Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a847ac1e-b4a2-3999-bbf5-94740dbe6037.roa
File:                     a847ac1e-b4a2-3999-bbf5-94740dbe6037.roa (raw, json)
Hash identifier:          xX76rkQmRP9qoCRFz2s8UZiylAdBvZHyYojIE2HP1SI=
Subject key identifier:   1B:52:F2:8E:D5:9B:FD:61:E8:CF:CA:CA:76:2B:86:36:91:60:BD:F5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D80CC9FC3F3E57B3D3B92B100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a847ac1e-b4a2-3999-bbf5-94740dbe6037.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:cc:9f:c3:f3:e5:7b:3d:3b:92:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=587e43cb-c7b8-4364-ae94-f08868286127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:61:7f:47:8f:2c:1f:74:55:92:e7:0e:8f:
                    ad:6f:b5:b8:a0:fb:e8:07:5e:d7:84:e9:df:b3:3f:
                    ab:be:63:d4:82:7e:9f:ae:2c:47:63:fb:24:6c:94:
                    32:0b:b0:a3:68:4e:74:5b:ae:91:69:b0:88:7a:a3:
                    d9:a2:ea:59:e7:b5:31:46:42:a8:a5:fe:3a:60:4f:
                    7c:40:3d:87:54:f5:8a:4d:18:64:7d:09:45:2f:8c:
                    f2:6f:52:cb:cf:61:ee:2b:ad:a0:b4:6d:66:19:7b:
                    3d:0d:d6:b8:c8:61:26:28:1b:15:18:42:c9:41:6b:
                    46:94:33:f3:0a:48:c4:65:66:f0:e3:2c:f0:28:f2:
                    b9:39:54:68:eb:8e:96:5f:d5:ea:25:6a:27:82:55:
                    7e:76:73:79:dd:03:0d:e0:cd:8d:68:9c:a6:8d:42:
                    54:fa:07:a0:f5:52:d7:44:ec:e5:22:1d:4b:43:31:
                    53:7e:fe:f7:05:c1:b2:d9:2c:d5:16:09:a6:db:05:
                    94:97:5c:3a:db:e0:87:50:0a:80:d3:1d:ca:78:e9:
                    75:c9:9e:04:a7:1f:44:75:67:fb:dd:3d:fc:ec:bd:
                    04:bf:27:4b:b0:4e:b5:2e:f6:71:64:d9:40:39:b3:
                    51:dd:7e:01:d8:d4:74:26:95:25:c7:e8:f3:8d:9b:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:F2:8E:D5:9B:FD:61:E8:CF:CA:CA:76:2B:86:36:91:60:BD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a847ac1e-b4a2-3999-bbf5-94740dbe6037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:3f:0e:62:aa:1f:32:26:c1:66:f4:be:77:ef:3c:3f:e1:05:
         c5:cc:71:4e:0b:0f:02:55:76:f7:48:d1:97:49:e4:e4:ea:4a:
         c2:f5:bc:08:0f:c7:8c:b7:dc:24:3a:1a:3b:ec:ca:93:93:c7:
         e4:4e:06:c1:ee:82:94:07:20:1c:bf:e5:90:e3:03:c7:52:07:
         67:31:9b:7b:b3:7a:54:7e:da:8f:9e:d9:85:ef:36:56:2b:a5:
         73:d7:8f:8f:34:ae:15:61:63:17:66:21:f9:81:76:8e:d0:97:
         03:e4:bc:c6:4a:7f:bf:09:fc:74:2e:c1:18:67:cd:53:ff:2c:
         19:50:7f:6c:61:a6:1f:e2:8f:a3:9e:71:eb:56:4f:24:1f:aa:
         a5:b5:50:57:33:5b:08:e7:c2:3e:5c:b9:99:9e:7f:0c:29:35:
         2e:78:43:64:59:c6:79:a1:b5:fb:57:5d:53:c0:a4:21:b3:10:
         4a:1e:5c:bd:b4:6d:d8:93:9f:31:29:02:35:7f:ae:e8:e7:c4:
         4c:07:35:13:51:0f:c1:3d:cd:ad:d1:b4:56:57:81:72:62:0e:
         4b:c9:93:91:15:8c:e7:45:ba:d9:e2:15:f3:30:81:f2:99:64:
         d3:b7:06:64:65:01:4c:b1:ed:71:8f:1f:8d:cc:5f:c1:c5:9b:
         b0:85:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:12:27 2025 by rpki-client