Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92cd74af-ca0a-3322-aced-c199332319e4.roa
File:                     92cd74af-ca0a-3322-aced-c199332319e4.roa (raw, json)
Hash identifier:          upMvxWu0+ZCdRMCkaRLpTX9JM94GDcxfsrjbRiAQHXA=
Subject key identifier:   C1:4F:92:6A:FD:D0:FF:D5:C8:84:F1:89:BB:0E:EF:B7:8B:E0:AA:68
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584046732F1C64425A0A0FBB4604
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92cd74af-ca0a-3322-aced-c199332319e4.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.128.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:73:2f:1c:64:42:5a:0a:0f:bb:46:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=4dbcbcd7-9bbb-4b81-972b-59fe097dfbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:da:4e:be:7b:08:8d:52:54:2c:c5:4b:4e:
                    7b:39:d7:f7:65:ef:13:b4:0e:ba:12:d2:27:df:5a:
                    c3:98:be:30:31:63:54:bf:af:85:1a:7a:09:e7:28:
                    77:08:db:90:63:e1:5f:fb:4c:f5:d5:bf:0a:c6:bf:
                    05:8f:31:ae:c0:06:1b:70:27:ce:65:13:51:b0:5c:
                    00:23:e8:ac:82:52:ad:6b:8b:37:e0:49:50:28:9e:
                    69:48:34:53:32:8d:72:9f:7e:47:51:7c:da:1c:ef:
                    40:e6:6f:35:fc:ee:96:b5:76:09:bf:55:fa:e1:bf:
                    84:17:85:8a:e3:88:b9:ee:aa:31:ae:ac:da:0c:8f:
                    98:0f:95:1f:0f:1b:9b:4b:ec:e0:66:80:a4:51:c6:
                    e7:83:83:3a:9a:68:bb:71:3d:0d:29:2d:bb:16:32:
                    c7:c3:3e:48:6d:13:64:6b:e7:15:b5:10:9f:15:cb:
                    98:0f:67:dd:8b:84:47:b1:6b:1e:70:2e:0b:26:3d:
                    95:df:53:3d:57:99:09:52:30:f3:bf:2a:29:17:fd:
                    94:ba:e1:e8:f5:de:61:d3:1a:4b:74:52:74:3e:91:
                    c8:a8:c4:58:85:a0:48:5f:63:2d:04:14:c1:6e:dd:
                    94:7f:0a:7d:e0:b3:2a:49:ac:39:11:78:b4:10:46:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:92:6A:FD:D0:FF:D5:C8:84:F1:89:BB:0E:EF:B7:8B:E0:AA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/92cd74af-ca0a-3322-aced-c199332319e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.128.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6a:cc:7d:12:e3:8c:7b:e1:54:a7:e5:39:93:ec:7e:8d:c3:
         7f:d5:43:f7:44:bc:c7:0a:37:a6:0c:1c:de:9f:0a:e8:3d:36:
         dc:2f:cc:6a:83:a6:a6:a6:b2:bd:a2:65:22:20:3b:34:4d:ba:
         17:51:d2:b1:94:e5:37:0f:a0:f1:b2:44:7f:02:16:7f:5c:84:
         71:ab:19:92:ae:ab:f2:d3:11:a5:3f:5d:cb:15:6d:94:47:d9:
         fa:d9:61:e1:fa:ed:07:8d:f3:76:8a:82:00:bd:9e:b5:96:62:
         bb:46:b4:73:a7:97:3f:a7:cc:a1:5f:bf:21:cc:88:91:5f:24:
         30:6c:61:90:e5:32:a8:ac:39:d7:b1:ff:dd:37:9b:27:50:78:
         45:97:f1:a2:80:9a:2f:82:4a:30:34:31:20:b3:df:b8:27:ba:
         23:c7:fc:85:ee:35:52:0a:6f:97:67:fb:6c:16:1b:3c:3c:3f:
         68:5f:8c:2f:ff:80:5e:2d:fe:2a:5f:fc:c0:ec:70:a6:22:13:
         80:c0:75:0d:dd:5f:8c:ad:12:da:4e:44:c2:45:5f:4d:d0:eb:
         f4:24:83:46:68:6e:ac:ae:e0:83:6d:17:c6:78:9d:86:c6:87:
         34:cf:1c:55:74:c0:ab:70:6c:b0:d8:6e:51:4d:f3:75:13:c5:
         82:2d:21:f6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBGcy8cZEJaCg+7RgQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NGRiY2JjZDctOWJiYi00YjgxLTk3MmItNTlmZTA5N2RmYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOraTr57CI1SVCzFS057Odf3Ze8TtA66EtIn
31rDmL4wMWNUv6+FGnoJ5yh3CNuQY+Ff+0z11b8Kxr8FjzGuwAYbcCfOZRNRsFwA
I+isglKta4s34ElQKJ5pSDRTMo1yn35HUXzaHO9A5m81/O6WtXYJv1X64b+EF4WK
44i57qoxrqzaDI+YD5UfDxubS+zgZoCkUcbng4M6mmi7cT0NKS27FjLHwz5IbRNk
a+cVtRCfFcuYD2fdi4RHsWsecC4LJj2V31M9V5kJUjDzvyopF/2UuuHo9d5h0xpL
dFJ0PpHIqMRYhaBIX2MtBBTBbt2Ufwp94LMqSaw5EXi0EEaVXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMFPkmr90P/VyITxibsO77eL4KpoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTJjZDc0YWYtY2EwYS0z
MzIyLWFjZWQtYzE5OTMzMjMxOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEoAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiGrMfRLjjHvhVKflOZPsfo3Df9VD90S8xwo3pgwc3p8K6D023C/MaoOm
pqayvaJlIiA7NE26F1HSsZTlNw+g8bJEfwIWf1yEcasZkq6r8tMRpT9dyxVtlEfZ
+tlh4frtB43zdoqCAL2etZZiu0a0c6eXP6fMoV+/IcyIkV8kMGxhkOUyqKw517H/
3TebJ1B4RZfxooCaL4JKMDQxILPfuCe6I8f8he41Ugpvl2f7bBYbPDw/aF+ML/+A
Xi3+Kl/8wOxwpiITgMB1Dd1fjK0S2k5EwkVfTdDr9CSDRmhurK7gg20XxnidhsaH
NM8cVXTAq3BssNhuUU3zdRPFgi0h9g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:31 2025 by rpki-client