Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7741e6ee-bbb3-3b9b-8de8-b87d7c76d022.roa
File:                     7741e6ee-bbb3-3b9b-8de8-b87d7c76d022.roa (raw, json)
Hash identifier:          eYcBPMFFmlASeR5zG576vQghu5VRQUAJgrqQ+zY2p2w=
Subject key identifier:   BE:7D:5D:A5:21:90:43:A0:C5:BA:C3:3C:D2:FB:4B:3D:49:86:54:F2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840409AD66D91A5F210084F0E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7741e6ee-bbb3-3b9b-8de8-b87d7c76d022.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.189.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:40:9a:d6:6d:91:a5:f2:10:08:4f:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=8bed8813-e7eb-4839-9edb-9d9292d387f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:83:b5:f7:72:45:66:4b:8b:74:33:96:b7:
                    2d:5e:27:1e:7b:14:88:c9:15:2c:32:a1:e7:cd:ae:
                    5c:5f:0e:8b:6c:4d:f6:6f:13:e8:f0:75:6c:d7:32:
                    39:fa:16:74:8f:d2:9d:3a:7f:c0:84:89:0a:f3:a2:
                    9d:42:91:2d:d7:34:40:af:20:74:4a:42:69:cb:5d:
                    06:13:d9:19:5e:7d:20:2c:53:de:82:64:ea:fc:35:
                    42:e4:0e:95:4c:bc:88:2c:72:c6:61:44:b2:07:a8:
                    a7:cf:67:90:99:17:e4:e7:3b:da:f5:6d:00:bd:e1:
                    45:17:94:4d:47:f4:bb:05:a6:8c:22:cc:39:0e:1d:
                    28:a3:58:cd:35:67:c0:17:68:d2:95:b3:4a:6e:bc:
                    3b:f6:60:6c:03:fc:80:ff:0d:c4:fb:48:7b:e6:b9:
                    0e:ca:d4:85:c1:78:4c:4b:2a:dc:69:98:93:c0:67:
                    1e:17:d2:05:ea:7d:00:78:bf:49:4b:75:35:21:4e:
                    94:c3:de:a0:00:41:77:c6:16:d5:e7:3f:0b:88:a6:
                    3f:fa:2e:71:c3:dc:59:69:bf:28:de:e0:80:2f:c7:
                    af:0e:be:cf:d1:62:09:85:c5:4b:0d:d7:98:b6:53:
                    2b:bc:03:d0:f3:70:85:9f:06:23:f0:d7:80:58:6d:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7D:5D:A5:21:90:43:A0:C5:BA:C3:3C:D2:FB:4B:3D:49:86:54:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7741e6ee-bbb3-3b9b-8de8-b87d7c76d022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:20:91:93:9e:17:cb:bb:de:d6:7a:9a:2e:08:ea:bb:ac:bc:
         8b:c7:20:46:fa:50:c8:46:d9:51:d5:e6:48:25:ec:8a:03:c1:
         5a:6e:b4:bc:d2:d8:23:8b:07:05:8a:5b:d3:08:52:b8:9a:9d:
         c9:ab:5b:f9:86:85:ec:55:82:60:21:c5:7b:10:9d:70:6b:4e:
         82:e2:3f:00:a4:3c:22:d6:69:67:98:43:06:cf:35:7e:c1:99:
         17:cc:4d:b6:b4:08:e6:6d:c2:3c:ec:2b:fa:e5:d5:68:14:01:
         59:a0:8d:b7:79:b3:de:9e:ec:80:82:50:de:8b:86:4a:75:05:
         c8:60:0b:76:73:32:bd:d7:90:f1:d3:0f:49:94:44:ec:8b:23:
         98:6a:12:73:c3:89:a7:9a:fd:2d:49:6e:df:0a:e0:8f:c7:83:
         18:0c:53:82:08:25:2b:f3:35:f7:85:e2:8b:5d:e4:fd:40:6c:
         de:3f:a8:dd:21:da:f3:4d:40:91:df:09:d2:b3:b1:94:11:2a:
         4c:51:48:c5:af:c6:5f:f2:13:be:4b:18:59:47:37:9d:d1:4f:
         c2:5b:7f:27:92:e3:f0:98:9a:ed:9c:58:3c:60:d2:62:9e:11:
         e0:0f:d2:d5:99:6d:8d:1e:65:81:26:7f:2f:fb:14:19:d1:53:
         3a:15:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:01 2025 by rpki-client