Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fd3ff16-dbec-3f52-9062-bca73f88d469.roa
File:                     4fd3ff16-dbec-3f52-9062-bca73f88d469.roa (raw, json)
Hash identifier:          Ts9mCotApEnx01uF/f8UrtiTLdhw1qpW1X4ExoIu3ts=
Subject key identifier:   4A:E0:63:FF:61:05:AC:85:CF:30:BF:C4:2E:DA:48:01:D0:4D:B4:9B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0CC1DF639BE01A416C71B360
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fd3ff16-dbec-3f52-9062-bca73f88d469.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.92.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:c1:df:63:9b:e0:1a:41:6c:71:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=06baec32-2db7-4b4b-a47e-74b77241c1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:59:fc:ca:cb:cd:b4:88:7a:0b:05:41:65:
                    34:44:89:6f:5d:38:91:37:ef:b7:24:1d:ce:1e:d4:
                    c3:09:09:36:e9:6e:3d:fd:79:f8:65:29:1e:36:8f:
                    ca:9f:8a:3f:d6:2b:c3:1b:2a:a3:f5:21:f8:6e:fe:
                    c0:9f:57:e5:4c:4d:86:e4:f2:9b:1e:74:96:ba:72:
                    7d:30:a5:34:51:55:65:1d:1a:9a:60:81:e8:1c:59:
                    19:40:28:da:20:a3:76:73:7a:43:ee:2a:8c:2e:ce:
                    30:f7:27:ab:0e:e5:e2:ee:bf:f5:67:84:51:d2:0e:
                    77:00:d1:84:07:3d:2e:df:be:05:13:34:43:8e:b2:
                    9b:c5:8e:2e:f6:d0:d7:31:87:3e:ec:62:4d:4b:6c:
                    a6:eb:f5:90:10:2b:24:be:90:db:a3:f5:53:8c:33:
                    8e:cd:5a:5e:cf:2a:19:ff:99:4e:42:0b:df:87:13:
                    e7:89:5b:7c:08:64:b3:b0:b2:85:aa:43:42:f7:04:
                    38:c7:7c:59:0d:be:07:e3:43:5b:5f:a0:51:a1:63:
                    e1:b4:07:c6:46:0f:d1:ca:5d:4c:73:73:8d:a7:36:
                    e3:2d:13:28:d3:84:1e:74:55:9c:93:c0:58:cb:b2:
                    c2:ce:c5:9c:d7:d5:58:d4:bf:9d:45:fa:34:af:75:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:63:FF:61:05:AC:85:CF:30:BF:C4:2E:DA:48:01:D0:4D:B4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fd3ff16-dbec-3f52-9062-bca73f88d469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:27:a3:7e:f2:8d:fe:83:e9:f6:d0:47:ed:08:59:57:88:b0:
         ed:9d:ea:1d:ca:b0:64:c6:48:62:90:6e:79:a5:37:7a:f4:81:
         a3:a3:ec:b9:65:aa:a4:21:30:40:c1:df:60:63:1e:c6:80:08:
         24:a6:ae:f7:a5:e5:2a:67:2b:2c:52:dc:58:ee:e1:10:71:9c:
         40:d8:d7:63:ce:cd:6c:05:93:b5:ec:1d:08:77:39:fb:6d:0e:
         39:e2:d9:e9:9f:6e:cf:b8:ed:f0:9c:c3:fc:9a:bb:10:6c:36:
         75:62:d1:e4:2a:93:a0:64:19:5c:7b:d5:71:21:5e:18:42:98:
         a3:75:29:33:9b:af:65:eb:01:37:7e:5d:73:fe:e4:33:0e:4f:
         95:75:7e:7c:84:17:71:d3:03:fa:c0:03:17:ed:63:ad:1d:b3:
         8f:79:9f:ac:e1:4e:e1:e3:fb:32:7c:ad:d4:d9:0a:23:48:b9:
         60:0e:99:2f:9c:3a:53:e4:a6:2f:ec:4d:6d:88:be:68:e0:b4:
         33:1d:07:2a:c5:0a:a8:a3:2c:fc:71:d4:87:97:7b:2b:1f:2b:
         46:50:94:81:bb:86:71:a7:9c:a5:63:7a:a0:76:1a:60:4f:85:
         30:1e:cc:4c:74:9b:90:ad:e6:e0:1b:ae:5a:a2:5a:8e:7d:a1:
         b0:1e:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:58 2025 by rpki-client