Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62c818fb-f880-32b7-9b38-41f0a07568b3.roa
File:                     62c818fb-f880-32b7-9b38-41f0a07568b3.roa (raw, json)
Hash identifier:          NBKM7Cafn7WHgkp0P+Ad0l6M/7IpOmhXqp6KnOKeDN4=
Subject key identifier:   05:48:C6:53:F6:EE:F5:83:32:72:9D:70:12:DC:72:22:A9:9C:66:16
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE416251FB1B06B22D21ABF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62c818fb-f880-32b7-9b38-41f0a07568b3.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.88.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:16:25:1f:b1:b0:6b:22:d2:1a:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=eb5e6c12-ef0e-4bac-bc4b-7700026ad0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:1b:08:4f:67:08:db:68:6d:ef:c6:21:83:
                    93:5a:ed:8d:e0:a9:85:47:20:ea:1d:47:3c:5b:78:
                    ef:4b:ec:c1:01:bf:8a:47:23:62:9c:e1:f1:ec:4a:
                    da:41:85:09:59:e5:1a:98:39:e0:74:6d:95:a9:5c:
                    c1:56:ca:8f:2c:23:4e:3f:db:f2:75:37:77:7e:94:
                    9e:73:26:00:5b:3d:af:2b:a8:a7:80:0c:b9:44:27:
                    7a:37:92:46:45:b9:3b:48:a3:4d:b5:1e:ed:66:b0:
                    c5:9e:9f:10:3f:ba:45:b9:c7:3a:54:c0:4b:28:43:
                    f4:8c:08:e6:b9:1b:1c:68:55:a3:82:27:0c:a6:8b:
                    5b:96:b3:ce:2e:32:c9:4f:bc:19:f0:b6:36:a8:d2:
                    a2:98:2f:8d:9a:1f:b7:ce:46:e7:41:60:6e:f0:1b:
                    78:81:80:a8:77:70:51:42:75:7a:28:d0:61:8d:61:
                    08:e7:09:c5:8a:83:23:af:c8:51:9c:67:13:26:03:
                    0e:d7:48:46:fd:b7:e4:f7:5e:b7:0d:24:59:df:18:
                    07:63:ee:e6:49:b7:3f:9e:db:f8:d1:a6:1d:9e:9f:
                    37:0a:65:02:c1:19:53:dd:52:d6:54:f6:16:f6:f3:
                    4e:01:e4:99:ff:e3:e0:66:a2:8a:38:cb:43:a8:5e:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:48:C6:53:F6:EE:F5:83:32:72:9D:70:12:DC:72:22:A9:9C:66:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/62c818fb-f880-32b7-9b38-41f0a07568b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:84:a7:60:95:41:5a:40:1d:c6:3f:ab:9d:53:0e:1c:e9:
         57:3d:ba:e2:a2:05:18:0b:fc:58:d1:07:8b:6d:e6:5a:36:5f:
         a9:e3:41:0a:76:a3:d5:bb:04:07:ab:5a:4d:a1:11:19:eb:1e:
         0c:34:d6:2f:27:aa:cf:ca:39:4e:a7:d9:0e:19:f3:8f:8f:af:
         06:f7:64:35:0b:64:37:ec:3a:37:fb:44:93:d6:c7:af:0e:46:
         8a:93:f0:91:f3:7e:a9:e5:24:80:00:6e:f9:c7:92:b9:a7:fa:
         d0:66:4f:81:e4:4b:4f:e4:6c:ee:52:63:54:07:bd:e4:4b:9a:
         75:e5:7b:5a:af:97:10:c1:82:79:5a:d5:de:c7:c2:04:d1:53:
         1a:33:37:90:99:57:12:1e:ca:fc:8d:ea:c4:00:9c:5d:11:74:
         57:d1:d4:b6:78:03:76:ac:35:ca:9b:e9:f5:e1:84:96:81:39:
         78:11:3a:3b:82:37:65:33:43:97:a8:db:fe:ec:09:89:76:49:
         5a:f6:63:58:ac:c5:40:01:05:ec:0d:fd:bf:0d:a7:30:cc:ce:
         ed:57:6e:8f:4b:75:14:e1:dc:35:81:e6:73:9e:ea:04:70:5c:
         66:49:b1:a1:81:2b:7c:cc:b4:17:65:95:62:28:b6:35:9c:94:
         0a:9d:70:da
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzkFiUfsbBrItIav4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZWI1ZTZjMTItZWYwZS00YmFjLWJjNGItNzcwMDAyNmFkMGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6IbCE9nCNtobe/GIYOTWu2N4KmFRyDqHUc8
W3jvS+zBAb+KRyNinOHx7EraQYUJWeUamDngdG2VqVzBVsqPLCNOP9vydTd3fpSe
cyYAWz2vK6ingAy5RCd6N5JGRbk7SKNNtR7tZrDFnp8QP7pFucc6VMBLKEP0jAjm
uRscaFWjgicMpotblrPOLjLJT7wZ8LY2qNKimC+Nmh+3zkbnQWBu8Bt4gYCod3BR
QnV6KNBhjWEI5wnFioMjr8hRnGcTJgMO10hG/bfk9163DSRZ3xgHY+7mSbc/ntv4
0aYdnp83CmUCwRlT3VLWVPYW9vNOAeSZ/+PgZqKKOMtDqF67WQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAVIxlP27vWDMnKdcBLcciKpnGYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjJjODE4ZmItZjg4MC0z
MmI3LTliMzgtNDFmMGEwNzU2OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBElgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhtSEp2CVQVpAHcY/q51TDhzpVz264qIFGAv8WNEHi23mWjZfqeNBCnaj
1bsEB6taTaERGeseDDTWLyeqz8o5TqfZDhnzj4+vBvdkNQtkN+w6N/tEk9bHrw5G
ipPwkfN+qeUkgABu+ceSuaf60GZPgeRLT+Rs7lJjVAe95EuadeV7Wq+XEMGCeVrV
3sfCBNFTGjM3kJlXEh7K/I3qxACcXRF0V9HUtngDdqw1ypvp9eGEloE5eBE6O4I3
ZTNDl6jb/uwJiXZJWvZjWKzFQAEF7A39vw2nMMzO7Vduj0t1FOHcNYHmc57qBHBc
ZkmxoYErfMy0F2WVYii2NZyUCp1w2g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:01 2025 by rpki-client