Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f515a49-e22e-3161-90c5-dcf0a98e65dc.roa
File:                     5f515a49-e22e-3161-90c5-dcf0a98e65dc.roa (raw, json)
Hash identifier:          3nENMoHz80iRafroi67YX/fTjo57wl/ECFijSrip/X0=
Subject key identifier:   73:AD:A7:C2:AB:59:B3:F9:D5:A6:45:21:1D:6C:D7:87:34:BE:5C:43
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCF0D7528150A308ACF16F680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f515a49-e22e-3161-90c5-dcf0a98e65dc.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:0d:75:28:15:0a:30:8a:cf:16:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=e4f814b4-6a97-488d-9f0f-9e7108522e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:62:4b:fe:90:1b:b1:56:7e:09:89:39:46:
                    1c:e6:7b:53:27:8b:da:af:2c:a1:bc:29:fb:a5:c0:
                    ab:69:27:e8:27:e9:c2:ee:63:b8:2d:b7:00:5f:9e:
                    d8:cd:04:22:65:09:60:b4:55:1f:d0:17:ce:76:ed:
                    59:b5:fb:d2:7d:01:bb:8a:c2:51:6c:7a:af:26:80:
                    e7:52:38:1d:21:21:0a:f3:a6:0f:d7:ba:e0:37:c6:
                    76:16:0a:c9:9c:7c:1d:08:2f:d8:56:8e:35:7a:aa:
                    09:bb:ef:bb:b0:30:ad:dd:eb:fd:3e:66:93:c9:52:
                    6b:04:32:bf:9e:b0:8e:c1:8b:12:02:1a:4b:a7:a0:
                    93:eb:ff:32:2c:f8:0f:af:d8:67:24:9d:78:e9:f8:
                    1f:28:74:0c:cf:77:52:55:65:df:41:b8:de:c0:2c:
                    fe:9f:f6:3a:b0:de:ec:05:c9:dc:7d:e7:34:42:ce:
                    16:32:4d:a5:11:1a:89:fb:47:fe:e2:b6:aa:39:d5:
                    22:8f:11:99:f7:57:95:2a:13:53:4c:0d:84:81:46:
                    df:3a:62:de:4a:e3:a5:3b:9b:3c:1e:3c:1d:24:e5:
                    33:ae:de:38:b2:08:2a:85:47:91:9f:6a:d4:ea:b3:
                    0f:58:31:30:eb:78:e3:d3:10:15:6d:ae:0b:8a:83:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:A7:C2:AB:59:B3:F9:D5:A6:45:21:1D:6C:D7:87:34:BE:5C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f515a49-e22e-3161-90c5-dcf0a98e65dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f3:91:92:45:6b:34:21:f8:ad:6d:ca:85:5b:16:5e:f7:9b:
         e2:84:cb:5a:bf:6b:99:f3:81:45:c1:1e:64:71:a3:cb:c2:e8:
         46:fe:b8:a2:52:b1:cf:28:a6:e9:76:e1:37:ed:41:cf:f7:08:
         de:d0:c4:61:e5:a9:1d:98:15:62:c0:4d:b2:00:9b:3e:f5:30:
         11:30:fc:33:31:64:ee:44:1e:34:9e:59:8a:e2:9f:23:fc:dc:
         27:b8:27:4b:73:22:bc:be:26:b2:11:17:ca:d8:d3:bf:48:81:
         e3:83:01:f0:12:ef:17:fb:11:5e:1c:54:81:78:fb:cb:53:16:
         dd:92:3b:1e:34:b2:c9:ef:95:2a:fd:48:18:2f:02:5b:a4:f3:
         9d:10:26:34:5a:72:42:44:25:ca:bf:65:ca:33:1e:f7:03:30:
         37:96:32:6c:68:81:ef:cb:6a:de:84:a8:ed:ff:be:4c:1c:a8:
         7f:e7:11:46:0a:23:1e:d6:5a:89:8c:19:29:6c:b7:98:6c:b0:
         01:72:e2:e3:a8:90:e1:7d:73:45:ec:c8:33:6a:d0:f9:f0:58:
         f1:cb:54:7f:0c:17:67:c2:05:55:1d:31:b2:ab:13:01:06:10:
         4d:2e:cb:96:36:37:40:a0:e4:90:ee:6b:d4:8a:15:b6:c9:27:
         0c:aa:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:24 2025 by rpki-client