Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85f26ec1-d6ca-3189-a027-90bc01b3995e.roa
File:                     85f26ec1-d6ca-3189-a027-90bc01b3995e.roa (raw, json)
Hash identifier:          1lt+VnHyepcuMw+z6rL8JUUR38QN+Ot09qlzFc3ukPg=
Subject key identifier:   27:25:55:17:64:B5:19:78:C0:60:57:DE:6B:2D:A4:86:48:01:FF:8E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7DF7B8D679B42D7951C91680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85f26ec1-d6ca-3189-a027-90bc01b3995e.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.201.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:f7:b8:d6:79:b4:2d:79:51:c9:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=55f7e44b-8463-40c8-a066-e9451df78b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6c:39:af:27:cc:1e:70:e6:24:b0:98:68:a1:
                    2b:27:e4:a8:5b:ed:6e:c1:f1:ba:ca:d6:16:2f:a5:
                    49:ac:e7:37:71:26:20:5b:41:19:28:c9:db:66:71:
                    c2:f0:a2:97:b7:05:e0:10:f3:67:e4:32:38:50:1b:
                    33:98:e1:cb:f5:f8:92:a6:58:44:a4:1c:65:fe:5b:
                    bb:51:82:1e:87:06:78:77:b4:97:24:b9:d6:76:14:
                    ae:dd:d3:65:85:1e:99:c7:4f:a9:70:14:86:f9:94:
                    fe:cd:82:dd:76:1f:64:c0:bf:35:2c:df:b3:05:5b:
                    af:2d:a9:56:55:9b:d7:ec:4f:65:7f:e7:c5:d1:0c:
                    cc:ce:13:4c:05:b4:3e:ca:6f:3d:dc:60:bf:30:ac:
                    95:d8:77:95:e3:05:fd:48:07:5c:1f:b1:c6:b5:f3:
                    6f:a5:17:38:f8:b8:34:39:94:3f:bd:f8:69:a2:3e:
                    6a:54:f5:a4:35:f6:4f:74:32:b5:7a:c4:5c:76:2d:
                    6c:b0:66:18:d8:11:2b:5b:4e:7b:8a:c4:ba:38:de:
                    b2:18:c8:4d:8c:07:1e:1d:0f:22:21:c2:32:f8:aa:
                    21:96:46:31:58:c5:1f:a7:74:47:a6:36:9d:5b:50:
                    d8:b9:d4:59:12:c5:1d:01:a3:97:6e:41:91:01:c9:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:55:17:64:B5:19:78:C0:60:57:DE:6B:2D:A4:86:48:01:FF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/85f26ec1-d6ca-3189-a027-90bc01b3995e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:19:68:9f:79:0a:f8:8f:70:e1:f2:23:5a:b3:a0:ea:71:
         b9:24:5b:36:dd:30:8c:47:61:d0:b6:0b:f1:ea:96:91:3f:c7:
         ed:46:84:a8:a1:3e:e6:fb:5d:ba:89:b1:87:6b:e3:e5:37:2b:
         e6:a4:52:26:c8:4b:b0:9c:1d:1f:ab:eb:e8:35:00:e5:d0:f8:
         53:c5:a7:b8:6e:64:7d:fb:14:c1:9d:8a:e8:2f:6b:e3:91:42:
         c5:95:ed:32:57:78:2c:1e:88:1e:62:21:42:39:30:ed:7e:06:
         19:1d:26:56:28:0e:8a:95:01:57:85:f7:64:82:91:f2:0f:69:
         75:6b:35:e2:d6:95:32:a5:5f:87:25:ef:a6:31:d4:87:ef:c3:
         d1:37:48:58:d8:44:ea:b8:0c:8d:4f:10:3c:bf:b1:a3:a5:ca:
         df:4b:ec:12:f1:a0:30:2e:a6:63:32:98:96:4d:23:35:e2:21:
         38:9d:a2:b3:25:22:5f:c1:7e:69:d0:48:45:e8:b7:72:52:a0:
         3e:46:0e:2f:18:6f:3e:94:3c:be:f2:b8:86:7a:be:4b:ae:87:
         bd:ae:3d:37:3e:23:b4:f2:9b:3b:06:9a:63:58:ae:89:f4:10:
         63:f1:28:ac:34:4f:0e:1f:2e:56:76:89:b5:c1:6b:b0:e6:05:
         eb:79:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:40 2025 by rpki-client