Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/575501b3-23c3-3c21-be49-fb35b2d0b760.roa
File:                     575501b3-23c3-3c21-be49-fb35b2d0b760.roa (raw, json)
Hash identifier:          tzynzHCZ0cYzANOLyoX/rIyTW+oNVi5aaBc9DPzuTwU=
Subject key identifier:   36:D8:1A:46:AD:AA:A7:38:69:FD:4D:EC:43:F1:8D:FB:F4:36:E5:7B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE51752ED18843C7680690D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/575501b3-23c3-3c21-be49-fb35b2d0b760.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.180.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:17:52:ed:18:84:3c:76:80:69:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=af417d1c-c8a1-433a-86a6-9c2cdb9b6f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:63:a0:fe:08:9a:ed:bf:78:26:9b:2b:db:
                    5a:95:44:2e:5e:d2:ba:ad:b8:27:c6:b2:c8:c6:2b:
                    47:df:cb:87:3e:9a:33:0c:38:61:c9:79:1a:5a:38:
                    ae:de:59:1b:7a:98:86:2a:5b:dd:fc:e4:d3:23:5c:
                    17:de:5e:34:51:4d:85:d3:d1:20:33:c3:ab:75:b0:
                    e1:29:a6:cc:29:b6:8b:f4:12:45:22:36:e4:62:4a:
                    46:02:4f:5e:92:26:4c:f6:74:b0:f7:cf:f9:7e:5d:
                    d2:ba:92:47:e2:f8:eb:d4:17:02:db:5c:2e:66:38:
                    db:ca:db:fe:c7:08:e4:49:d5:c4:39:9c:f0:5e:19:
                    9b:a0:b6:3b:de:9f:35:bc:73:0c:3c:4e:42:ab:dd:
                    63:72:f1:b5:c8:02:bc:b1:d2:2f:6d:68:d5:83:ef:
                    99:1a:b0:86:49:e8:cd:85:42:8f:4c:46:32:43:be:
                    5f:2f:27:b7:1a:88:a2:6c:f2:be:e5:5f:d0:ef:87:
                    25:c8:8d:8a:78:a2:35:aa:95:cb:ce:0c:d2:36:b3:
                    eb:bf:d9:1e:93:8c:8f:b5:0d:74:7f:19:15:1d:59:
                    f6:8b:02:68:04:9f:8b:9c:d6:75:33:b1:ee:40:8b:
                    50:dc:ef:85:ef:2a:5a:6b:7a:e5:69:66:08:64:a2:
                    ce:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D8:1A:46:AD:AA:A7:38:69:FD:4D:EC:43:F1:8D:FB:F4:36:E5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/575501b3-23c3-3c21-be49-fb35b2d0b760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.180.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:96:a9:05:d0:0b:c6:25:63:25:48:d8:93:2a:33:a8:48:01:
         3a:2f:b9:13:93:96:c3:68:b7:88:12:8f:ca:17:ab:79:35:3b:
         41:75:c1:71:e6:be:b9:b0:21:54:d9:d7:39:76:8e:e8:12:3f:
         b1:5e:4c:88:2e:fe:86:be:f8:d1:1d:aa:3a:68:38:00:8f:60:
         74:03:ca:f4:ce:76:34:0b:19:f2:97:84:fd:52:2a:a4:3e:17:
         b7:72:a4:a0:a9:be:22:db:d3:11:af:b9:9d:b5:dd:79:66:20:
         b2:b2:1c:ea:85:86:90:77:ac:f5:41:78:e8:60:d7:65:6c:8c:
         20:0e:a9:a4:e3:41:4f:9f:ba:c1:88:1b:a9:38:4d:16:b4:34:
         00:86:d6:05:c6:13:3d:0b:92:60:8f:c1:0f:d5:7a:8d:5f:14:
         42:41:da:32:f2:b9:f1:ba:5c:21:ee:14:c9:f3:ee:52:e3:55:
         bc:bb:b5:9e:30:9d:99:b0:45:89:e3:ef:f5:36:a2:99:de:83:
         d2:14:79:b1:0a:b1:c9:8b:17:87:43:4d:59:8b:ff:28:3f:4d:
         71:41:80:d6:89:32:e0:cb:0d:22:a4:01:09:f4:a3:bd:c4:0b:
         7c:18:b9:2f:10:16:0d:46:6e:15:f0:dd:f6:6e:a8:d2:92:9f:
         37:36:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:13 2025 by rpki-client