Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84c1ef45-1385-3b21-9b27-4ba258ea14d6.roa
File:                     84c1ef45-1385-3b21-9b27-4ba258ea14d6.roa (raw, json)
Hash identifier:          T23UT3l00BZ+m+4ST17PewVP6T+80SnWBG7bkJmPmEg=
Subject key identifier:   B9:49:72:B9:8E:93:DB:4E:C8:F3:10:2C:7A:5A:8E:50:8F:AF:BC:B2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F334A1ED202EC99DE0E32EC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84c1ef45-1385-3b21-9b27-4ba258ea14d6.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.184.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:33:4a:1e:d2:02:ec:99:de:0e:32:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=2127375c-1500-48c4-9b59-c1fd4044a6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:fa:1d:28:e9:46:00:c4:16:1d:d6:89:53:
                    84:b6:c4:82:44:11:95:c8:76:8b:b1:f8:17:2e:fa:
                    d1:be:a8:80:27:7f:bb:95:b0:45:45:90:47:46:06:
                    ed:96:d8:ec:82:e1:6a:ac:f5:1a:90:25:59:ef:65:
                    80:49:d0:04:d6:e3:62:40:b8:8d:1a:75:24:58:58:
                    17:8a:a5:94:9d:9e:6f:42:34:c0:9c:6a:ad:13:9e:
                    39:d9:ce:df:ca:86:b7:cf:70:fc:ab:2d:30:92:5c:
                    f3:ec:65:56:9b:ad:3f:fa:c3:dd:6b:ca:05:9a:a2:
                    74:bf:82:56:f7:f6:0f:97:e8:e6:46:32:5b:ad:da:
                    f9:60:b1:7e:fd:a6:0b:92:2b:f1:f6:43:7b:88:ea:
                    5d:63:7f:1c:cd:c2:94:88:16:ee:5c:fc:4e:d9:00:
                    ad:5a:5c:3b:47:f0:c1:17:6c:25:e4:0a:7b:4a:43:
                    47:ce:56:7b:85:39:93:1d:ba:ba:fc:b3:c5:d8:47:
                    ef:a8:ca:70:42:45:01:ca:1e:86:95:a7:88:27:31:
                    e3:62:97:bb:06:4a:d6:27:5b:29:72:3d:a2:72:21:
                    46:7d:79:ac:04:67:da:04:8a:b8:3e:b3:a4:2e:b6:
                    f2:17:d1:d5:0a:ba:e1:8a:00:19:7e:79:16:c1:a9:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:72:B9:8E:93:DB:4E:C8:F3:10:2C:7A:5A:8E:50:8F:AF:BC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/84c1ef45-1385-3b21-9b27-4ba258ea14d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.184.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1e:dd:cb:b5:ff:40:2e:44:a3:80:3c:d4:6a:71:5c:0d:e5:
         59:87:49:63:d5:57:66:69:f5:f9:5a:7b:81:ca:ff:2c:8c:be:
         cf:cd:3d:63:d0:9c:3c:35:e8:8e:d9:32:6b:d4:7d:e8:88:8b:
         1f:17:f0:01:4c:69:c4:64:05:3b:7d:02:90:59:8d:e2:32:66:
         1e:7e:51:84:97:86:ba:f4:6b:78:fb:d7:7d:90:5e:16:79:f9:
         25:17:0d:3a:c0:c4:ba:6d:46:f8:a7:9b:dd:52:13:51:94:27:
         45:ca:4b:27:d5:1e:29:fe:f9:4d:50:57:fb:8c:92:7d:22:f0:
         25:05:d9:f5:e9:ea:f5:c3:38:f0:7b:76:3b:73:e0:d3:c5:4e:
         c5:03:07:5c:f8:99:04:24:cb:b1:c7:d6:bb:de:2c:66:f4:8d:
         31:c9:93:a7:91:2f:6d:7a:73:52:70:80:b7:92:b2:f1:62:44:
         01:2f:54:71:16:fb:79:dd:10:f0:a7:8f:d7:2c:cb:03:2a:f8:
         4d:93:17:61:28:48:87:f8:ee:eb:7a:38:ff:70:d1:09:61:73:
         1c:e0:22:46:2e:9c:4d:02:03:25:0d:95:df:f2:65:51:c6:8b:
         a5:15:23:e4:8b:2d:f6:10:1d:e9:6c:07:77:83:24:50:9f:9a:
         40:4c:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:13 2025 by rpki-client