Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0a9308-0a60-3110-ba00-7a10778d4627.roa
File:                     5e0a9308-0a60-3110-ba00-7a10778d4627.roa (raw, json)
Hash identifier:          h2S80d3f1SpRHdiNyZJyoDiHfHNp3HB+LN+NlqXaKAM=
Subject key identifier:   21:C2:05:61:E6:BE:86:48:8D:21:F9:A3:E8:07:28:33:48:97:10:9A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBDB796BAB5AB563E420F8960
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0a9308-0a60-3110-ba00-7a10778d4627.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bd:b7:96:ba:b5:ab:56:3e:42:0f:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=565ff249-3557-4c15-a914-11094f7baca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:84:84:f4:50:23:f4:97:f5:db:fa:74:8e:
                    ef:13:d0:9d:d9:56:c0:58:8e:76:77:fa:0a:30:20:
                    91:27:7e:28:e8:75:a7:2d:4f:42:24:df:05:f5:76:
                    35:7e:ca:47:7b:35:32:db:8b:a2:02:f7:8b:c7:c9:
                    49:e7:fb:28:ee:9b:34:5a:55:cf:b0:8a:5d:f4:c3:
                    f5:24:af:14:1b:f8:83:be:92:e7:61:52:61:63:79:
                    f1:b8:1d:17:bf:14:50:5f:ca:2b:18:84:ed:e5:b0:
                    98:4e:98:dd:3e:db:a6:9f:f4:d4:dc:56:a1:79:65:
                    08:c3:7e:4a:31:6e:63:a6:6b:86:00:5f:46:3d:7a:
                    47:94:1a:9b:23:a3:2f:e7:db:57:ea:c6:48:84:72:
                    7b:46:7d:3f:af:75:91:48:29:15:5b:c5:81:a8:63:
                    2f:8d:00:d3:89:c5:2d:0e:a4:41:4f:10:cd:6e:e7:
                    ca:b4:55:28:c4:27:2d:b6:13:0b:a5:ed:54:31:87:
                    a2:5f:4b:f8:e0:62:f5:af:2a:05:04:f2:59:3f:9c:
                    82:90:c7:ed:fa:75:f6:4a:22:47:77:6f:2f:dd:b6:
                    24:fc:27:f3:f8:d3:8b:0f:28:35:8c:f9:c9:6a:f9:
                    94:a3:a9:4a:0c:61:43:78:94:46:49:5e:b4:e6:a9:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C2:05:61:E6:BE:86:48:8D:21:F9:A3:E8:07:28:33:48:97:10:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e0a9308-0a60-3110-ba00-7a10778d4627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:63:22:50:a2:f0:ad:9e:c6:c1:1f:1d:58:f5:a2:68:24:fc:
         24:3c:22:75:46:98:26:31:5a:d6:68:33:90:3a:56:66:ea:11:
         55:ef:0d:47:a4:6a:a0:8b:2f:e7:a0:e5:15:31:c7:83:a3:de:
         d3:27:65:88:49:18:1c:76:b0:bf:b5:ad:72:5e:30:a7:65:31:
         8a:00:e0:eb:81:32:1b:df:eb:dd:d6:a3:36:7c:04:c8:2b:3e:
         75:48:f6:11:71:b5:c3:f4:9c:d7:9f:42:9b:85:ff:90:92:93:
         21:a6:73:f2:c1:53:13:88:6e:64:41:62:4e:48:6c:54:01:35:
         92:70:7c:c3:bf:b1:5a:69:3a:c6:35:fd:fc:9c:ff:6d:9c:1f:
         ed:64:81:3c:7c:b5:f7:c1:7c:09:45:f0:d3:2f:15:5e:2d:a1:
         a3:14:eb:ac:3f:62:8d:a1:b3:50:65:1c:c9:bc:42:13:47:7c:
         28:91:f8:99:db:97:94:4a:28:9b:a9:73:a1:da:b7:52:ac:66:
         10:e7:27:30:93:ff:dd:7d:44:b5:d6:4b:a7:a1:61:26:58:4d:
         5b:56:68:e6:4f:84:1a:5f:78:ca:fa:04:28:4e:a1:4b:5b:1a:
         aa:3f:31:b6:10:f9:97:7c:b3:6e:ab:1a:00:96:5e:4d:4d:b7:
         0a:e6:6e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:58 2025 by rpki-client