Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92369464-91f8-3d37-8165-dedd123d4cb3.roa
File:                     92369464-91f8-3d37-8165-dedd123d4cb3.roa (raw, json)
Hash identifier:          fo5R8mekNSFTOYraFd8apy2278+RudVeO0vd/nzbPt0=
Subject key identifier:   1F:B7:AC:5E:4B:B8:B4:21:92:A7:C0:0F:CA:7F:FD:6B:2A:83:E6:4E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCEF6F14191EF772195DE8860
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92369464-91f8-3d37-8165-dedd123d4cb3.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.146.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ce:f6:f1:41:91:ef:77:21:95:de:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=5288c5db-56f3-481e-94d5-f6564ed3a883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:52:d2:e7:8e:0e:78:ed:a6:63:bc:bb:73:
                    c3:c2:4d:13:62:fd:bd:51:9b:8e:05:a0:9c:e1:41:
                    31:bc:8e:f4:51:f5:2e:80:1c:dd:4d:42:95:9b:6d:
                    25:99:29:27:a4:56:6a:23:c2:44:d8:04:5c:1a:0b:
                    c4:4d:9c:69:79:90:3c:58:1b:34:7b:4c:9b:91:c0:
                    10:4e:24:52:c5:23:f9:ec:5c:d0:a2:db:1b:61:b9:
                    dc:c3:6c:ac:c9:2d:34:db:c7:6b:8b:71:72:7a:0a:
                    a6:e5:7c:d7:18:6e:d4:5a:0b:22:4c:2d:40:37:e6:
                    1d:c0:e8:8c:d2:bf:ec:3c:3f:99:7e:ff:1b:49:66:
                    bf:14:18:1e:70:0e:58:03:21:5a:a8:b2:7e:d5:dd:
                    d5:f9:9d:b0:a8:8b:89:48:e8:78:37:0f:a9:37:dd:
                    6c:6a:6b:d4:0a:02:dc:5b:35:58:d5:7c:ad:9a:9f:
                    2e:e4:55:2e:4b:a3:b2:72:2a:7f:f3:cc:cd:9e:7c:
                    4c:0d:45:81:09:0d:03:66:f0:fb:26:05:55:38:00:
                    71:55:e9:39:d5:16:c5:a8:21:04:7c:35:23:92:db:
                    bd:10:75:c7:90:dd:7d:56:ce:f8:f5:49:41:99:06:
                    47:5a:1d:5c:13:d4:5d:9b:e8:24:49:56:9c:7d:d5:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B7:AC:5E:4B:B8:B4:21:92:A7:C0:0F:CA:7F:FD:6B:2A:83:E6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92369464-91f8-3d37-8165-dedd123d4cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.146.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:84:3c:31:3e:72:ed:d3:c3:08:5b:c3:b8:dd:d5:17:5f:b5:
         bf:27:b7:33:1e:a4:04:d8:3c:b9:dd:0a:73:17:0f:41:65:97:
         75:ed:1d:08:9d:86:cb:5a:0f:ef:2c:25:f3:41:b0:5b:18:bc:
         5c:3b:76:e2:d4:2e:6b:d1:ca:da:34:09:91:6c:73:f3:78:ed:
         ec:8d:ec:e4:2d:3a:f1:04:e8:8b:80:c3:ce:71:19:c6:76:47:
         cf:ba:4c:06:d4:38:ba:20:40:14:f1:77:e6:cc:f1:71:ed:6d:
         47:8f:32:42:3e:d7:64:46:ce:21:c4:9a:a0:9d:6b:fe:7f:b1:
         36:c0:43:dd:dd:97:eb:7e:d4:e8:c7:0f:8e:f6:25:e3:ef:23:
         7a:8f:7d:dc:ff:7e:fe:c2:3d:c1:21:cc:c0:48:41:65:2f:d2:
         f2:1f:5a:d8:5c:2d:3a:e8:e6:a8:2e:42:d4:a0:78:f9:b6:43:
         e1:eb:6e:52:cd:85:b1:7e:95:e9:76:44:59:09:55:92:ef:98:
         0a:0b:1f:ee:aa:60:e7:14:0b:46:24:69:1e:da:f6:23:20:61:
         00:9d:f7:96:13:65:8d:08:f7:13:26:dc:95:a5:a4:f3:50:f0:
         25:73:fa:60:9d:5a:e0:59:1e:48:f7:31:5d:c4:b7:88:81:d8:
         1e:bd:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:16 2025 by rpki-client