Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63efd725-05cd-3ab5-a304-8a17a580690c.roa
File:                     63efd725-05cd-3ab5-a304-8a17a580690c.roa (raw, json)
Hash identifier:          0X+qNUgbaiZeMAqB2+ace9sOoVT9kTgRlBFW8WTj9EU=
Subject key identifier:   BD:C4:D9:D2:61:3F:5E:A2:78:9C:30:68:7B:8C:64:A1:1A:A1:1C:3B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F82F82E7C8A55C14338098F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63efd725-05cd-3ab5-a304-8a17a580690c.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.100.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:82:f8:2e:7c:8a:55:c1:43:38:09:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=b714a0db-72ab-443f-a622-52c2ff68a7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cd:66:52:f5:9a:8e:06:f0:b8:9d:bf:24:d0:
                    0b:e7:34:b4:91:df:1e:70:32:27:17:fe:ed:f8:bc:
                    a1:7b:1d:85:9c:2c:9f:9d:eb:be:7a:f6:dd:06:39:
                    ad:43:bd:d7:6f:aa:69:71:ea:47:67:31:b6:60:a5:
                    84:48:53:69:3d:82:b2:cf:53:6e:92:86:0a:37:f3:
                    e7:98:7b:f5:4a:f4:d2:1a:65:7b:2e:b9:24:96:b8:
                    99:4a:22:6d:3f:c9:e6:f4:24:d2:17:2c:f1:f3:de:
                    1b:63:f3:7d:79:c7:3b:fd:e7:fd:4e:8f:46:b3:8f:
                    a0:6d:0d:13:1d:48:28:33:b7:14:2d:c8:95:e6:cd:
                    cf:11:bf:5e:aa:75:72:d1:d4:a5:fe:0b:ff:d1:9b:
                    43:41:10:fc:36:00:18:5a:50:a9:ed:bb:e1:da:6c:
                    fe:90:6f:86:81:dc:24:f8:71:12:4e:ed:b0:83:18:
                    be:e7:5c:3a:cd:22:55:6c:c9:4f:28:00:e5:aa:d1:
                    3e:c7:96:45:47:de:a0:d9:58:e1:98:b0:91:76:30:
                    f8:5a:68:a8:3f:34:2d:e6:2d:17:58:e8:7e:59:41:
                    d4:00:ef:bc:48:fb:1f:20:24:1e:aa:d5:4b:97:a7:
                    19:66:92:60:21:0d:12:61:38:23:57:e1:df:76:62:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C4:D9:D2:61:3F:5E:A2:78:9C:30:68:7B:8C:64:A1:1A:A1:1C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63efd725-05cd-3ab5-a304-8a17a580690c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.100.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:61:68:b0:76:eb:e5:dd:6f:7e:00:a4:6c:30:5f:0d:47:
         ec:3f:93:fe:10:45:17:bd:3f:65:a4:d7:ab:81:10:b4:1c:69:
         11:52:15:9d:08:48:2e:a5:f1:d2:69:a4:cf:0e:84:17:08:74:
         74:6c:0f:ab:65:65:2b:ce:86:2b:0c:f4:93:69:39:58:c5:be:
         2d:4f:97:c3:d1:55:60:93:24:41:39:f0:a2:08:c8:84:f4:b1:
         b7:30:93:54:fa:f6:f6:37:b9:2f:18:65:90:17:5d:3c:b2:65:
         38:7b:49:f9:55:05:a0:04:ec:78:f3:d7:bd:14:06:8f:c2:3f:
         6a:3e:2e:ad:77:6c:6e:4f:49:77:3d:68:f0:0f:13:ba:70:5a:
         1f:0d:94:d2:30:a1:20:0c:10:e7:d8:4f:83:b6:f9:b5:32:2f:
         4e:9d:05:44:ea:44:c1:97:22:80:f0:6d:41:62:25:4e:82:5f:
         5d:a6:b0:f6:45:6c:a6:19:58:a4:f5:6d:b2:8a:bd:bc:e3:b6:
         5e:64:1b:c5:73:b4:d4:85:67:77:64:c1:eb:78:0d:d3:de:86:
         7a:99:9c:6c:bb:a4:ae:31:09:68:80:6b:79:e7:2f:97:57:fe:
         b3:08:7a:4d:6b:35:b6:c0:77:f1:16:0a:3c:82:24:fa:1d:2d:
         1a:46:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:32 2025 by rpki-client