Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fe0cb3c-ba04-3686-97d0-3f1cbd4de1c3.roa
File:                     9fe0cb3c-ba04-3686-97d0-3f1cbd4de1c3.roa (raw, json)
Hash identifier:          tv/5h7uSGzbVWDE28/CjtthNHmZH31g9alZz381FHMc=
Subject key identifier:   8F:C3:51:B3:8F:3F:04:A2:9D:2B:0E:D6:37:31:A4:71:72:4E:44:A3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAC79B6881DE62CC3C228A100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fe0cb3c-ba04-3686-97d0-3f1cbd4de1c3.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.108.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ac:79:b6:88:1d:e6:2c:c3:c2:28:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=ed8fb502-012b-40fd-b4a8-89a651291d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a0:8f:55:48:2e:53:f1:88:ca:f5:6a:34:ef:
                    a8:9f:b0:89:c1:72:7a:9b:4e:1f:d5:b1:f8:6c:68:
                    fc:0c:47:6d:a0:6a:10:b2:ec:eb:1f:7c:f6:f9:d0:
                    76:0c:b8:cf:04:5b:d5:6d:eb:a3:07:67:cb:45:09:
                    04:4e:cd:d3:11:27:b6:29:08:2f:ed:01:81:49:f6:
                    f4:26:2b:22:cf:bb:05:94:cc:6e:0d:39:43:5b:4e:
                    32:bc:70:ad:ca:85:4a:aa:42:17:4b:12:4b:cd:8e:
                    bd:22:17:63:dc:31:b0:b2:8c:df:72:ce:aa:57:aa:
                    a6:7d:61:5b:45:9a:9e:0f:5d:70:0a:8a:cc:02:c3:
                    85:c9:b1:3f:4d:21:bf:df:f4:e3:79:dc:44:d2:ce:
                    47:dd:b5:2a:b1:eb:8d:dc:07:07:91:82:72:d1:10:
                    93:a1:fe:ae:c7:9d:6c:0f:77:01:cd:97:94:e6:61:
                    ac:dc:1e:3a:e2:82:02:32:f0:04:b5:83:99:a0:b2:
                    36:43:5d:52:f1:51:61:79:99:9d:49:c9:45:71:da:
                    d0:8a:26:af:30:f6:67:5f:28:bb:91:1f:51:78:90:
                    ed:79:dc:72:dd:3a:65:b9:e1:f0:17:d2:a7:b7:95:
                    70:e2:cd:10:98:37:c4:7f:ce:9a:2e:46:9b:22:78:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C3:51:B3:8F:3F:04:A2:9D:2B:0E:D6:37:31:A4:71:72:4E:44:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fe0cb3c-ba04-3686-97d0-3f1cbd4de1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.108.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:4c:a5:50:e8:f8:a7:b1:ba:56:2a:d9:ee:59:44:b7:78:
         1f:68:8e:26:cb:53:aa:cb:37:d5:fc:04:28:d5:03:6a:25:2f:
         4a:94:78:1f:c7:b9:15:71:ac:05:76:c7:b0:ed:bc:90:03:3c:
         19:cb:4c:8a:e9:fd:03:69:86:e2:96:8b:17:60:a2:36:00:f3:
         e0:13:c0:cb:42:49:82:75:1c:6a:4d:d1:6a:52:5e:a7:87:ea:
         e5:46:d1:b7:69:58:e2:79:23:15:dc:98:14:cf:55:3e:39:46:
         28:61:88:4d:c9:10:69:9c:15:8c:01:3f:58:58:86:a2:6e:ec:
         35:ca:85:f4:00:c1:7d:40:06:01:fc:44:04:1e:89:9d:ee:f7:
         14:8c:6f:05:01:eb:a2:5d:f8:c6:b4:3a:6f:21:69:90:30:af:
         64:f6:1e:b8:24:2a:9b:de:51:59:44:40:3a:33:41:27:65:2e:
         c5:f8:67:e8:27:5e:97:3b:d5:03:d2:89:0e:c4:69:60:7d:be:
         c8:31:fa:01:7e:f0:70:d9:6a:ee:9b:86:e7:63:f4:70:1b:54:
         51:91:47:52:c7:56:7e:34:ab:45:68:8b:8a:7c:04:6b:62:40:
         b7:78:2a:6d:25:73:89:ce:f4:9d:af:4d:06:ef:61:8c:71:d8:
         04:ce:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:33 2025 by rpki-client