Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f7926c1-5140-3373-86e9-79f426040250.roa
File:                     7f7926c1-5140-3373-86e9-79f426040250.roa (raw, json)
Hash identifier:          ne7zNyfTEIelv3V6BhYJNUBQh7RLtnXkkNRW/UfHXZs=
Subject key identifier:   9B:47:E0:42:4E:B1:A8:05:93:25:29:EB:7E:A3:8F:D3:18:0B:47:E4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCE678EF4EF305AEF94E50280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f7926c1-5140-3373-86e9-79f426040250.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.186.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ce:67:8e:f4:ef:30:5a:ef:94:e5:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=d0e2f3a7-69c5-4bdd-b900-4b8c23aae09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:76:1c:93:d2:0c:9b:04:d0:7a:49:c5:30:
                    da:f9:14:1e:b8:83:93:5f:3f:bd:fb:3f:fd:55:8b:
                    c7:d4:4b:40:61:28:9d:54:9c:a1:34:04:5b:e6:6c:
                    02:0b:a9:63:11:ed:dc:00:8c:cb:37:c2:20:a2:9e:
                    7d:ed:c8:6d:fe:cb:3f:77:a4:e3:58:61:58:a9:f0:
                    13:ae:c2:a8:86:1b:09:99:f8:e7:02:be:3e:4e:c2:
                    a3:48:71:5d:db:06:8c:8d:20:65:1a:42:20:65:5e:
                    9c:9e:12:a3:d6:c3:af:c9:fe:78:75:e2:fe:90:9b:
                    cb:a1:a4:b6:91:1e:3f:ca:49:b5:38:69:4d:3e:44:
                    6f:d8:60:00:ab:94:4a:e1:de:05:b6:5a:1d:88:4c:
                    e6:0c:55:a6:bf:41:ee:c2:96:80:75:90:a7:ab:ca:
                    37:f9:35:07:b1:f8:a4:61:7b:a2:da:c9:c8:fc:c3:
                    3e:de:5a:c9:31:da:ca:b4:90:c8:45:8d:63:6c:f3:
                    97:3a:57:3f:ef:ae:4a:53:79:37:79:13:de:e1:b4:
                    cf:b4:ea:0a:29:d5:50:29:16:e6:f4:d7:23:4a:fe:
                    54:27:8e:96:d3:9f:47:df:76:3c:c5:73:e7:3d:0a:
                    39:2e:e7:08:33:a7:94:5b:b4:9e:68:48:82:36:81:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:E0:42:4E:B1:A8:05:93:25:29:EB:7E:A3:8F:D3:18:0B:47:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f7926c1-5140-3373-86e9-79f426040250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.186.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:fe:69:8b:72:e4:8b:1f:94:19:d2:55:5d:4e:a6:9a:d7:
         23:82:08:20:61:09:fb:a5:80:e5:15:66:00:ee:3c:b8:f5:51:
         24:8b:75:9a:ee:f3:35:ef:07:0d:64:ba:d7:e3:bd:c7:69:dd:
         97:65:17:ac:6c:89:eb:6a:88:ea:c9:9c:31:69:95:6c:77:09:
         49:87:aa:8e:36:50:3c:4c:ea:e9:04:a5:64:70:71:01:d3:7a:
         3f:9c:e8:60:60:8d:7b:71:5d:87:0a:a3:5b:54:ad:5b:09:52:
         93:40:40:e8:f3:30:e2:2d:b7:db:6b:4c:46:e8:bc:61:9c:c8:
         8b:43:d4:48:4b:f5:7b:69:4b:b7:e0:96:ab:49:8f:fb:69:bb:
         58:65:10:25:4a:b6:48:f4:30:cb:03:26:af:f2:0c:15:f0:b6:
         67:27:c0:63:df:70:69:8f:6e:4e:3f:63:bc:c9:51:4b:b2:f8:
         2f:1b:35:ae:46:f9:94:db:95:30:7a:68:93:eb:b6:2e:bd:75:
         89:a0:fc:4b:32:ec:d8:0f:36:40:be:36:d8:9b:9a:49:8c:13:
         ec:77:3a:0d:bb:28:d3:5e:5d:e7:d0:95:91:12:5f:4c:da:42:
         09:05:76:f4:03:7e:05:24:54:10:d8:1f:05:48:c8:e7:c5:67:
         91:fb:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:55 2025 by rpki-client