Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ad2ff6b-f48f-3800-bd12-31df5ebe0c91.roa
File:                     7ad2ff6b-f48f-3800-bd12-31df5ebe0c91.roa (raw, json)
Hash identifier:          Hh/O0ParA3OX2gHmL09s3qWYYMqYkke3EeG3HdESUhU=
Subject key identifier:   D9:47:90:72:57:9B:8E:BD:3D:FC:A4:48:79:02:5F:F9:56:D5:41:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DFB41529C84DA9CE19C369E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ad2ff6b-f48f-3800-bd12-31df5ebe0c91.roa
Signing time:             Sat 21 May 2022 12:00:00 +0000
ROA not before:           Sat 21 May 2022 12:00:00 +0000
ROA not after:            Sun 26 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.57.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fb:41:52:9c:84:da:9c:e1:9c:36:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 21 12:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2022 GMT
        Subject: CN=c69650d7-1174-45eb-a2f1-e54d7c7a1c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f5:fd:04:eb:4d:a0:56:68:1c:75:78:d5:25:
                    7a:3c:99:9e:58:36:b2:52:e2:6e:7b:18:5f:4d:4e:
                    0f:89:14:45:a9:5b:c3:3b:e2:09:59:74:77:8d:49:
                    a9:34:94:d8:c2:d2:5d:5c:b5:86:ca:c4:64:66:60:
                    f5:dc:97:04:d8:94:41:e2:89:c4:19:ee:32:1f:da:
                    fa:2a:1b:90:a7:c8:42:8c:e3:fd:d4:7c:c4:6a:e6:
                    09:c6:e1:0b:c1:bf:b1:eb:45:d7:a0:f3:10:45:55:
                    b3:26:78:50:31:d5:bc:11:98:f9:3c:bb:f9:33:34:
                    a2:cb:9c:d5:ee:26:73:f0:28:5e:cb:ff:40:ec:fe:
                    d1:4a:bf:13:cc:6d:12:94:93:62:14:ff:c4:e6:e4:
                    d7:17:34:09:27:6e:2b:27:53:f1:ae:5a:b1:f0:f4:
                    ab:df:2b:d9:81:89:fe:bf:2e:9e:67:68:35:ac:ab:
                    82:69:7f:14:f4:94:b4:68:60:33:eb:82:a4:86:60:
                    d0:75:a6:28:66:57:e9:09:75:43:ee:11:0a:8b:d7:
                    de:40:1f:28:76:65:8e:38:5d:a1:b1:50:f8:b6:5d:
                    02:cd:d5:9e:dd:52:a5:68:f3:99:dc:35:d6:5f:0e:
                    19:17:36:de:35:d6:4a:62:8f:ad:28:22:a5:64:27:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:47:90:72:57:9B:8E:BD:3D:FC:A4:48:79:02:5F:F9:56:D5:41:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ad2ff6b-f48f-3800-bd12-31df5ebe0c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:16:68:ce:66:62:79:58:44:22:06:91:7a:35:9a:10:f6:bb:
         63:56:2c:f0:07:45:f5:cb:15:52:db:10:c6:fc:32:a6:9e:3b:
         bf:6a:03:18:91:ce:4b:97:a8:23:16:27:c5:27:c4:8c:3d:22:
         87:3d:28:63:c1:1b:bb:c5:e8:da:98:6c:3c:cb:a7:eb:ce:3b:
         a7:56:0d:3b:50:85:cc:d7:be:0c:82:b4:52:4d:99:10:98:4c:
         1d:3f:98:8a:50:e5:d2:c2:b3:2e:86:f5:8d:38:cf:0b:cb:39:
         e5:06:84:64:c9:e0:f3:b7:aa:f7:48:ea:ee:aa:6a:e3:75:e9:
         7f:ed:7e:41:85:87:e0:20:fb:ec:23:af:84:15:c3:70:f6:d0:
         2b:37:22:3a:ff:f2:05:da:cb:89:07:94:c7:7d:83:85:64:10:
         78:82:61:c7:7b:26:ca:5a:f3:9a:66:4f:fb:2a:e4:f5:4e:05:
         46:0b:dc:7b:d1:f4:51:dd:73:df:66:61:d1:e2:a6:48:00:62:
         d7:75:1d:42:0b:f8:0e:00:7f:4f:4d:eb:8d:cf:07:7b:60:3a:
         b5:05:4e:f8:9c:af:36:d8:3c:c8:3c:2b:ad:21:1d:35:a6:08:
         f7:ce:4c:15:df:86:a1:a4:5c:2a:d5:e1:bb:e3:79:d6:95:8d:
         06:7e:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:51 2025 by rpki-client