Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acb9848e-bdb5-3943-9cc4-adba59427f09.roa
File:                     acb9848e-bdb5-3943-9cc4-adba59427f09.roa (raw, json)
Hash identifier:          Gdr5367V1tdfbECVKjSudHiwCZCbXeSUZMpMKyU2BZ0=
Subject key identifier:   5E:F5:D6:84:94:23:C4:55:C2:38:D3:CB:61:90:67:0D:98:DA:86:1E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858408F7FE9C4A4AFF8A7D90D5A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acb9848e-bdb5-3943-9cc4-adba59427f09.roa
Signing time:             Thu 12 Jan 2023 12:00:00 +0000
ROA not before:           Thu 12 Jan 2023 12:00:00 +0000
ROA not after:            Fri 17 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.112.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8f:7f:e9:c4:a4:af:f8:a7:d9:0d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 12 12:00:00 2023 GMT
            Not After : Feb 17 05:00:00 2023 GMT
        Subject: CN=91c14e08-9fe4-43eb-91e6-302c850a74ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:84:da:dd:e3:42:fe:06:db:74:a4:d9:2e:
                    af:c4:dd:88:35:08:9e:69:58:7a:20:55:77:3c:bd:
                    55:39:b7:31:31:f6:5a:c6:2c:c8:05:a4:4a:30:73:
                    ab:01:f4:9a:a7:07:f3:3c:cc:b5:34:ea:c9:5d:89:
                    62:a3:8b:55:cc:91:1c:22:20:1c:56:83:93:c6:cf:
                    31:19:03:12:08:30:84:0f:21:00:1e:fa:04:4b:a2:
                    3e:a0:37:24:4e:7c:0e:1a:59:b4:fd:7e:73:7f:28:
                    a1:6a:e2:21:90:99:0f:19:6f:aa:f2:47:e5:0d:d3:
                    00:e3:b0:2d:02:62:c4:0a:80:73:eb:4b:d9:19:83:
                    40:53:80:fd:87:f4:bb:47:cd:11:d7:a8:18:7b:bf:
                    c1:32:26:12:55:c8:73:94:6c:fd:ac:5a:f5:ff:bf:
                    f1:94:b1:33:26:b7:22:65:02:53:15:ba:08:2c:e9:
                    e3:b9:aa:b6:59:31:ee:39:a1:c8:e6:76:95:a9:c0:
                    3f:93:0b:bb:2c:99:88:be:53:13:51:cd:6b:17:12:
                    9d:18:9b:18:a8:81:dc:df:3b:fc:0d:67:a9:e4:b9:
                    5b:b7:d1:e3:0b:8d:8e:10:23:13:f0:71:d4:ac:e1:
                    00:ee:73:e0:71:13:0e:53:22:5a:91:25:79:f7:9d:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F5:D6:84:94:23:C4:55:C2:38:D3:CB:61:90:67:0D:98:DA:86:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/acb9848e-bdb5-3943-9cc4-adba59427f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:98:ea:43:76:95:e7:f6:2c:12:da:69:42:a9:40:be:02:ec:
         ea:cd:c6:ef:f5:66:49:12:48:91:c3:8d:b6:5b:6f:be:24:11:
         04:5d:80:2a:e7:5a:e5:a6:c3:49:cf:5f:a7:0b:26:1a:6d:b6:
         a0:3d:37:86:73:a3:8c:a4:7b:d1:be:0c:3c:86:0e:48:d1:6a:
         f8:5d:f6:63:b8:f6:99:b1:c0:ec:f7:a7:5e:21:95:cf:28:36:
         ba:ad:32:93:29:6c:89:d0:76:79:f7:77:a8:a7:9c:88:d4:95:
         63:4a:d8:3c:0a:56:cb:41:a1:fe:6a:4f:91:0f:60:2e:e9:57:
         5e:5f:46:e6:cf:47:9c:ac:b6:0b:a8:81:58:1e:e7:5f:c5:6c:
         43:da:69:9a:00:27:b0:3f:61:50:9f:67:e2:6a:05:4e:8c:ee:
         23:3e:7f:16:50:12:20:77:30:85:8d:05:b3:62:4e:41:55:e3:
         fa:2a:76:59:5d:c2:ad:71:b3:00:e9:90:e3:81:36:2c:79:fb:
         b5:43:3c:e0:99:a6:81:f2:8d:89:35:b2:7e:99:f6:d3:58:6e:
         e0:e1:10:12:33:9e:af:c3:62:d7:41:a7:88:b8:c2:3c:9e:1c:
         12:82:b1:9d:2f:26:a7:a4:b9:4e:d1:81:39:4e:e8:77:25:62:
         1e:12:3f:c8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECPf+nEpK/4p9kNWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
OTFjMTRlMDgtOWZlNC00M2ViLTkxZTYtMzAyYzg1MGE3NGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1SE2t3jQv4G23Sk2S6vxN2INQieaVh6IFV3
PL1VObcxMfZaxizIBaRKMHOrAfSapwfzPMy1NOrJXYlio4tVzJEcIiAcVoOTxs8x
GQMSCDCEDyEAHvoES6I+oDckTnwOGlm0/X5zfyihauIhkJkPGW+q8kflDdMA47At
AmLECoBz60vZGYNAU4D9h/S7R80R16gYe7/BMiYSVchzlGz9rFr1/7/xlLEzJrci
ZQJTFboILOnjuaq2WTHuOaHI5naVqcA/kwu7LJmIvlMTUc1rFxKdGJsYqIHc3zv8
DWep5Llbt9HjC42OECMT8HHUrOEA7nPgcRMOUyJakSV5952uGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF711oSUI8RVwjjTy2GQZw2Y2oYeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWNiOTg0OGUtYmRiNS0z
OTQzLTljYzQtYWRiYTU5NDI3ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEnAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEpjqQ3aV5/YsEtppQqlAvgLs6s3G7/VmSRJIkcONtltvviQRBF2AKuda
5abDSc9fpwsmGm22oD03hnOjjKR70b4MPIYOSNFq+F32Y7j2mbHA7PenXiGVzyg2
uq0ykylsidB2efd3qKeciNSVY0rYPApWy0Gh/mpPkQ9gLulXXl9G5s9HnKy2C6iB
WB7nX8VsQ9ppmgAnsD9hUJ9n4moFTozuIz5/FlASIHcwhY0Fs2JOQVXj+ip2WV3C
rXGzAOmQ44E2LHn7tUM84JmmgfKNiTWyfpn201hu4OEQEjOer8Ni10GniLjCPJ4c
EoKxnS8mp6S5TtGBOU7odyViHhI/yA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:03 2025 by rpki-client