Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67484981-bcf9-3ffd-8514-ba8e3d31ab18.roa
File:                     67484981-bcf9-3ffd-8514-ba8e3d31ab18.roa (raw, json)
Hash identifier:          zbV4eU4rDtaadoiRjorfLfTcKeyfKo3s1lBefq9zdTM=
Subject key identifier:   D5:F8:32:20:3F:84:68:39:12:6C:82:F5:00:5D:05:6E:BF:6E:2E:2E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E21D81E558D967BA1FC75E1E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67484981-bcf9-3ffd-8514-ba8e3d31ab18.roa
Signing time:             Fri 03 Jun 2022 12:00:00 +0000
ROA not before:           Fri 03 Jun 2022 12:00:00 +0000
ROA not after:            Sat 09 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.110.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:21:d8:1e:55:8d:96:7b:a1:fc:75:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  3 12:00:00 2022 GMT
            Not After : Jul  9 04:00:00 2022 GMT
        Subject: CN=ec303ac9-54c6-424e-b181-284b3883daf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:41:8d:1b:28:8f:4f:84:2a:19:4c:f4:dc:
                    10:8a:77:58:07:1e:d9:e3:24:d9:42:e2:4a:25:22:
                    15:ab:35:1e:07:b6:09:a5:29:01:28:7d:a9:f7:e2:
                    46:56:2a:3c:fe:67:eb:85:b8:d2:a5:0c:1f:8b:36:
                    dd:df:17:b5:d7:83:65:1b:51:aa:fa:e0:ce:c7:29:
                    c0:62:2b:91:86:79:6d:6a:5f:1e:01:c7:8d:5d:42:
                    c8:9f:88:63:2c:74:f6:a6:31:e1:51:0d:48:f0:99:
                    67:82:85:b9:1d:e6:ea:86:20:f6:0e:bf:51:8f:c0:
                    a7:a9:7c:5d:82:f6:ea:9d:19:5d:ad:39:7c:44:9c:
                    f1:83:37:4a:4c:64:d9:eb:db:8b:8d:db:59:86:a6:
                    09:4e:88:04:45:73:50:e8:2b:ff:0a:73:bd:bd:d2:
                    e1:da:b8:77:e1:59:49:ff:96:c1:01:5c:cd:e5:5e:
                    b8:5d:4b:80:d7:11:77:d8:d6:73:ef:59:b4:5a:49:
                    91:b1:be:28:f4:40:f3:0b:e9:b3:c4:93:ce:b3:51:
                    c3:32:6f:e8:cb:d2:9b:8b:a0:66:1e:41:36:4f:fd:
                    3b:79:b7:fc:32:9e:a1:fd:0d:23:80:ab:52:5c:f1:
                    29:9d:98:24:9c:c2:d5:a6:e1:93:49:9c:b6:a9:f0:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F8:32:20:3F:84:68:39:12:6C:82:F5:00:5D:05:6E:BF:6E:2E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67484981-bcf9-3ffd-8514-ba8e3d31ab18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:a4:a0:70:33:6c:ad:83:5c:32:10:d9:22:70:b2:75:04:
         c2:89:21:c9:e2:a1:72:05:61:06:6e:76:cb:1e:e9:10:65:e8:
         aa:4a:f1:ce:fa:bd:99:ea:c9:4d:a1:ed:e0:8f:8a:f7:79:21:
         e3:cf:0a:ce:90:60:e2:74:3e:fc:85:62:d7:3a:9b:0a:b2:56:
         9d:41:32:fa:2c:51:29:f2:51:e7:f4:1c:0a:ff:19:8e:1e:91:
         1e:c7:38:a4:25:28:b6:6c:76:bb:bb:de:e9:da:52:71:89:b5:
         71:6e:6e:f5:2d:e4:ea:70:4b:bd:51:a5:d7:09:d0:28:fe:4c:
         c6:de:c6:34:09:a2:15:72:9f:9f:5c:48:6d:4d:5c:68:3b:08:
         d6:ff:a4:e2:13:3c:d4:f0:63:05:6b:96:20:93:98:a9:47:c7:
         c1:f7:f8:fa:5b:35:5f:ad:16:9f:dc:5b:f6:b0:04:9a:ab:63:
         c1:16:e5:92:9a:58:4e:cf:d9:06:3a:6c:b1:c7:cf:cb:a8:5c:
         78:9a:15:0d:a9:0e:be:ee:3f:ab:28:13:2b:5e:fc:db:2b:68:
         f9:e4:60:51:71:18:75:e1:43:db:1b:2f:4b:52:9b:38:c4:3e:
         7f:54:8c:d3:39:78:37:20:71:a0:54:38:c7:6b:9e:8f:08:8b:
         2a:3b:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:45:03 2025 by rpki-client