b7:23:d4:cc:8d:9b:fe:8d:23:5e:ad:21:a6:1a:90:
         03:16:d0:58:ad:7d:49:79:4b:93:91:ee:be:37:33:47:51:dc:
         eb:02:a3:33:a8:38:d1:35:e2:09:96:5c:74:8d:f5:6a:72:a3:
         49:ef:b3:2d:42:68:86:e7:d6:46:54:fa:79:79:e3:c6:5b:19:
         ba:db:44:b5:2b:91:74:88:69:cd:c5:5e:72:d4:19:38:b0:e1:
         91:26:0b:f9:31:c8:e9:31:bc:d7:c6:0d:4d:73:10:fb:d1:e7:
         a3:9d:d6:ac:3a:32:1f:a1:eb:62:9b:ae:6f:46:4d:95:bb:c5:
         76:db:4f:2a:20:cd:d6:8a:4d:20:3e:7d:1e:69:af:75:17:b2:
         80:e1:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:14 2025 by rpki-client