Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/774f5590-4e7a-3d8e-9c4b-b4171ff0e1c6.roa
File:                     774f5590-4e7a-3d8e-9c4b-b4171ff0e1c6.roa (raw, json)
Hash identifier:          RCGU/nqc+LdH4ruM7I0R85AZhS47A/aEP3aiv6kwn9g=
Subject key identifier:   2B:7D:BB:C6:92:86:06:0E:A6:5D:AD:1C:03:C4:76:8F:33:36:BC:6E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBE62C8116D312CAC3B68EF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/774f5590-4e7a-3d8e-9c4b-b4171ff0e1c6.roa
Signing time:             Sat 30 Jul 2022 12:00:00 +0000
ROA not before:           Sat 30 Jul 2022 12:00:00 +0000
ROA not after:            Sun 04 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.126.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:be:62:c8:11:6d:31:2c:ac:3b:68:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 30 12:00:00 2022 GMT
            Not After : Sep  4 04:00:00 2022 GMT
        Subject: CN=74d6d884-d709-4f89-882e-6684e0d2b65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:2a:32:db:2c:f9:d3:92:97:a0:3f:b8:2e:
                    d4:bb:22:ba:d4:3a:e8:9b:0d:3d:af:88:e3:3d:97:
                    d1:a6:0f:b4:bd:7d:6f:c4:f6:ac:b4:c0:cd:08:30:
                    a5:bf:4e:d9:91:de:41:ab:ed:78:46:da:6f:1d:11:
                    03:8a:bc:66:6d:76:c7:8b:bb:f4:14:1c:f0:10:1d:
                    40:6e:da:4d:ea:78:a0:31:72:32:d8:66:96:f4:02:
                    78:c2:f1:c6:2e:bd:51:3f:5a:cf:1c:b3:34:b2:86:
                    75:07:90:07:61:2a:05:d1:31:92:00:f4:a2:02:61:
                    9c:70:0e:13:09:87:23:ac:67:3c:72:3d:b0:e5:cd:
                    cd:a4:6c:ca:2f:2c:c5:25:9a:55:61:85:93:43:21:
                    81:81:5b:1e:f9:e5:6f:ef:c8:30:07:68:54:82:6c:
                    23:d5:45:84:95:8e:51:1e:e2:60:7c:55:0e:f4:d1:
                    61:22:00:c0:74:25:a3:d4:3e:23:1d:24:6e:76:4a:
                    fb:95:6b:a8:b5:13:a0:a1:e9:c9:0e:63:d2:8b:87:
                    ca:a3:d1:97:c4:22:79:d0:e6:18:77:80:6a:c8:78:
                    d1:fc:f8:6d:6d:90:cd:91:94:67:d7:f5:f9:10:f8:
                    7c:b2:be:d4:9d:f9:5c:ee:dd:50:23:3c:dd:40:f8:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:BB:C6:92:86:06:0E:A6:5D:AD:1C:03:C4:76:8F:33:36:BC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/774f5590-4e7a-3d8e-9c4b-b4171ff0e1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:95:a6:4a:e4:ce:a8:e7:0a:ca:01:51:37:22:f2:f4:b0:5d:
         28:9b:02:ba:77:69:3b:a3:cb:45:67:6c:35:e9:65:31:ef:71:
         9e:c6:d6:f7:46:42:8f:64:d3:5a:0e:42:85:f2:42:dd:72:ca:
         04:7a:fa:0d:64:88:cf:96:6b:16:66:10:2d:c0:e7:b3:a5:d9:
         47:4e:94:2e:fa:92:f4:ef:05:4c:85:27:ae:3d:6f:b6:9b:3b:
         0b:ac:a4:14:92:4a:4d:90:bf:c2:91:5d:2d:20:ee:3c:a6:1c:
         5b:b9:aa:18:07:bd:dc:48:74:e1:e6:cc:30:73:db:c4:13:c1:
         f9:5b:1f:9d:8c:a5:76:28:c1:69:8b:f2:4b:d6:a4:94:69:1f:
         de:a9:97:fc:41:ce:d2:2d:dd:4e:4d:f3:10:9e:03:08:7d:c1:
         8f:c9:60:4b:f1:44:76:84:80:b3:2d:9b:da:97:7a:65:5e:66:
         19:32:d8:62:3a:a6:86:23:fb:e3:04:5c:8f:8e:48:19:74:39:
         64:bf:31:94:ea:da:8a:47:b9:db:3a:fc:5c:83:06:00:7b:22:
         e9:7a:43:65:ac:49:dd:26:72:57:cc:03:2b:ee:45:ea:64:e4:
         3d:6f:95:68:eb:9b:45:9c:29:15:15:26:70:db:e7:53:26:5e:
         56:ee:b5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:18 2025 by rpki-client