Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/917f03df-f216-3a81-89cd-7f9a01d5b86c.roa
File:                     917f03df-f216-3a81-89cd-7f9a01d5b86c.roa (raw, json)
Hash identifier:          +uautzRodh6kbgaIhVJ1ALCoJSPUPElt6N84Rnmt16U=
Subject key identifier:   27:CE:85:E8:DA:DE:4E:FC:37:B2:B3:27:F2:1F:6F:1D:25:5D:67:67
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0B4F828440AC828D21566C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/917f03df-f216-3a81-89cd-7f9a01d5b86c.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.131.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:4f:82:84:40:ac:82:8d:21:56:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=bade1200-4270-4f6a-ac72-bd714b07e52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:41:62:1d:78:02:4e:b5:4f:df:80:67:4d:
                    af:b3:1a:cc:39:a4:3d:68:5b:6f:2b:36:63:4d:99:
                    d3:52:01:87:59:2e:e3:84:78:32:9b:9c:9d:ee:c6:
                    5c:7e:dd:90:19:42:d2:7c:3c:22:bc:cb:c7:5d:b9:
                    d7:e9:7a:8c:10:71:be:5d:16:24:3d:a3:e2:57:62:
                    1c:4d:dc:d5:f0:2f:f9:52:f1:01:06:f0:93:67:28:
                    a0:59:54:9e:94:4c:5a:21:31:fc:71:5d:7f:98:cd:
                    52:8b:a6:61:1b:2f:53:13:b8:9d:05:24:b7:58:bb:
                    d8:cc:73:67:35:80:bb:22:95:69:d0:4f:b8:8d:38:
                    4a:eb:46:17:f0:65:04:63:a2:47:11:b1:65:74:6b:
                    11:f6:83:20:1e:8e:a4:02:85:65:8d:46:05:08:91:
                    11:f8:d3:8c:df:c8:02:f6:e6:72:a2:52:31:27:9e:
                    ad:59:0b:7b:3c:21:de:a2:5d:95:79:4c:ac:f4:96:
                    34:95:d1:49:bd:4b:f4:db:06:b6:5c:41:96:e9:85:
                    b4:85:d7:26:40:ed:60:0d:bb:29:10:a5:48:65:e2:
                    95:ca:bf:00:d0:46:8e:ab:e9:00:83:2e:ee:07:9d:
                    b1:81:f0:61:7d:d4:63:48:4a:fb:11:a4:88:16:9d:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CE:85:E8:DA:DE:4E:FC:37:B2:B3:27:F2:1F:6F:1D:25:5D:67:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/917f03df-f216-3a81-89cd-7f9a01d5b86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:63:83:9d:0a:d1:39:9c:97:b8:0d:84:b4:a3:49:a8:49:
         1e:b8:e6:2d:98:86:b8:21:52:a8:8f:94:d2:b1:40:3c:c1:02:
         d6:ec:c5:f0:e3:8f:3a:f6:94:11:20:94:06:f3:8e:6b:82:6f:
         82:ac:ef:92:60:5f:5b:fe:c8:74:2c:7c:b2:92:8d:5b:f1:ef:
         0f:48:09:31:40:f5:77:b0:9d:ae:0f:d9:cf:ee:38:af:ae:bc:
         aa:cb:64:e9:9e:02:c8:5b:0a:e6:de:99:e1:6d:fd:f0:9b:3f:
         a9:3f:f3:45:1a:df:97:fb:8d:fe:00:9a:f4:46:13:8f:16:3a:
         5c:bc:f7:15:ec:47:9a:02:a8:6a:77:81:fd:99:e8:8f:a3:dd:
         a3:f3:81:2e:d8:5e:3c:dd:c2:da:9f:a5:d3:f0:22:84:10:cb:
         b0:bd:8c:59:aa:38:f1:3c:d1:9a:94:b9:cd:76:95:5e:d7:e1:
         7e:44:02:61:c2:0a:bd:ec:84:ad:21:2e:0d:86:47:d4:1e:fa:
         62:4c:eb:1e:f2:67:b9:50:4b:45:5f:70:df:3b:15:8b:16:5c:
         a2:df:0c:c1:e1:c7:9a:e6:9f:c8:a8:e4:41:e2:22:4a:a1:80:
         df:f3:34:77:b0:b2:19:00:e1:89:8c:1d:a9:05:f8:af:10:9e:
         d9:ea:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:24:21 2025 by rpki-client