Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad94cb91-0d9f-31bd-86f5-cd093bd9d62e.roa
File:                     ad94cb91-0d9f-31bd-86f5-cd093bd9d62e.roa (raw, json)
Hash identifier:          65R5yxHLQUdDVB0NP3ccupw6iQuCBBX1XB/pRr1Vhtw=
Subject key identifier:   23:61:AE:38:4E:E8:2E:A7:9A:41:4B:8F:37:78:CD:5E:98:FA:5D:1B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6EB75C7712D602CAD5506180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad94cb91-0d9f-31bd-86f5-cd093bd9d62e.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:b7:5c:77:12:d6:02:ca:d5:50:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=f018830c-ac05-43e7-b220-0e2d2ff6d85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:15:9a:bc:e2:fb:f6:8c:06:79:cc:5f:96:
                    e0:50:39:06:10:14:29:b6:0e:dc:b2:c3:bf:1d:1e:
                    b0:0f:f2:20:5b:d6:7e:dd:22:a8:1d:c8:ea:32:35:
                    76:10:e6:5c:86:7d:ba:ea:96:35:74:89:7d:d4:52:
                    45:0a:f2:69:96:12:e5:96:78:9f:c5:a8:a9:8d:53:
                    8e:1c:72:0b:9d:c2:7f:b6:3a:47:38:49:f8:29:f4:
                    b9:49:d6:df:52:be:78:e6:c3:cf:af:e5:5b:7c:c9:
                    4e:b2:fa:d6:6b:e4:3d:6d:09:04:f9:47:78:11:d3:
                    7c:7c:b1:bd:b8:91:a9:6c:48:ff:4e:8e:c3:5c:ab:
                    26:73:7d:a0:d8:06:8f:c0:36:34:de:fd:87:dc:e1:
                    2d:9f:66:3c:95:69:31:d4:7f:90:e7:66:0a:17:f5:
                    76:46:6c:1d:d4:66:08:58:df:fb:a5:5f:f5:af:6b:
                    92:97:82:fb:6a:ae:67:cb:ae:7b:40:7b:d0:62:a8:
                    b6:be:ab:ed:77:15:db:66:53:6d:e4:da:f0:82:68:
                    5d:72:c9:30:4e:f4:3f:83:e9:34:32:b0:0f:5b:b6:
                    eb:bd:0c:28:9e:df:db:f5:71:42:7e:14:d1:8e:0f:
                    b3:5b:48:95:76:0d:74:1b:b0:78:c1:e0:b8:1f:b0:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:61:AE:38:4E:E8:2E:A7:9A:41:4B:8F:37:78:CD:5E:98:FA:5D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad94cb91-0d9f-31bd-86f5-cd093bd9d62e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:5c:90:5d:a8:bc:9f:d2:50:b0:25:07:21:da:f8:99:57:
         d1:83:39:64:97:db:5f:94:ee:30:cf:e9:dd:23:43:f5:97:c4:
         85:e4:de:8a:bd:c3:22:36:1d:8c:e5:46:cf:22:4a:49:20:19:
         47:2d:8c:d7:89:b5:08:a7:a2:fc:c8:10:d1:fd:8d:2b:18:35:
         44:92:65:eb:81:82:7d:43:1e:8c:a9:57:e8:b9:8e:65:cb:23:
         c2:bb:6e:44:84:7f:db:ac:4d:f7:bf:80:41:59:73:a8:99:2f:
         cf:17:8c:eb:10:eb:91:94:f6:f6:74:91:96:1b:b0:38:9e:04:
         c4:98:76:c5:75:46:28:4e:dc:fa:a7:e3:76:f3:30:72:61:a8:
         12:49:36:26:e2:50:a1:0e:75:2d:ae:fc:20:f9:3a:db:87:50:
         49:5b:9b:77:08:25:d8:eb:ee:56:51:38:6e:29:c5:b3:e1:a2:
         23:70:e5:b6:6f:de:1a:4a:02:6e:fc:ff:53:f4:71:5e:93:93:
         1b:87:86:45:5a:25:79:f9:d0:79:29:60:3e:56:0e:f4:71:c0:
         2a:8a:a5:f7:01:00:da:2f:7f:75:c7:4d:91:48:6e:e0:06:a4:
         79:d1:bb:db:0f:18:9e:7e:55:ab:f5:16:68:65:db:cb:c2:24:
         3f:f9:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:18 2025 by rpki-client