Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7306965-ef75-3524-862e-ed81a0820845.roa
File:                     a7306965-ef75-3524-862e-ed81a0820845.roa (raw, json)
Hash identifier:          OBrxvGg/olIkrogorYgL6rab4wYI7cfcHPT1VAShGl4=
Subject key identifier:   CB:D4:D4:51:DD:DD:DD:E7:55:AC:59:67:B3:65:9E:9F:75:41:22:59
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F83C14DCFD948B83C847FCC60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7306965-ef75-3524-862e-ed81a0820845.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.91.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:83:c1:4d:cf:d9:48:b8:3c:84:7f:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=4926ea7c-f3c2-41cc-bb1d-bf7aab97ff23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:7e:29:65:cd:df:ea:c8:f3:08:84:25:51:
                    c7:0b:1a:ed:32:d9:6e:66:65:59:8b:57:fc:80:2e:
                    84:ec:cb:24:3e:51:e7:36:23:50:d9:93:fc:15:a8:
                    19:24:7b:fc:9b:76:31:72:53:dc:52:b5:4f:09:69:
                    05:dd:47:6a:f8:6e:7d:92:8f:38:e8:42:af:bd:2d:
                    f5:0a:86:e0:67:ba:61:12:59:c0:4c:bd:67:16:9d:
                    59:88:e5:9a:da:8f:36:b6:47:b9:ec:27:47:45:49:
                    9e:86:fb:31:8e:f6:cc:8d:de:6a:d2:46:a6:a3:cc:
                    c5:0c:61:19:1d:4a:ec:92:82:b3:20:5e:ae:ee:da:
                    bc:ff:7e:48:a9:8d:d7:2f:ec:44:da:9c:43:15:57:
                    f7:3b:3c:90:e9:bc:c8:e5:ea:a9:6f:3e:fc:0b:da:
                    b0:11:e4:9e:7e:7c:88:b6:3a:3a:59:34:4c:9d:30:
                    e5:ca:fb:6e:7a:d6:3e:4d:f1:6c:92:4c:1f:d8:b3:
                    3a:00:d7:66:31:c1:56:55:43:c7:d3:ca:7c:0d:2d:
                    8a:4f:a1:48:87:bd:37:dd:fa:22:37:54:73:40:b0:
                    25:93:fd:00:e9:90:fb:d9:e2:1c:3b:7d:53:a2:b4:
                    6c:d3:e7:9c:ca:de:15:09:58:bb:6c:f6:17:b6:58:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:D4:51:DD:DD:DD:E7:55:AC:59:67:B3:65:9E:9F:75:41:22:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7306965-ef75-3524-862e-ed81a0820845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ce:45:9f:fe:30:ba:ac:d9:26:06:51:9a:16:e8:fb:a6:86:
         7d:23:49:c3:91:0d:61:6b:89:c4:e8:4f:13:c8:b8:95:4d:88:
         9a:6e:7e:f8:b3:13:c5:09:25:8f:ad:be:52:69:23:e4:47:ca:
         b1:27:20:81:b0:67:36:d4:71:a9:e4:22:3a:70:c3:16:51:72:
         c3:a2:dc:48:c4:5b:86:e0:a9:68:0d:71:59:bd:80:a3:e8:9b:
         bc:92:80:cd:b1:b7:0e:d5:3f:7c:91:72:e4:fc:db:3d:30:9c:
         60:b3:aa:00:da:98:2a:5a:b8:b7:0d:5c:9d:dc:d4:cb:21:1b:
         f7:78:62:b9:3d:04:0d:77:49:f9:15:2b:56:9f:6d:42:4a:00:
         26:81:fd:64:26:30:51:7d:33:94:e1:83:d1:33:9f:3f:2f:f4:
         58:67:b2:fe:9b:35:94:66:ca:54:8a:63:4e:aa:3e:e8:30:52:
         a9:ce:55:57:5f:51:67:01:ba:ab:22:b2:3e:23:c7:19:30:78:
         33:cb:1e:fc:51:f5:7c:ee:b8:b0:15:65:26:c7:b3:71:69:9d:
         28:68:b4:28:c2:10:5a:ba:38:a1:8f:36:5e:45:2b:b4:c7:fc:
         7a:17:cc:91:be:0c:c5:33:1b:06:46:50:4f:eb:9b:73:2e:ee:
         6d:97:2a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:39 2025 by rpki-client