Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a1b2eaf-411a-335b-b10a-e447fc78cc20.roa
File:                     8a1b2eaf-411a-335b-b10a-e447fc78cc20.roa (raw, json)
Hash identifier:          n+cIkT0xEdfXdf7HXDrkRR2LS0FbMgl3AxrOUHU7Y34=
Subject key identifier:   52:8E:36:43:06:8E:1A:4A:B3:E3:D1:A4:73:23:A4:76:5F:EC:29:E8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408E5D8798B5EE6A7F9CFEC080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a1b2eaf-411a-335b-b10a-e447fc78cc20.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.44.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8e:5d:87:98:b5:ee:6a:7f:9c:fe:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=13f6194b-90a5-407f-af71-aa7343c7a9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:61:06:19:31:3e:e7:9d:1f:aa:b8:62:e8:
                    59:70:2c:57:e2:05:4b:be:83:1f:16:40:6e:60:86:
                    69:a2:af:2d:02:a5:58:f5:bc:c1:88:e9:b9:ed:b6:
                    ec:f2:ae:27:80:c7:5a:bb:a6:d6:d4:f2:cb:d0:ea:
                    43:84:53:7c:91:b8:38:db:bf:bf:38:0f:a7:41:b6:
                    d5:e6:a3:d4:38:00:18:ed:0a:bd:88:90:91:66:4b:
                    4f:2a:76:0d:fe:3d:18:77:3c:2e:ff:a1:39:00:22:
                    ab:0a:d4:d7:01:31:e9:ed:d2:d3:88:6b:c1:25:76:
                    34:ac:0d:fc:a9:f4:32:88:f2:98:3d:c6:a5:ac:1b:
                    49:de:d0:b3:aa:e5:0e:a9:58:ff:12:14:48:d5:b1:
                    c9:de:52:fb:30:7f:9f:0a:3e:d0:1e:db:14:ec:86:
                    37:c5:b3:5c:ab:05:ed:fc:a6:67:45:e8:53:c5:3e:
                    f1:7a:48:c5:76:cf:49:cd:b4:45:e3:51:f4:7c:b8:
                    f3:1d:22:54:73:0f:61:5d:64:3c:b3:30:a7:db:6c:
                    42:8e:57:ec:22:d3:98:84:aa:1c:43:b8:7c:3f:c8:
                    01:d2:5c:7c:4b:cd:aa:01:02:ab:51:87:98:d3:32:
                    10:b0:e7:a2:6c:6d:39:7c:c3:79:cf:f6:54:cd:07:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8E:36:43:06:8E:1A:4A:B3:E3:D1:A4:73:23:A4:76:5F:EC:29:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a1b2eaf-411a-335b-b10a-e447fc78cc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:a0:84:8b:72:bd:2d:c9:27:31:c9:d6:a5:55:b4:73:95:
         3f:b9:88:82:55:a6:eb:f2:48:ed:06:b5:78:b9:cf:dd:44:cc:
         2c:0d:f7:75:e2:94:5c:ab:17:3d:3e:55:f3:f6:da:73:ec:37:
         c1:ac:55:d9:25:3e:82:b6:1c:07:fe:26:ad:f0:5c:e9:bd:35:
         4f:c0:69:5a:0a:cc:ac:07:90:60:8a:f3:30:5d:7e:44:be:ae:
         44:1b:00:54:de:2b:33:b8:f0:e3:3a:64:06:bc:ba:4c:57:3b:
         cc:0e:69:bc:9f:a1:76:cd:32:79:46:0e:be:38:64:bf:0b:2e:
         df:67:d1:28:bb:c3:5b:00:35:eb:35:ae:ed:72:d0:75:a8:06:
         db:df:76:f4:fa:87:19:00:cc:df:25:de:aa:41:fd:01:f8:21:
         10:53:d6:48:93:97:69:e5:44:6c:9a:64:28:74:09:e2:ad:6d:
         2f:75:98:d5:79:66:c0:fa:05:f7:7f:56:9c:79:e0:51:ea:5e:
         c3:7d:cd:35:d0:e2:c0:19:a7:e9:38:73:4b:54:29:fe:31:65:
         ed:10:4a:da:3a:6b:56:7a:41:b6:c5:33:b0:54:85:87:7d:81:
         0f:0d:10:37:13:b6:80:95:47:83:7a:41:5b:07:9d:b5:bc:fb:
         c1:b1:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:12 2025 by rpki-client