Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60f66d27-f091-3444-ac71-e47f3df07913.roa
File:                     60f66d27-f091-3444-ac71-e47f3df07913.roa (raw, json)
Hash identifier:          +BGQM2JyDTGKaFZBlI64c+m4xJunrpeLy9QW6G/UFhs=
Subject key identifier:   11:2C:FC:F9:28:A2:AC:69:6D:96:2F:B0:2C:F8:13:B5:04:C4:05:BD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E6B7A229FDED702F823FF7CA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60f66d27-f091-3444-ac71-e47f3df07913.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.183.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6b:7a:22:9f:de:d7:02:f8:23:ff:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=761193dc-7b0c-4fba-b078-67b6333b1203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:73:7d:a7:13:a2:13:d5:87:8a:3b:67:1a:
                    3d:4b:2d:54:77:9f:0b:93:73:11:84:8a:5b:38:66:
                    d7:69:24:d9:e5:73:27:05:30:dc:86:c1:57:81:07:
                    9f:a7:4e:b2:b5:40:fe:60:7e:b8:97:3c:91:22:37:
                    31:c7:0c:a6:39:03:49:48:c2:f1:6a:62:98:4c:ed:
                    9b:16:68:50:cb:9e:da:7a:47:e0:e6:ca:64:79:a2:
                    98:f3:5b:d0:e3:a3:9a:9d:1a:ca:04:24:92:cd:32:
                    43:7b:b2:69:56:ce:5d:22:e4:30:cd:f9:df:87:e0:
                    2a:c9:8c:83:c9:20:58:be:34:16:8f:c0:c3:20:aa:
                    47:74:df:b5:5c:92:38:65:57:6f:4a:c9:47:94:d9:
                    45:3c:e5:50:e0:57:92:c3:ac:c6:cc:d8:5e:63:2a:
                    56:53:85:ee:c3:63:d4:62:cd:4b:71:87:bb:72:cf:
                    c1:20:19:b2:b9:e6:b4:f1:29:ab:ae:7f:dc:fc:6c:
                    55:00:78:9d:d3:9c:9e:9a:a0:8b:51:e4:28:31:4f:
                    ea:04:ed:d7:b1:85:ff:0e:10:5e:15:69:ed:98:40:
                    23:ec:58:5f:10:fe:2c:e5:c0:71:ea:37:04:8c:5f:
                    1d:dd:1a:3a:d9:c0:b9:44:06:f0:83:14:8b:11:3f:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:FC:F9:28:A2:AC:69:6D:96:2F:B0:2C:F8:13:B5:04:C4:05:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60f66d27-f091-3444-ac71-e47f3df07913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.183.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:13:72:04:b0:0e:35:e5:1d:d6:4f:11:2a:dd:a9:4f:25:
         00:94:21:ac:f3:78:fb:3f:8d:fa:76:0d:58:1d:65:b4:df:37:
         75:31:0d:2e:49:ef:04:68:74:17:fb:a3:f3:dc:db:de:b9:72:
         e1:28:aa:f9:5d:f7:e3:0a:2b:8c:6e:76:35:a8:a7:6e:20:d6:
         86:cc:a4:64:2f:9d:dd:e1:39:20:61:e3:f9:13:52:93:f2:5f:
         b7:d3:0b:3f:9b:e7:96:0d:54:d5:71:32:8f:18:64:61:bf:08:
         47:29:c5:5a:00:f3:12:b6:e0:5a:df:db:21:76:fe:0e:9d:22:
         95:0a:f9:de:51:eb:75:77:da:59:32:12:74:93:6e:94:b0:42:
         56:6e:db:74:dc:05:80:77:35:3e:65:ea:5b:ec:c1:40:9c:5d:
         4e:1b:f4:0e:7c:a5:9a:45:2b:f6:72:ce:eb:ba:fb:15:bd:b5:
         30:6c:b4:d0:44:4a:ff:45:14:0e:35:17:f3:b2:18:0f:c9:e5:
         8e:82:5e:ea:27:88:e9:90:63:a8:31:89:61:12:9d:48:e9:a7:
         37:ab:cb:42:b9:ab:5a:3c:7f:36:e0:9f:aa:02:6b:49:e9:33:
         d4:9b:96:b6:ce:6c:95:64:cd:aa:53:e3:51:1d:6d:f4:fe:59:
         19:28:6b:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5reiKf3tcC+CP/fKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NzYxMTkzZGMtN2IwYy00ZmJhLWIwNzgtNjdiNjMzM2IxMjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+tzfacTohPVh4o7Zxo9Sy1Ud58Lk3MRhIpb
OGbXaSTZ5XMnBTDchsFXgQefp06ytUD+YH64lzyRIjcxxwymOQNJSMLxamKYTO2b
FmhQy57aekfg5spkeaKY81vQ46OanRrKBCSSzTJDe7JpVs5dIuQwzfnfh+AqyYyD
ySBYvjQWj8DDIKpHdN+1XJI4ZVdvSslHlNlFPOVQ4FeSw6zGzNheYypWU4Xuw2PU
Ys1LcYe7cs/BIBmyuea08Smrrn/c/GxVAHid05yemqCLUeQoMU/qBO3XsYX/DhBe
FWntmEAj7FhfEP4s5cBx6jcEjF8d3Ro62cC5RAbwgxSLET+5IwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBEs/PkooqxpbZYvsCz4E7UExAW9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjBmNjZkMjctZjA5MS0z
NDQ0LWFjNzEtZTQ3ZjNkZjA3OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAErcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACosTcgSwDjXlHdZPESrdqU8lAJQhrPN4+z+N+nYNWB1ltN83dTENLknv
BGh0F/uj89zb3rly4Siq+V334worjG52NainbiDWhsykZC+d3eE5IGHj+RNSk/Jf
t9MLP5vnlg1U1XEyjxhkYb8IRynFWgDzErbgWt/bIXb+Dp0ilQr53lHrdXfaWTIS
dJNulLBCVm7bdNwFgHc1PmXqW+zBQJxdThv0DnylmkUr9nLO67r7Fb21MGy00ERK
/0UUDjUX87IYD8nljoJe6ieI6ZBjqDGJYRKdSOmnN6vLQrmrWjx/NuCfqgJrSekz
1JuWts5slWTNqlPjUR1t9P5ZGShrCw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:14:53 2025 by rpki-client