Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ee6bb1a-f53f-3fcb-9321-44803b754eca.roa
File:                     6ee6bb1a-f53f-3fcb-9321-44803b754eca.roa (raw, json)
Hash identifier:          py6hzh51zKS13Um74Y0tN5sD9xLZzhybKyzwH9ikeSM=
Subject key identifier:   87:9F:BE:38:EF:20:05:F1:4F:4D:D7:E7:E6:AD:9A:F5:2F:89:F8:73
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE5BB23AACB5F366357AF7C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ee6bb1a-f53f-3fcb-9321-44803b754eca.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:bb:23:aa:cb:5f:36:63:57:af:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=cc6bd01c-0ca9-409b-a06e-965010587e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:c5:7b:82:6c:de:b9:ae:ef:81:de:38:02:
                    22:07:21:18:8a:81:47:fd:89:44:00:b9:70:ed:01:
                    28:08:22:3b:40:19:b3:08:71:c9:44:b0:2a:cc:27:
                    e2:48:44:26:7f:a8:69:2b:ce:ee:0f:b7:10:b4:8a:
                    2f:23:fa:bc:ac:7e:60:76:44:6c:39:15:0a:08:0e:
                    3a:94:c0:ef:27:cd:9d:ab:16:46:25:b8:ed:a3:b5:
                    30:38:53:df:85:2b:7f:74:d0:e1:32:14:31:77:4b:
                    05:f3:2e:dd:99:67:cb:55:5c:60:21:19:5c:ee:54:
                    e5:30:60:e4:2c:ea:0e:d4:20:3d:d2:ce:12:28:b6:
                    2d:b1:f2:9a:40:11:db:c7:d5:30:9f:47:0a:14:81:
                    a9:76:ce:71:de:97:74:80:44:06:9b:55:26:f1:e0:
                    74:fd:82:82:73:8b:93:25:48:61:df:d0:04:9f:8d:
                    df:04:cd:f2:f9:e5:20:24:b7:e9:98:67:14:3c:69:
                    be:6e:54:32:c8:4c:03:6e:ed:01:f5:29:20:d8:fe:
                    55:86:27:4f:56:55:b7:5a:75:bf:9f:58:73:f5:20:
                    db:6d:23:38:5e:6d:80:98:31:6b:54:77:66:5a:22:
                    25:40:10:fd:16:d5:38:e6:36:b1:ff:b7:36:f8:dd:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9F:BE:38:EF:20:05:F1:4F:4D:D7:E7:E6:AD:9A:F5:2F:89:F8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ee6bb1a-f53f-3fcb-9321-44803b754eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:f4:95:7a:23:41:7a:06:20:2b:ee:42:71:b1:27:0b:c3:
         65:0c:d8:0f:68:11:b5:36:86:01:50:86:c3:40:a8:81:6d:3a:
         ea:fa:43:7c:09:0f:c8:8e:04:66:bf:32:25:f4:60:25:6b:fc:
         7f:17:11:47:ac:3d:1a:8c:82:f0:fc:d4:5d:7b:0e:2c:b5:23:
         56:d1:0a:15:eb:3e:17:21:e8:a5:da:91:9d:37:b6:e4:0b:23:
         6d:2d:c0:fe:4b:45:43:00:d0:f4:cb:16:59:5f:c5:79:d8:6d:
         5e:4a:43:0a:8c:8c:bd:20:7a:10:98:45:74:a6:2f:7c:77:5e:
         74:9c:0d:57:97:2a:2b:72:44:b5:1b:0d:d7:7b:d2:65:9d:a7:
         13:0f:0c:79:75:e9:3d:c6:da:5f:12:4f:60:3a:de:71:3a:17:
         d2:4d:b1:db:be:ac:ef:25:bb:e9:57:ba:4d:51:95:00:73:93:
         a1:61:ef:3f:77:aa:5a:05:df:c5:4a:36:27:4b:d7:fd:37:51:
         0d:8d:05:0b:45:e9:fa:5c:7f:67:7f:07:5c:d5:2f:fd:0f:42:
         fa:a4:83:06:68:02:14:57:5d:2a:13:f8:d8:cf:80:b3:9b:66:
         fb:e4:c9:e4:64:06:e5:c8:ed:6e:9d:45:2d:86:53:b6:84:bc:
         2f:80:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:16 2025 by rpki-client