Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ffc4a12-882b-37f8-a9b6-32ef95c0c462.roa
File:                     6ffc4a12-882b-37f8-a9b6-32ef95c0c462.roa (raw, json)
Hash identifier:          WOFERljoUX0jha6lx9VM0k0tDE73FRFTvUjhorTJ3IM=
Subject key identifier:   57:C1:30:CB:20:73:82:9F:34:9E:22:D8:23:94:EC:16:C1:C5:84:2E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E92A5CF8A93BC65E13BE68520
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ffc4a12-882b-37f8-a9b6-32ef95c0c462.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Fri 19 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.202.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:92:a5:cf:8a:93:bc:65:e1:3b:e6:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Aug 19 04:00:00 2022 GMT
        Subject: CN=32fb1069-36b1-4348-b167-2d64407a0000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:58:26:59:f8:a5:86:51:80:15:31:81:a7:
                    c6:6d:51:43:c9:2b:7c:99:ba:86:6d:e5:a4:09:b3:
                    bf:3f:af:0b:97:3b:11:56:17:09:52:2d:e5:d5:9b:
                    d6:9f:c0:ec:87:c2:f2:3c:f6:49:24:66:84:a0:73:
                    3c:91:bd:d1:1a:96:b5:7b:19:93:3c:fa:7e:a1:96:
                    a7:08:20:15:86:81:c6:f6:cb:13:f5:8b:a0:61:f1:
                    3d:4b:70:3c:17:a2:16:aa:6b:48:c0:c4:e8:c0:da:
                    00:c1:f7:e4:7d:d4:ba:c6:eb:ff:fe:37:53:56:08:
                    3d:d8:a5:8f:89:90:1f:da:fc:46:a4:ce:c4:de:61:
                    3d:ee:ae:a3:f8:6f:67:f4:8e:ad:0b:f1:89:56:a7:
                    f4:74:1b:74:e6:26:d6:c7:6d:b8:a3:aa:7e:f6:eb:
                    ad:69:19:7f:f7:cc:96:77:1a:9c:f2:65:42:d5:85:
                    8a:20:21:28:07:87:be:58:f6:49:f6:31:24:12:b1:
                    78:eb:3a:71:43:e1:41:0a:a4:cd:3c:95:92:a8:f8:
                    0c:fa:1b:21:64:87:c4:b1:ec:87:ff:1d:aa:fe:b1:
                    ca:85:a6:9f:78:36:3d:72:78:d9:6d:2e:a1:49:9b:
                    25:6c:0d:e9:1a:99:8c:29:84:ed:10:40:5c:bb:0e:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:30:CB:20:73:82:9F:34:9E:22:D8:23:94:EC:16:C1:C5:84:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ffc4a12-882b-37f8-a9b6-32ef95c0c462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.202.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:c7:f8:d2:36:a5:7f:73:59:7b:4d:bf:37:a9:8f:57:bd:
         59:b4:ba:62:e2:42:75:c6:12:d9:aa:63:8e:8c:4d:35:64:10:
         20:91:c9:23:d6:87:41:f1:f2:6e:b2:db:9d:51:44:36:be:b2:
         e9:a0:19:66:97:71:bf:bb:d4:d2:0f:5d:0f:1b:35:5f:07:4e:
         df:0d:d0:f8:c6:57:8c:12:e9:98:73:20:7d:c6:89:ac:5e:d4:
         fc:56:dd:05:8b:d0:ef:39:03:2a:83:a8:0d:e1:15:d3:03:f3:
         25:03:fb:55:39:41:ed:cb:0c:ff:0b:df:16:b8:d3:18:b5:7a:
         cf:88:1a:4a:0a:9d:45:d0:52:2a:82:8e:96:a4:c9:9f:b1:ac:
         75:36:c1:3a:83:d2:f9:e6:0d:49:06:77:39:64:14:90:22:8a:
         75:23:4f:d7:ee:95:95:21:63:ab:9d:6d:0d:c8:ad:a7:85:b7:
         34:30:36:aa:91:25:58:d1:fc:94:fa:7a:66:cb:cf:48:8e:6b:
         aa:ae:6c:04:55:90:27:14:92:b6:b8:4e:0f:ca:a2:c3:8d:c5:
         ba:87:13:66:05:08:35:aa:15:06:9d:86:17:6c:11:43:3f:e1:
         7d:c3:69:bb:d9:e4:18:24:4b:9a:a6:f2:a9:f2:d8:15:65:d1:
         7a:60:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:42 2025 by rpki-client