Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7612c958-ac4f-37ff-88c0-70e0bbf38917.roa
File:                     7612c958-ac4f-37ff-88c0-70e0bbf38917.roa (raw, json)
Hash identifier:          QSpLgzkLVgbkg3JfOY0ae1YD336BTfIi9nW2gltt8PE=
Subject key identifier:   38:C5:71:34:97:6D:A8:A8:A3:67:97:1F:09:CC:36:AE:E1:7D:E1:FB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D809823EB4F110005159AD700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7612c958-ac4f-37ff-88c0-70e0bbf38917.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.72.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:98:23:eb:4f:11:00:05:15:9a:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=d653aaaa-e5c7-4c70-b75f-9fc1bdb3db79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:41:b1:a2:01:b8:22:18:16:bc:c5:db:4c:50:
                    2a:d2:72:10:3b:17:71:6a:3b:48:71:43:42:34:15:
                    d6:71:cd:18:06:09:e6:c3:85:a2:42:c5:2b:79:61:
                    42:1b:b7:49:fa:cb:97:2b:83:2f:63:7f:86:38:b5:
                    35:e9:63:ea:2e:0f:ff:0f:ae:78:6f:fe:ab:25:1e:
                    c1:69:6e:a1:5c:21:5f:0b:c9:44:df:74:c8:bb:41:
                    b1:80:f7:1e:de:db:7d:a7:81:1a:b9:a0:12:cb:d3:
                    24:71:6d:e8:01:65:e6:3f:72:b9:01:a5:b6:22:73:
                    0c:81:f1:e5:ee:fe:ce:89:71:08:6e:32:93:6c:a0:
                    07:f0:91:b1:f8:25:f2:3c:63:30:fd:a5:7c:22:9e:
                    c7:6d:95:04:ff:f9:93:c9:d0:5b:12:1d:aa:75:6f:
                    3d:91:05:de:75:47:e3:7d:a0:d9:14:2f:03:9a:74:
                    fa:c6:d2:9e:96:9d:12:06:42:c5:e9:c1:79:d3:ce:
                    91:4c:2f:9d:9d:5d:31:e1:3e:e8:ce:3e:ea:43:93:
                    f6:9d:4d:4a:94:10:8e:bc:cb:3c:b8:3f:74:19:6d:
                    db:ee:5e:3e:08:34:48:f8:fc:c9:82:77:63:eb:2f:
                    b6:9a:f9:3a:e5:ea:e4:3a:0e:3a:60:65:9e:46:c2:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:71:34:97:6D:A8:A8:A3:67:97:1F:09:CC:36:AE:E1:7D:E1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7612c958-ac4f-37ff-88c0-70e0bbf38917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.72.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:e3:9f:32:59:7d:74:0d:8d:02:fb:5b:6f:0b:4f:1f:64:
         00:22:2f:60:0d:6a:d2:7d:eb:5b:38:eb:76:ff:26:74:72:15:
         94:3e:93:18:0a:d2:14:a3:0a:c0:8c:ef:79:0e:be:42:6e:90:
         16:4b:ba:29:47:a8:48:79:61:d0:8b:c2:f4:dd:7e:e6:d8:31:
         41:22:29:5d:7e:66:18:38:6f:79:b4:2e:77:ea:62:11:ce:e5:
         3a:7f:51:39:19:59:61:83:eb:52:2a:6d:82:41:98:be:d1:e3:
         6c:b1:27:8e:67:4f:b0:c3:95:55:81:6e:85:59:e8:68:3a:38:
         c9:7f:f0:12:3e:ca:44:33:7b:2b:6d:34:a3:7a:71:71:4e:54:
         57:60:a0:35:cc:c0:fe:95:1b:e2:1e:b2:3b:86:d2:b6:a7:85:
         dd:0e:33:e7:4c:76:9f:97:64:82:25:04:40:31:fb:68:5e:87:
         b0:7c:80:0f:6e:8c:be:54:c6:11:91:f7:ee:90:9e:86:dd:33:
         ee:2d:9c:52:47:05:70:d9:53:b7:32:73:da:b6:a7:50:03:3b:
         18:3b:06:6e:3f:a5:32:ed:98:5e:a3:6c:d2:37:09:2e:fd:28:
         82:b2:9c:86:34:ee:14:92:88:91:6b:94:29:a5:8f:66:0b:83:
         6d:2b:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:32:01 2025 by rpki-client