Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57e91ad6-de75-305e-812d-1525d1337942.roa
File:                     57e91ad6-de75-305e-812d-1525d1337942.roa (raw, json)
Hash identifier:          NYyPVbCeVzb+4QxGwdxQh2U/poySdDqGUx+7eqlHFic=
Subject key identifier:   D5:D7:30:A9:16:B3:BB:2E:BA:94:33:5B:42:A8:FB:AD:47:78:A6:A8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB97FE24817806AB0924859C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57e91ad6-de75-305e-812d-1525d1337942.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.69.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:7f:e2:48:17:80:6a:b0:92:48:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=1273bc0a-3670-4f52-81f4-e46da173bfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:aa:c4:d0:bc:29:6a:57:46:d3:6d:73:e4:
                    7a:58:7b:39:05:08:79:cf:c8:39:25:e7:c5:6c:14:
                    94:9b:c4:5f:76:eb:38:47:ec:c6:c9:74:33:4b:89:
                    99:9e:ed:20:c9:4a:c3:c5:da:44:65:cf:59:90:df:
                    b5:ba:20:d6:dc:b7:80:32:b4:33:0d:25:0a:27:e9:
                    7e:b3:2b:cb:36:3d:25:af:47:99:94:22:14:e7:8f:
                    39:49:ef:b3:e5:2b:11:6b:87:42:72:2b:c0:d8:7a:
                    b7:13:cf:cb:53:b1:53:f0:71:a0:50:f1:74:e9:64:
                    32:5f:67:dc:00:93:fd:28:c7:a2:a2:30:6f:af:65:
                    c0:9e:69:95:77:1b:06:ab:e4:98:c5:c5:d0:87:ed:
                    03:a1:00:d8:e5:39:39:c3:f4:da:84:ed:3d:3c:00:
                    33:a3:6c:db:97:85:29:d8:33:95:a3:e3:96:87:f6:
                    81:95:94:a6:51:e4:31:14:2e:3f:03:87:c5:9b:52:
                    05:4c:65:79:76:2c:98:a3:41:31:16:80:d1:7a:0b:
                    6f:06:cc:2e:a6:cb:9a:47:11:6e:36:ea:63:f8:44:
                    85:06:82:53:17:8a:9c:03:8b:7f:91:46:c1:d4:f4:
                    35:a3:ba:f3:85:be:c9:bb:10:66:1f:65:34:a5:2e:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D7:30:A9:16:B3:BB:2E:BA:94:33:5B:42:A8:FB:AD:47:78:A6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/57e91ad6-de75-305e-812d-1525d1337942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:04:d3:65:1a:4d:85:13:89:ad:b9:8f:ca:11:15:af:df:
         b0:f0:9a:22:35:36:2f:2c:5f:8e:dd:64:fa:1a:6f:25:5e:7f:
         d5:61:76:c9:0d:c5:15:7a:f6:17:a7:8a:68:f8:11:6d:71:9d:
         a7:a3:11:8b:c1:3f:d1:fe:7c:05:54:42:2c:10:d2:9f:7f:73:
         1b:bb:e9:3a:4b:f3:a3:4a:33:8e:cc:b7:f2:89:17:19:16:97:
         87:07:21:68:de:3f:4b:0d:62:d7:d2:2d:19:0c:bf:8c:34:19:
         ed:1a:28:84:80:55:13:41:21:49:40:1b:89:71:41:ee:9b:6e:
         e6:85:91:6b:3b:85:8a:c3:9f:7f:4f:28:96:ea:87:57:98:5b:
         31:a5:21:d8:37:63:73:44:08:1a:bd:ac:30:3c:52:4c:e8:90:
         cf:08:fe:0a:df:43:e4:41:68:ba:05:61:e7:2a:d4:41:55:95:
         cf:11:ba:35:7c:84:7d:6f:43:73:e8:26:9a:ab:3e:bf:28:b4:
         03:5e:84:1e:6c:f7:f3:df:02:1d:f2:b0:52:7c:c4:f5:6c:14:
         61:02:f7:e0:9e:5d:48:c9:8f:0e:c1:e2:4b:6f:f7:13:96:9a:
         7d:78:40:0d:c1:b5:35:a3:c4:96:32:3e:d8:4a:e4:ca:7e:00:
         c5:48:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:59 2025 by rpki-client