Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92710084-aa1e-3267-a7e6-1bca9f98b6c8.roa
File:                     92710084-aa1e-3267-a7e6-1bca9f98b6c8.roa (raw, json)
Hash identifier:          9y0PDk8S49Ys0UhRIpZ81HjcqNVx6d9GR1g4ns/3zao=
Subject key identifier:   7F:9B:F9:0D:BA:C4:A3:42:BD:F5:F8:22:4C:06:18:82:AA:6B:47:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D32653E5CA9B9336CE74C4780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92710084-aa1e-3267-a7e6-1bca9f98b6c8.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.93.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:65:3e:5c:a9:b9:33:6c:e7:4c:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=cb3a48af-e487-4e02-a36a-551906ec158a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:cc:06:75:52:d3:1d:54:43:45:51:33:91:
                    f4:74:e0:cd:85:a9:b9:c0:c9:ab:4c:33:d1:0d:8d:
                    78:9d:c1:82:d3:95:2d:84:ef:08:34:8a:4b:08:43:
                    27:04:02:73:e9:e2:fe:be:d3:76:f2:86:1d:5e:9f:
                    1c:2b:e6:c9:5f:98:37:b7:64:17:3e:33:2b:8a:4d:
                    2d:64:c6:c7:e7:9c:39:48:91:8b:95:b4:63:98:5f:
                    ef:9d:c0:6f:0c:20:f6:d8:f5:1e:51:7b:c4:b7:b2:
                    f2:e6:85:cc:6f:33:0b:33:38:67:09:68:28:8e:7d:
                    45:03:1b:84:d8:cc:ec:e0:8a:22:f8:54:ca:09:a1:
                    da:d5:14:94:48:e0:8a:05:62:fa:9b:cb:39:58:7f:
                    da:87:98:41:20:c6:03:8f:23:1d:74:fe:eb:de:2d:
                    7c:e3:e5:94:2f:9c:a1:22:ff:26:cc:f1:4d:e0:51:
                    c4:4e:35:cc:c7:19:5c:21:ae:ca:b2:23:61:f2:32:
                    ef:e6:01:a4:13:5a:a7:d3:46:58:61:c3:bc:b1:c8:
                    2b:3c:f6:db:e0:6f:db:34:6c:c4:26:51:71:6c:8c:
                    3b:1e:a6:4b:63:95:d7:4b:16:2d:79:af:c0:9a:6f:
                    0b:fc:23:a6:19:b7:ce:0b:75:80:7e:65:73:bc:37:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9B:F9:0D:BA:C4:A3:42:BD:F5:F8:22:4C:06:18:82:AA:6B:47:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92710084-aa1e-3267-a7e6-1bca9f98b6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:c5:37:bd:99:40:b2:9b:e3:18:f5:a0:5a:df:2d:12:46:
         ec:b1:92:31:47:74:43:18:c1:8f:41:f3:3c:4a:38:75:94:20:
         e9:3b:4b:7f:0d:a1:82:c0:c8:8c:bc:16:5b:47:da:bc:38:b6:
         44:d2:83:c5:88:ec:dd:a7:0d:f9:23:e4:47:51:ed:51:a6:2a:
         da:70:12:1b:f7:a0:c8:6e:b0:5c:01:9a:97:66:ac:7c:3f:3d:
         69:79:cd:27:b4:c3:e9:03:7e:79:ba:d0:ab:d9:cd:c3:06:3c:
         fd:5a:ea:5e:49:40:eb:21:8d:78:6a:e2:87:00:6e:3c:f7:0f:
         d3:e7:8e:f8:b3:6b:e9:5f:ac:70:78:60:c4:30:21:25:07:63:
         a5:c6:00:77:e7:0b:09:00:5d:ca:5d:0f:8c:01:c9:3b:7f:7f:
         1a:e6:b1:67:09:c3:69:80:11:e8:65:e5:37:a0:a9:c2:eb:6f:
         ab:7d:51:c3:fe:8a:02:90:54:fe:90:cf:68:69:8b:a4:cc:c7:
         68:8f:ab:69:91:7a:3a:ac:ab:bb:56:09:44:de:c5:ec:f7:58:
         3f:eb:ff:09:68:44:f1:88:5d:ec:2f:24:c0:9c:e5:8e:3f:f3:
         c5:3c:3d:78:2e:0e:f0:0b:14:4c:92:56:85:9b:ea:cd:ee:0a:
         4a:7f:30:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yZT5cqbkzbOdMR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2IzYTQ4YWYtZTQ4Ny00ZTAyLWEzNmEtNTUxOTA2ZWMxNThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCnMBnVS0x1UQ0VRM5H0dODNham5wMmrTDPR
DY14ncGC05UthO8INIpLCEMnBAJz6eL+vtN28oYdXp8cK+bJX5g3t2QXPjMrik0t
ZMbH55w5SJGLlbRjmF/vncBvDCD22PUeUXvEt7Ly5oXMbzMLMzhnCWgojn1FAxuE
2Mzs4Ioi+FTKCaHa1RSUSOCKBWL6m8s5WH/ah5hBIMYDjyMddP7r3i184+WUL5yh
Iv8mzPFN4FHETjXMxxlcIa7KsiNh8jLv5gGkE1qn00ZYYcO8scgrPPbb4G/bNGzE
JlFxbIw7HqZLY5XXSxYtea/Amm8L/COmGbfOC3WAfmVzvDc9swIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH+b+Q26xKNCvfX4IkwGGIKqa0fhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTI3MTAwODQtYWExZS0z
MjY3LWE3ZTYtMWJjYTlmOThiNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEl0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX3fFN72ZQLKb4xj1oFrfLRJG7LGSMUd0QxjBj0HzPEo4dZQg6TtLfw2h
gsDIjLwWW0favDi2RNKDxYjs3acN+SPkR1HtUaYq2nASG/egyG6wXAGal2asfD89
aXnNJ7TD6QN+ebrQq9nNwwY8/VrqXklA6yGNeGrihwBuPPcP0+eO+LNr6V+scHhg
xDAhJQdjpcYAd+cLCQBdyl0PjAHJO39/GuaxZwnDaYAR6GXlN6Cpwutvq31Rw/6K
ApBU/pDPaGmLpMzHaI+raZF6Oqyru1YJRN7F7PdYP+v/CWhE8Yhd7C8kwJzljj/z
xTw9eC4O8AsUTJJWhZvqze4KSn8wUw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:21 2025 by rpki-client