Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad6443ec-114d-37bf-afc4-ee442c56fd57.roa
File:                     ad6443ec-114d-37bf-afc4-ee442c56fd57.roa (raw, json)
Hash identifier:          0a9vcUPmlpK0oJTq91bjh+tbyxa/2tpsET6qGUU3m2o=
Subject key identifier:   BA:5C:FB:67:C4:85:FD:F6:00:28:9E:26:50:EB:02:81:91:23:2B:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6ED4A97331C6A3A9DD4A72A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad6443ec-114d-37bf-afc4-ee442c56fd57.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.100.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:d4:a9:73:31:c6:a3:a9:dd:4a:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=9f1a22ea-98c6-4539-b8d1-9e7beaf755ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f2:fa:78:49:cf:05:58:b9:dc:d0:09:12:f2:
                    6c:10:a0:d7:fb:06:81:88:67:62:6c:fe:94:ea:40:
                    7a:ee:07:ec:21:34:40:ee:4d:a6:7a:b6:4d:dc:af:
                    bf:00:db:88:00:d4:7f:d3:48:39:e6:ba:6b:dd:7c:
                    71:e4:5c:e7:39:6f:45:5e:02:1a:8d:8c:69:33:06:
                    6b:26:4c:87:d3:89:21:2f:3b:fb:e7:47:03:30:c7:
                    7e:d8:02:5f:43:f3:58:5b:05:1a:c1:5e:6b:83:d1:
                    8b:fc:d8:4c:d6:fc:3f:ac:ef:8c:cc:a8:38:08:84:
                    8d:a2:f3:43:c2:a5:d2:94:45:c8:c3:b2:7c:d5:ce:
                    e3:8a:ca:5e:4c:97:f0:33:9f:bb:e1:3a:b6:7c:3f:
                    96:90:3e:1b:e0:92:9d:4e:2e:d0:a7:01:e7:cb:2d:
                    79:20:f7:10:d7:d0:81:a4:b7:73:af:71:58:e9:9a:
                    8f:56:2c:3b:53:2f:43:aa:f3:2e:49:e4:e7:83:13:
                    27:14:ce:28:e4:45:94:63:0b:95:a7:d0:fb:4b:da:
                    a0:c4:b9:2d:c9:fd:6a:f7:27:09:8d:0c:82:ad:c1:
                    c1:02:cf:a6:c7:59:d0:df:c2:e1:8c:d8:cd:9e:1c:
                    dd:5b:d1:c8:0a:5d:9b:b8:84:5f:2a:a1:2f:7a:9d:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:FB:67:C4:85:FD:F6:00:28:9E:26:50:EB:02:81:91:23:2B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad6443ec-114d-37bf-afc4-ee442c56fd57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.100.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ee:4d:4c:47:9c:88:74:18:c1:3b:dc:0b:c8:62:6b:25:4c:
         b8:ca:cc:6b:71:92:3d:84:b1:45:ec:56:f9:34:7d:d0:85:37:
         60:57:d0:0e:2a:6b:df:25:fa:3e:a5:d9:49:20:c8:59:11:b1:
         07:f9:ad:f2:9d:71:1a:1a:2d:8a:44:ce:b7:d9:03:80:4a:da:
         84:14:e1:31:d4:80:f7:74:d6:a2:9e:05:0b:7d:df:e8:8a:f3:
         0d:f0:f4:f9:d6:f2:e8:11:ae:27:fd:40:6b:fd:21:cb:ea:63:
         51:30:78:cf:c9:8c:27:0a:6e:c7:36:34:a5:99:5c:e0:1b:95:
         19:f2:d6:03:d7:01:60:61:03:d4:ab:40:05:57:94:8c:ae:4d:
         05:f0:b5:d5:77:d7:27:09:fe:c8:69:58:48:1e:52:2c:18:82:
         ea:ed:c6:60:83:e1:66:f2:7d:75:29:c6:7a:cf:c9:a8:c1:ea:
         99:81:6d:2b:31:25:68:61:02:5e:f9:82:50:3c:d9:eb:23:86:
         bd:7e:bc:41:76:64:5a:dc:75:83:f1:f3:8b:da:b7:19:f7:51:
         cf:92:cd:f0:71:43:5f:76:7c:89:09:04:ef:72:8a:49:26:82:
         94:64:9d:03:94:72:4c:dc:0b:50:06:58:4c:6a:6b:83:f5:54:
         f5:ed:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:12 2025 by rpki-client