Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5685abb-21f0-3f07-ac4b-5843ecc45bce.roa
File:                     a5685abb-21f0-3f07-ac4b-5843ecc45bce.roa (raw, json)
Hash identifier:          lSc0lS4FK5moFAjuN/fsibkXMsIQsRikOiGnsohmdTA=
Subject key identifier:   4C:20:D5:69:9F:4B:0D:1D:A6:B8:3A:71:AD:68:48:A2:94:19:DC:21
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406AC54AC291C97ACDCB8CDE70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5685abb-21f0-3f07-ac4b-5843ecc45bce.roa
Signing time:             Fri 30 Dec 2022 12:00:00 +0000
ROA not before:           Fri 30 Dec 2022 12:00:00 +0000
ROA not after:            Sat 04 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.148.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6a:c5:4a:c2:91:c9:7a:cd:cb:8c:de:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 12:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2023 GMT
        Subject: CN=36afd5b7-8c65-4b4f-8315-435bf42d7581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:4b:c2:da:e2:18:4c:12:7a:b0:50:98:be:
                    8f:62:15:d2:92:eb:76:a5:9e:36:26:26:c3:81:42:
                    e1:d9:d9:e4:c7:d6:40:0e:dc:f2:7d:bb:60:04:1b:
                    6e:3e:f4:cb:2c:09:12:7d:30:8e:4d:28:30:de:62:
                    fe:23:3f:e4:8c:85:44:15:e6:b1:78:69:c9:94:6e:
                    63:15:de:57:c4:d5:72:a1:5f:60:7c:ea:d6:38:32:
                    04:b7:04:74:52:cd:0c:ca:8f:c1:3d:25:16:92:3b:
                    5d:dd:22:80:46:8b:e2:14:b3:ad:ed:73:ca:9c:f3:
                    9e:67:01:93:e5:6e:74:b2:8a:99:2e:03:50:6d:d0:
                    ca:4e:f6:56:55:4f:7a:23:17:c4:1b:00:76:97:63:
                    34:25:7a:2d:b7:9e:df:d9:c3:60:19:df:3f:e4:00:
                    fe:d5:82:44:46:71:08:89:9b:75:87:b2:c1:6f:42:
                    e0:96:aa:ef:8a:79:3d:f8:c9:cf:f4:1d:e9:cd:aa:
                    a1:c3:9d:26:7e:96:4c:d2:76:ef:31:20:7a:f6:02:
                    e9:ea:ad:02:79:1d:11:9a:02:17:92:bf:f2:a2:42:
                    66:8a:b2:2c:76:16:87:65:da:42:73:9f:e2:61:ed:
                    6b:73:4e:ef:af:6f:93:10:2d:f7:f1:82:a1:7b:43:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:20:D5:69:9F:4B:0D:1D:A6:B8:3A:71:AD:68:48:A2:94:19:DC:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5685abb-21f0-3f07-ac4b-5843ecc45bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.148.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:4a:9f:3d:1a:0e:19:4c:03:cc:e1:af:ba:52:4e:4f:b1:
         09:3e:bd:bc:ab:5e:30:b9:5e:bf:61:b5:75:18:77:06:1d:a2:
         69:a2:f9:26:fa:85:9c:09:e0:b5:eb:72:2c:e5:4b:5a:f0:a4:
         8a:56:dd:55:77:5d:4e:bf:1b:87:4c:ea:b7:96:f9:71:a4:ea:
         9d:6f:44:2e:01:16:e2:e9:05:82:ba:16:4d:e0:29:da:dc:83:
         2a:89:35:b3:20:6f:88:c5:f0:0e:a6:60:e1:0a:71:94:97:43:
         d3:f9:89:a0:cb:39:b6:58:7f:be:b3:59:33:be:32:ab:4f:62:
         23:98:73:44:12:8c:32:97:f7:8e:84:41:8a:4d:3a:0b:34:28:
         1b:b6:3c:8e:2e:fc:9e:ba:ed:e2:e0:28:63:c1:8d:83:dc:77:
         e5:3e:81:4c:68:02:bc:ec:fd:77:da:6a:75:ed:96:c8:33:46:
         d0:3f:2e:bd:45:ad:ca:30:99:ab:de:b8:8c:27:86:53:ff:0a:
         e8:a4:4e:94:87:98:4e:82:3d:11:2e:e4:5a:5e:da:13:9c:77:
         58:a5:65:64:65:e6:cb:be:64:5b:53:d0:91:94:05:3f:fc:26:
         62:70:a4:d3:cd:7f:d0:c5:12:f9:a0:7c:3c:e3:1a:e2:30:94:
         27:e1:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:05 2025 by rpki-client