Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89438d60-3630-334f-95e5-4f0eecda3d93.roa
File:                     89438d60-3630-334f-95e5-4f0eecda3d93.roa (raw, json)
Hash identifier:          Wwn8EHq7eaqBy0cRq/lVKG37JaRJiTz89Er7EpF1V/4=
Subject key identifier:   4E:71:2E:CE:E0:CB:18:05:21:DF:84:42:F9:B9:9F:F3:B4:7D:74:9F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCEE85E148F0DB684C6C66EC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89438d60-3630-334f-95e5-4f0eecda3d93.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.112.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:e8:5e:14:8f:0d:b6:84:c6:c6:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=d333658b-decb-4d39-8ac8-a7ad1c487f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0d:9d:3a:2b:85:53:39:78:bc:ee:5a:92:8e:
                    12:f1:65:b7:dd:c6:61:14:4e:79:76:bd:47:94:36:
                    d3:b5:8d:7a:12:7c:f0:86:e3:56:80:5a:23:5e:7c:
                    5f:5d:38:99:40:85:c4:55:88:d1:1e:f3:a0:43:fc:
                    90:40:a6:1a:74:03:f3:d2:62:10:91:6d:dc:68:20:
                    b3:59:59:d1:f4:9c:6f:83:e9:45:bc:43:4f:25:f7:
                    6f:c3:2e:5c:5d:0a:54:fc:49:4c:f4:b7:72:b0:7a:
                    f1:f5:2a:ce:18:c9:79:32:4b:1e:79:25:3d:fc:4d:
                    03:4c:15:42:be:64:78:e5:95:cc:8f:e5:1d:aa:26:
                    c1:5c:20:d0:ba:9a:d3:a6:92:ca:34:56:b7:80:d3:
                    f7:72:41:c0:b2:89:11:e5:01:d4:74:ae:af:6c:99:
                    3f:fa:e4:3d:b6:a1:c9:80:40:c5:9a:8b:6a:a9:e9:
                    2a:3d:8c:49:48:6e:a7:a6:7d:62:b1:19:d6:7f:6a:
                    da:3c:c7:95:b4:92:6c:2f:4f:f1:6a:82:8a:6e:63:
                    ae:b8:9c:42:b0:3d:cd:ee:2b:31:4b:ab:3e:7b:42:
                    7b:06:ec:16:c4:f1:6b:bd:c0:08:70:42:a3:73:34:
                    8b:e5:b2:06:83:8f:2b:10:77:c0:84:b9:02:04:fd:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:2E:CE:E0:CB:18:05:21:DF:84:42:F9:B9:9F:F3:B4:7D:74:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/89438d60-3630-334f-95e5-4f0eecda3d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:70:11:8f:6e:1c:5f:eb:77:f6:64:37:81:a3:00:6f:77:c4:
         1e:f9:22:f7:67:ee:f3:15:61:e3:b1:af:4d:23:14:90:88:5f:
         b9:e7:d9:64:eb:31:bf:af:16:59:90:7b:37:35:3e:49:4f:ea:
         05:d5:9d:36:61:39:c0:6d:8a:19:27:5c:8c:0e:6a:80:e9:1d:
         7d:60:6d:de:db:99:ef:3a:d3:a3:66:c9:fe:4f:e1:37:7d:e0:
         ae:84:0b:2b:3f:76:d2:71:46:df:9e:e7:87:f2:d5:d5:c8:f9:
         db:7c:61:d4:74:24:9c:79:e1:f5:2a:e3:49:d5:bd:7a:7a:45:
         8a:ac:e7:90:39:f0:dc:e8:75:cc:81:13:5a:cc:b0:75:5f:e2:
         7d:94:a9:43:a8:4b:e7:24:af:82:b9:f6:52:d6:ee:36:68:41:
         7c:60:9b:49:68:2f:59:c2:40:71:c1:1a:56:2c:fb:2d:a3:b9:
         e4:a2:3c:c8:df:bf:df:e2:2e:ac:b4:4c:ca:6f:4a:0d:ed:8c:
         34:ed:46:d0:62:c0:03:06:a9:07:f1:60:0f:e8:a0:0d:a5:e3:
         58:84:d3:a7:b8:bd:92:0f:6d:8f:59:51:9b:62:3d:79:ee:0a:
         25:cb:54:3b:fc:0e:73:b8:bc:fe:ee:71:e9:7f:b0:4f:fd:02:
         d9:ea:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:03 2025 by rpki-client