Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99525871-1fb2-3dd1-ae5b-4ee73660df21.roa
File:                     99525871-1fb2-3dd1-ae5b-4ee73660df21.roa (raw, json)
Hash identifier:          N34eoyjYIu6fRlGap4i560p5OA6fg8uEdwgOxpNa0aA=
Subject key identifier:   95:A3:E7:F7:63:21:68:97:7F:64:DB:91:20:4C:99:A8:3E:BE:0D:4F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAC5C20155DA2FE59252EBAA8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99525871-1fb2-3dd1-ae5b-4ee73660df21.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.154.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:5c:20:15:5d:a2:fe:59:25:2e:ba:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=15aa22d3-132f-4149-9c46-b7fadf0da46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:10:5c:60:5d:07:f2:d0:22:26:14:f8:69:fb:
                    56:ad:ba:40:69:87:b2:d2:a4:df:d9:4c:c5:40:5d:
                    e3:3f:34:fb:4f:52:b8:df:18:c8:2e:85:5c:cb:e5:
                    48:9c:d6:ac:86:c7:a5:c7:ea:c1:96:14:39:3f:6d:
                    b3:51:6e:72:e4:bf:8b:12:3d:06:b9:61:b3:09:39:
                    0a:3a:05:6e:54:fa:05:ef:f9:5a:46:3e:21:30:07:
                    8c:b0:7e:36:44:d9:59:f8:64:de:47:de:fd:95:63:
                    ed:b6:e9:b6:64:8f:57:5c:59:fe:0e:c7:1a:4c:b3:
                    33:0a:87:e1:7a:ed:a3:97:fc:be:9e:8d:35:a7:60:
                    9a:fd:96:4d:45:12:47:da:1d:b2:63:6a:88:a9:43:
                    0a:71:58:af:05:87:70:84:98:76:48:92:27:e4:4a:
                    b6:89:88:61:e4:1a:12:c0:10:27:42:26:de:09:59:
                    03:49:49:f7:52:ac:c7:1a:6e:45:03:14:48:b6:3a:
                    c3:eb:d5:43:74:0a:12:bb:9a:77:16:2d:41:9a:72:
                    98:69:c8:16:08:7d:bb:b7:49:2d:e2:b4:6f:69:33:
                    df:17:6f:18:8d:a7:51:44:f1:f7:d3:76:ff:8b:e1:
                    7f:38:4b:e3:c0:c7:c1:3a:e2:24:ee:67:25:61:88:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:E7:F7:63:21:68:97:7F:64:DB:91:20:4C:99:A8:3E:BE:0D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99525871-1fb2-3dd1-ae5b-4ee73660df21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.154.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:49:f0:66:73:c6:6d:d7:94:52:4c:21:37:32:39:56:85:
         f8:22:a1:a7:8a:51:89:ed:48:ba:6e:91:54:f9:0b:f8:99:bd:
         ad:06:89:8d:0f:13:37:d0:5f:04:3f:5e:83:a6:4a:ac:33:43:
         13:f7:45:7a:75:e0:4a:80:62:94:de:ca:7c:a2:40:6a:91:eb:
         4c:47:f0:de:88:33:73:4b:d2:d5:1f:3e:90:a3:ab:0c:b4:44:
         bc:07:7b:f8:a5:88:7d:c4:79:fa:b8:70:8c:46:5d:87:1b:62:
         23:57:8f:76:b0:49:0b:6b:36:02:d0:c4:99:b8:fe:ce:05:72:
         7a:69:45:04:2b:37:a9:72:d0:5d:1d:7b:93:22:f3:c3:03:b5:
         39:49:18:7f:b9:34:ec:3a:c7:5c:8e:9e:34:3c:a0:c6:cc:68:
         f5:f2:ed:c3:56:7c:ec:85:9d:62:d3:ba:55:26:18:57:ef:6d:
         8e:b4:ac:d6:03:9d:e4:bd:b1:44:a2:31:5d:ce:4c:f8:4d:ee:
         91:1c:08:7c:54:24:62:74:23:35:22:c8:30:b5:e5:bc:dd:7f:
         98:31:b2:04:09:b5:14:cb:eb:f4:67:8c:0c:75:d8:1a:4c:17:
         12:0f:ff:8f:34:dc:24:06:49:8b:ef:56:af:7f:3c:3a:d8:28:
         c8:1e:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:55 2025 by rpki-client