Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/698bb3e0-e1e2-39dd-b6ed-b0e793a1f1f5.roa
File:                     698bb3e0-e1e2-39dd-b6ed-b0e793a1f1f5.roa (raw, json)
Hash identifier:          6euyYNJhsi1EsBbt8s4stAtOLA+zOFZGgVIxaz8sbqs=
Subject key identifier:   8E:45:F5:B5:2A:98:53:C9:F0:A4:CD:32:A9:FC:08:6F:37:2C:78:16
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F562F7EEBCBEEFB12465FBDD8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/698bb3e0-e1e2-39dd-b6ed-b0e793a1f1f5.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.93.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:2f:7e:eb:cb:ee:fb:12:46:5f:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=e44a54f2-d87a-4de1-a2cf-e2ca24a4aadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:87:2e:7c:10:97:9c:56:d4:86:4d:fd:b8:
                    6e:e8:fd:1c:4e:79:a6:99:27:9c:37:3e:f9:b9:67:
                    b6:0b:b1:73:6a:bc:ee:35:80:3a:04:d6:ca:68:bd:
                    c4:a3:dc:4d:c4:97:f4:51:93:e4:9c:d9:d4:93:a4:
                    56:36:c9:de:f5:6f:01:9d:c8:d6:b0:ad:25:60:b8:
                    03:84:16:6c:2d:e4:8d:84:fa:1a:ef:d5:a4:e1:73:
                    9d:9c:6a:5e:4f:45:49:4e:d2:a3:f1:0f:30:6a:4e:
                    87:89:55:96:d4:5a:3c:bf:e2:6c:91:a3:85:fe:16:
                    9c:02:b4:9a:4b:21:f2:9f:c0:a6:da:37:0b:ec:fc:
                    03:d4:89:88:7f:6a:77:b9:86:ec:84:62:8e:c7:d3:
                    25:c4:65:8c:c8:88:01:1b:5c:89:6f:c7:31:75:1f:
                    5a:a9:df:27:96:8b:f7:b4:59:fb:66:1a:8b:14:94:
                    11:81:22:9e:25:f1:15:7e:85:21:8c:c1:df:fe:03:
                    42:98:86:5b:18:4e:f8:34:34:99:99:ff:77:e1:64:
                    72:87:a2:85:5f:80:ea:99:e1:e8:54:1b:e9:44:41:
                    98:9d:07:9a:42:5b:eb:a2:bb:c2:0b:33:59:f2:d6:
                    b1:60:8f:d1:68:0b:08:47:e2:d7:53:d6:be:e2:d8:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:45:F5:B5:2A:98:53:C9:F0:A4:CD:32:A9:FC:08:6F:37:2C:78:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/698bb3e0-e1e2-39dd-b6ed-b0e793a1f1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:37:fa:56:57:9c:00:7d:93:09:e9:a4:af:26:87:e9:34:e2:
         5c:3b:b2:c9:9e:a9:7d:3d:a7:3f:f3:37:be:b2:f5:09:c6:ff:
         5e:c4:a9:59:27:a3:6a:30:ec:e0:a7:cb:a0:05:6c:f7:5f:40:
         e9:08:97:78:d9:ab:ad:a1:8f:51:39:52:a2:ef:d0:05:1e:cb:
         b3:fd:0d:38:83:d0:f9:bc:a3:91:fe:80:26:a3:c3:6e:0b:94:
         0e:4a:29:4b:80:31:58:2e:23:8d:ad:a2:2d:92:94:0f:ad:3f:
         e5:2c:d1:41:58:36:1e:ed:65:78:4f:e9:a3:c3:28:1f:bb:a2:
         ac:73:54:c0:e9:b5:c6:4f:e9:b7:9c:2f:5e:bd:6f:c7:3b:d2:
         4e:12:8a:99:78:c4:1b:e4:f3:d5:cb:bc:3b:02:b4:00:37:47:
         70:2c:95:8f:29:38:85:44:e1:0c:c4:03:30:35:7f:e8:a6:e7:
         a6:a1:75:2f:c3:44:7f:71:fd:d8:27:ba:7e:f4:8b:a0:fd:99:
         5f:14:11:0e:9c:dc:7b:13:cd:1f:c7:57:29:da:53:cd:1a:cd:
         6b:4d:fb:a5:f5:7e:06:71:e2:8d:03:a1:d4:1d:fa:d2:0e:3d:
         b1:ff:c8:c0:39:aa:20:76:02:5b:d6:08:63:30:3f:c3:a4:a6:
         7e:e9:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:23:50 2025 by rpki-client