Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51ad8b2c-cbc4-38e8-ad3a-671f42568626.roa
File:                     51ad8b2c-cbc4-38e8-ad3a-671f42568626.roa (raw, json)
Hash identifier:          LG7m+Uo3IWmPJY6ighQSR4RSLrqA4kn3mKDJ4OddxW8=
Subject key identifier:   09:BA:90:51:F9:DA:39:B4:0E:73:8F:C3:85:80:58:F8:D6:3E:6D:E9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF7E747A1FAF66BA16CEDC440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51ad8b2c-cbc4-38e8-ad3a-671f42568626.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sun 25 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.103.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f7:e7:47:a1:fa:f6:6b:a1:6c:ed:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Dec 25 05:00:00 2022 GMT
        Subject: CN=a494aa7b-a182-4bda-8f56-d51ff849012c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:55:fe:81:b9:06:5e:1c:71:00:09:cd:b4:
                    6d:82:a1:6d:d2:9c:db:67:76:88:1c:53:3e:fb:e0:
                    95:23:ab:c0:25:93:bc:bc:a7:93:b7:3b:56:b4:b8:
                    55:75:bb:dd:f6:92:c1:f6:83:f6:fa:1e:8a:d6:14:
                    a2:18:de:06:9f:c2:43:cf:15:a7:dd:55:25:e0:54:
                    17:62:df:a5:d9:ed:5b:8c:cb:9c:23:2c:91:46:52:
                    d3:dc:5c:d8:72:25:de:9b:60:68:e8:0d:50:b6:64:
                    1e:ea:2a:49:fa:36:0b:bf:11:07:00:70:f2:ca:53:
                    d2:80:34:d3:68:da:1d:16:20:68:d5:c3:fb:9f:61:
                    3a:4d:d3:11:19:86:5f:e4:2d:a1:3d:bc:c9:6b:8f:
                    29:e2:49:26:f9:40:dc:0b:74:40:61:13:14:10:08:
                    29:8e:b4:40:0b:b2:41:32:ed:e1:0b:c6:bf:11:89:
                    06:eb:ba:a4:8a:72:86:7f:04:0d:b8:57:e1:cc:4c:
                    3e:9f:cf:df:42:99:d1:99:50:ae:d8:b6:b2:75:ee:
                    b3:7e:a5:f3:a0:c6:0b:d8:52:49:54:f0:08:af:ec:
                    28:30:87:78:be:24:e4:6a:64:6f:1c:a5:db:95:14:
                    2d:bc:40:c2:5c:68:9f:45:e7:41:6a:05:6a:db:9e:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:90:51:F9:DA:39:B4:0E:73:8F:C3:85:80:58:F8:D6:3E:6D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/51ad8b2c-cbc4-38e8-ad3a-671f42568626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.103.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:59:ab:e4:a7:d4:68:c7:c5:8c:84:2a:f6:21:73:ac:66:
         05:0e:e4:ac:e2:a1:5d:ae:e9:a4:08:28:4f:5a:79:e5:72:4f:
         65:4e:b6:8d:7a:c8:42:ee:46:17:8f:dc:a7:20:ee:0b:4c:84:
         d0:ae:b1:17:53:66:4d:0f:80:83:cc:96:b7:9e:c8:54:90:b4:
         03:d8:6f:cf:2a:e4:25:36:7b:41:81:64:4d:df:9f:1b:f5:d9:
         ee:6e:db:4c:8c:59:9c:58:dc:81:fa:5a:a8:0b:55:6a:33:2a:
         41:9f:6d:3e:3b:7b:f0:3a:6b:1d:37:12:f0:8d:d5:6a:cf:1f:
         8a:bc:51:e3:62:ba:7b:31:3d:31:e5:a4:5f:fa:98:b1:f8:08:
         26:93:35:5f:04:ee:99:07:6a:f1:d0:f4:be:1c:49:ab:c9:7d:
         06:ef:71:08:3e:7b:81:9c:b6:35:94:c9:92:c6:43:6f:0b:cc:
         1a:58:fa:d7:11:5a:3c:9f:91:4b:02:21:86:b1:35:3b:ac:b5:
         d0:31:12:47:20:43:46:c2:5c:2c:39:db:5a:63:f0:c3:a8:1b:
         17:87:c1:a1:77:71:d0:52:bf:12:db:2c:49:bb:83:f7:23:49:
         38:0b:8c:3d:a3:06:cd:c6:db:79:40:76:6d:73:cf:3b:fe:46:
         4a:22:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:25 2025 by rpki-client