Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59024cb6-725b-3345-b2c9-147f12b2c155.roa
File:                     59024cb6-725b-3345-b2c9-147f12b2c155.roa (raw, json)
Hash identifier:          9plVNGIz7KlrRP4ZjiuHHj2MKIeUh4Flys32FPAK1RM=
Subject key identifier:   78:7D:AA:25:21:AC:D7:E3:02:57:8A:AA:7E:1C:3D:8A:D8:BD:9D:27
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD0CA1D373CFA08B3FC048CD8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59024cb6-725b-3345-b2c9-147f12b2c155.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Sun 11 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.34.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d0:ca:1d:37:3c:fa:08:b3:fc:04:8c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Dec 11 05:00:00 2022 GMT
        Subject: CN=5141776c-be01-403b-baf0-a751eb8d160a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ea:c6:3d:9a:26:00:a8:ea:f0:0c:7a:43:ca:
                    33:89:2f:e7:cd:16:66:43:6b:f5:df:92:e3:95:6a:
                    43:c1:23:b1:ab:bd:c3:c8:79:0b:77:2b:b9:09:eb:
                    cd:b5:30:8c:34:a0:22:02:8d:4c:3b:99:70:c1:92:
                    f9:b3:4e:0c:f9:46:6c:2e:a9:3c:7f:ff:78:52:99:
                    00:6c:a8:5d:ed:bf:04:6f:ca:64:9a:9f:a2:86:a3:
                    69:06:b5:18:c1:0c:f4:e8:a7:43:36:f9:c9:f8:89:
                    7a:d4:f9:7e:30:29:4a:0d:33:58:f6:44:87:1f:6d:
                    09:bd:45:03:31:20:8f:72:98:ea:b5:c8:8c:4f:a2:
                    9d:62:0d:5a:72:84:0e:c3:09:c9:b2:5c:ff:6b:6f:
                    cc:ac:c5:cc:54:8f:38:74:71:9a:76:7a:6e:9a:24:
                    b1:83:26:b6:f3:3e:e6:4d:33:ef:d5:05:7a:a5:44:
                    6d:f1:93:56:a2:94:42:30:74:ef:97:be:db:54:51:
                    ab:b5:f5:86:73:ff:b1:59:b1:b9:a5:a9:29:46:6b:
                    be:80:f3:b0:ea:92:fb:99:c3:b5:38:00:b9:07:f9:
                    0c:84:b5:0a:c5:12:7a:9d:6f:57:51:51:26:2b:cb:
                    09:14:69:fe:b0:d0:e4:ae:9a:8c:7d:4e:ac:ba:c2:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7D:AA:25:21:AC:D7:E3:02:57:8A:AA:7E:1C:3D:8A:D8:BD:9D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/59024cb6-725b-3345-b2c9-147f12b2c155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:29:5e:ff:c2:c0:5f:f2:bb:68:71:da:fc:d4:96:c3:57:
         27:af:a1:25:37:dd:ab:d3:7b:9f:81:f0:30:d6:7d:0a:8f:1a:
         be:4b:fa:e6:8f:6e:fe:eb:1a:1e:14:82:c9:39:07:f5:e5:21:
         31:85:b1:a7:8e:84:27:66:24:62:fa:65:36:c8:3e:fb:e3:d8:
         1e:4f:a9:8d:68:e3:f7:28:56:da:66:fa:bf:24:e8:a7:74:aa:
         93:c7:bc:00:cd:28:3e:c7:a2:85:f9:f7:b6:72:3a:ee:e1:60:
         34:04:05:d0:33:dd:ed:22:88:19:34:07:39:7d:11:73:f4:bd:
         ac:b2:03:a9:6d:ec:b4:1c:61:81:c0:2a:42:65:9f:c9:71:3e:
         7d:a5:bd:9b:08:37:7b:30:b4:7d:c5:12:4f:60:40:e5:7f:04:
         70:f0:ad:84:db:8d:38:92:91:6c:02:f8:89:aa:1f:2a:26:4e:
         73:cf:f1:b0:cf:ac:97:8a:84:de:9f:30:9a:96:2e:f3:5d:e7:
         2a:c2:ef:0b:2a:54:93:d1:5f:e7:53:21:5e:38:33:7e:c5:c8:
         57:47:1d:31:53:e1:b8:5e:ca:e4:49:b2:21:94:25:6f:71:54:
         f7:b5:8a:a9:2b:3e:33:d1:9b:0a:5a:9d:d2:82:5d:16:41:2f:
         a4:e5:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:00:30 2025 by rpki-client