Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/830d0746-515c-3a46-ab12-4dc49300f924.roa
File:                     830d0746-515c-3a46-ab12-4dc49300f924.roa (raw, json)
Hash identifier:          KXD8Rb0hClb/AuYZMaodShbrq+GkeZyXYjmNQQ40V+8=
Subject key identifier:   27:D7:92:C2:4E:75:DC:D9:8B:11:5A:08:22:18:79:B8:30:7A:B2:2C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0C863D7C5E2138E1BB6C1380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/830d0746-515c-3a46-ab12-4dc49300f924.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.110.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:86:3d:7c:5e:21:38:e1:bb:6c:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=3aab88bb-2883-4e9c-8c58-54556495f2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:ff:44:f5:23:18:f3:80:5d:8c:b2:7f:9e:
                    f2:38:96:8e:47:6b:cc:93:00:86:4d:17:7d:a5:ee:
                    09:d5:a5:72:f4:2f:6c:2f:77:4c:99:38:87:18:3c:
                    23:4c:6e:1a:2c:99:26:f3:c3:3c:76:d9:75:27:75:
                    83:6e:77:49:23:fa:a9:ad:3c:09:c6:b2:67:d6:a2:
                    24:97:12:f7:5c:74:fa:33:82:d0:f5:77:62:1a:a7:
                    2f:ac:62:af:90:97:47:b1:bd:9d:d1:9d:5d:24:e7:
                    0b:8d:26:ea:2f:a0:da:23:75:2f:a2:88:e0:17:a8:
                    7e:d6:3d:58:0a:b3:87:07:a0:a7:0c:93:36:22:32:
                    33:93:1b:50:2b:24:71:94:f4:aa:10:ae:a2:1e:d6:
                    ea:01:a2:96:5d:e5:a3:37:19:ce:af:54:00:c4:58:
                    0c:3d:d4:80:bf:fb:72:b7:38:05:b2:18:c0:dc:8e:
                    b4:fa:25:ff:a0:ee:03:53:18:a9:57:97:df:bd:39:
                    da:64:d5:42:a8:d9:10:ea:eb:a0:98:1e:23:d2:66:
                    e3:19:10:50:63:cb:a4:08:de:fd:05:f6:b6:b6:34:
                    cb:32:32:eb:02:fd:0f:51:0a:5f:bb:a2:cc:83:48:
                    b3:f7:6a:4a:3a:02:67:80:c0:82:72:15:50:ef:91:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D7:92:C2:4E:75:DC:D9:8B:11:5A:08:22:18:79:B8:30:7A:B2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/830d0746-515c-3a46-ab12-4dc49300f924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:f6:15:6b:36:c0:bc:5f:01:54:13:d2:6c:cf:55:9c:e5:
         82:ed:8c:c0:25:a8:60:8b:05:3a:f9:c8:cc:0c:8d:8b:d9:84:
         1a:c3:b5:15:79:18:0c:3b:76:52:55:33:60:1b:57:56:1f:ac:
         ef:20:45:d7:36:0f:84:15:f8:cf:e5:91:9a:5b:1b:31:a1:77:
         fd:ff:35:d5:ef:6f:f2:7c:32:0d:a1:c0:6f:57:a6:56:26:39:
         1e:3f:4d:f2:57:c1:26:6e:95:27:99:21:50:19:ec:eb:8b:3a:
         ec:43:8f:8f:8b:1a:0d:b2:5a:4a:86:64:8f:6c:32:8d:4d:18:
         a9:46:01:14:c6:25:d2:9d:2d:68:09:ee:86:3c:1f:31:50:ed:
         1e:e6:db:bd:bf:68:80:2b:dc:a1:33:be:79:08:e9:1e:24:98:
         21:a3:ec:7c:1a:26:a1:f2:f3:b2:a9:0c:e8:5d:b4:90:15:0c:
         4d:5b:6e:45:35:38:75:52:4f:c6:92:e4:82:ed:30:1a:e6:e7:
         4a:d0:6c:6b:8c:0c:6b:e5:c1:d6:70:be:58:bd:28:44:e6:d2:
         cc:c9:9f:67:2b:90:01:31:71:65:d8:cf:d2:cb:ba:ac:10:3d:
         65:fb:8c:bb:13:d4:24:4c:d1:42:36:ff:fe:55:d5:ec:14:77:
         63:a6:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:16:04 2025 by rpki-client