Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99adc516-7a15-34a5-8b87-0c74d721d8c8.roa
File:                     99adc516-7a15-34a5-8b87-0c74d721d8c8.roa (raw, json)
Hash identifier:          zTsEwoknSO5t0uLCgWNnAd2FAMS6iMYdSxhnSmJEAVY=
Subject key identifier:   DE:12:60:88:80:F8:26:6E:3B:A3:24:F8:BE:A5:40:05:23:5A:2F:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B6D13EDD47E6FDFC6C77A080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99adc516-7a15-34a5-8b87-0c74d721d8c8.roa
Signing time:             Thu 26 Jan 2023 12:00:00 +0000
ROA not before:           Thu 26 Jan 2023 12:00:00 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b6:d1:3e:dd:47:e6:fd:fc:6c:77:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 26 12:00:00 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=80c5ad23-0873-418a-971b-5a4998dd0266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:de:26:e5:e8:62:f8:57:a1:19:ef:5d:56:
                    f0:b8:73:87:d9:99:7d:2a:cf:20:69:b1:11:31:ff:
                    1d:83:50:7a:26:b6:d6:f9:3d:ff:e4:39:3f:23:c8:
                    cd:7a:24:8e:04:0f:d4:ec:d0:75:b0:b6:fc:f3:c2:
                    22:c6:8d:58:cf:88:00:70:0a:19:6a:47:82:ec:9f:
                    0b:e2:03:3e:e3:eb:f6:31:24:e2:49:61:59:04:c5:
                    1f:6d:ee:5f:49:ca:53:8c:e2:64:b5:25:a8:a4:75:
                    7c:a6:07:04:84:08:f4:53:bc:d2:ba:27:3d:57:82:
                    3c:d5:ce:d1:ac:af:0d:c3:d3:87:33:f5:12:bd:ad:
                    e3:69:5a:07:4c:94:d0:f3:9a:7e:51:b0:05:46:34:
                    ae:de:50:8d:33:81:75:1d:4d:3f:34:2b:98:b8:bf:
                    d7:a8:01:c4:be:28:bd:3e:45:b5:37:d9:7e:15:f6:
                    19:9f:38:98:0d:f5:a6:59:fd:a6:48:10:2d:20:85:
                    1e:ee:01:b4:93:0d:ed:b2:c5:96:15:05:59:8d:b0:
                    08:48:78:2a:8c:b1:98:dc:3b:81:40:54:58:55:7d:
                    02:9f:59:3d:e9:e0:c2:ad:ca:82:df:17:04:ac:f9:
                    e5:61:de:92:fe:a0:8f:51:77:7f:f9:68:e2:61:5a:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:12:60:88:80:F8:26:6E:3B:A3:24:F8:BE:A5:40:05:23:5A:2F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99adc516-7a15-34a5-8b87-0c74d721d8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:22:e0:24:b2:03:02:68:24:a4:b2:60:95:20:9e:3a:55:
         3a:34:8a:0f:9c:1c:82:fd:ba:da:ec:57:9e:3d:a4:6e:21:c2:
         fa:e9:af:a8:f3:f5:71:ae:97:9c:73:21:45:fd:d3:0a:ec:96:
         1d:e5:cc:fe:6c:e1:6f:19:42:c6:39:6b:f7:4e:cb:bc:4f:e8:
         ec:31:ce:27:22:87:47:25:1d:03:d8:7f:de:07:be:6a:a1:65:
         49:1a:50:4a:5b:2c:c0:34:19:1a:75:60:3d:21:a5:f2:97:47:
         56:d4:a8:82:62:1c:aa:43:c0:87:2f:ce:ba:a5:60:ea:f6:48:
         58:36:0c:2c:c1:30:f3:af:7c:6e:df:43:d3:53:93:41:04:27:
         a0:31:e2:08:d4:c4:1e:2a:68:d4:23:dd:42:87:54:cc:6d:7b:
         76:0c:bb:2f:ca:3f:ac:34:12:09:3a:29:fc:ce:40:61:98:58:
         31:91:1d:1f:ba:64:a3:3d:07:53:89:32:54:a9:a5:69:6f:3c:
         7a:db:37:a2:6b:4a:ba:b9:cc:64:79:f5:fd:b5:3e:26:c6:35:
         da:3a:a3:b2:17:38:9c:be:e9:f8:25:c3:e3:cd:09:f2:e5:fa:
         d0:2f:f4:fc:65:41:1a:37:d6:b0:57:9b:23:f8:83:98:6a:ff:
         9c:42:bd:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEC20T7dR+b9/Gx3oIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNjEyMDAwMFoXDTIzMDMwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ODBjNWFkMjMtMDg3My00MThhLTk3MWItNWE0OTk4ZGQwMjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcTeJuXoYvhXoRnvXVbwuHOH2Zl9Ks8gabER
Mf8dg1B6JrbW+T3/5Dk/I8jNeiSOBA/U7NB1sLb888Iixo1Yz4gAcAoZakeC7J8L
4gM+4+v2MSTiSWFZBMUfbe5fScpTjOJktSWopHV8pgcEhAj0U7zSuic9V4I81c7R
rK8Nw9OHM/USva3jaVoHTJTQ85p+UbAFRjSu3lCNM4F1HU0/NCuYuL/XqAHEvii9
PkW1N9l+FfYZnziYDfWmWf2mSBAtIIUe7gG0kw3tssWWFQVZjbAISHgqjLGY3DuB
QFRYVX0Cn1k96eDCrcqC3xcErPnlYd6S/qCPUXd/+WjiYVqWdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN4SYIiA+CZuO6Mk+L6lQAUjWi94MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTlhZGM1MTYtN2ExNS0z
NGE1LThiODctMGM3NGQ3MjFkOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgOoi4CSyAwJoJKSyYJUgnjpVOjSKD5wcgv262uxXnj2kbiHC+umvqPP1
ca6XnHMhRf3TCuyWHeXM/mzhbxlCxjlr907LvE/o7DHOJyKHRyUdA9h/3ge+aqFl
SRpQSlsswDQZGnVgPSGl8pdHVtSogmIcqkPAhy/OuqVg6vZIWDYMLMEw8698bt9D
01OTQQQnoDHiCNTEHipo1CPdQodUzG17dgy7L8o/rDQSCTop/M5AYZhYMZEdH7pk
oz0HU4kyVKmlaW88ets3omtKurnMZHn1/bU+JsY12jqjshc4nL7p+CXD480J8uX6
0C/0/GVBGjfWsFebI/iDmGr/nEK9Ug==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:01:54 2025 by rpki-client