Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b256515e-b2cb-3110-87eb-0904d71c01d4.roa
File:                     b256515e-b2cb-3110-87eb-0904d71c01d4.roa (raw, json)
Hash identifier:          i4pdMiaglOz1aGA70KV0Gy90mgvRrXk9Zi1fYS0FvL8=
Subject key identifier:   51:D6:D0:DC:F4:34:EE:DA:08:B2:DE:C7:38:F8:92:43:09:E4:31:CA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DFA693664E32AF2A34D169400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b256515e-b2cb-3110-87eb-0904d71c01d4.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.180.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fa:69:36:64:e3:2a:f2:a3:4d:16:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=cea68136-d9c5-4706-9e9f-0ccbe776d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:05:5c:b6:2a:23:d9:e6:23:ec:59:6f:28:
                    73:9c:77:fa:ea:f9:b4:49:f2:31:17:bb:5c:94:81:
                    39:16:87:9d:90:f1:50:60:0d:e4:36:0c:c7:26:0f:
                    6d:a0:28:f0:55:9d:79:bf:f2:e6:92:91:a7:31:2b:
                    be:24:3c:1f:14:44:f6:00:82:c1:e8:53:69:67:ad:
                    c2:8b:e9:ec:8b:f3:c7:ba:a8:5d:72:1b:40:11:60:
                    ac:8e:20:5d:db:4c:0f:10:eb:78:e0:9a:67:a9:97:
                    59:71:34:fa:38:81:05:98:e3:aa:31:09:6b:4e:92:
                    aa:f6:63:5a:f8:52:20:59:f1:93:4f:f9:4b:ad:88:
                    75:20:e4:10:74:91:9a:c4:6b:38:d2:e7:e6:5c:02:
                    c8:b9:f0:76:25:c9:e9:7f:7d:1d:e3:7a:0e:4d:9e:
                    b6:f2:56:0e:4d:88:b8:84:25:d5:da:4a:de:7a:7a:
                    18:5f:5f:4a:9f:83:f7:91:4d:78:06:bf:98:e6:2a:
                    6b:11:55:76:93:1f:09:f8:77:f6:1a:67:4e:83:79:
                    3e:89:21:c6:b0:ca:17:c3:df:39:1b:71:65:1f:d7:
                    21:23:97:1d:44:4e:0b:11:78:d9:20:48:92:d5:59:
                    bf:83:b1:fd:42:06:6e:cb:e3:47:79:b2:b9:70:42:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D6:D0:DC:F4:34:EE:DA:08:B2:DE:C7:38:F8:92:43:09:E4:31:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b256515e-b2cb-3110-87eb-0904d71c01d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.180.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:53:44:74:9a:f8:dc:5f:8b:d2:bf:b6:cf:b0:93:97:e6:
         50:00:72:ef:21:8d:51:60:a5:20:81:4b:9d:26:47:03:24:4e:
         b1:22:e1:7b:70:16:98:35:16:40:94:7b:f6:46:b0:a6:1f:d6:
         1c:29:75:f2:00:79:b6:5c:73:0e:42:f3:7d:fd:19:71:f5:50:
         55:4c:b3:cd:c5:63:38:39:4a:b3:37:53:09:e5:6c:ff:63:f4:
         ae:3a:36:77:d3:50:67:3c:96:9c:a0:e6:6f:95:27:40:f0:66:
         3c:a9:84:b2:ca:9d:e3:c2:5d:b8:a0:a5:26:1a:70:6b:51:13:
         45:99:79:36:b0:b8:d4:a7:61:81:17:23:1d:91:15:f0:86:e0:
         a0:ed:b3:c6:94:29:1a:e6:b6:e1:40:ed:e7:05:cc:d1:83:25:
         28:58:17:94:98:33:d0:00:2d:2d:25:b6:6b:2d:42:60:ce:68:
         46:f0:02:65:d5:77:3e:ec:fd:0d:78:aa:23:0f:5d:f8:89:31:
         f6:49:a0:a8:04:9f:67:7f:e4:fa:e3:c7:1f:eb:57:62:77:12:
         f5:e7:0e:ee:22:ab:a7:88:07:d3:86:b0:e4:78:d9:43:6d:ae:
         9d:04:d0:02:af:c1:fb:b3:fb:05:62:2a:c3:0d:3e:f5:99:ef:
         3e:94:a2:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD36aTZk4yryo00WlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2VhNjgxMzYtZDljNS00NzA2LTllOWYtMGNjYmU3NzZkNGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliYFXLYqI9nmI+xZbyhznHf66vm0SfIxF7tc
lIE5FoedkPFQYA3kNgzHJg9toCjwVZ15v/LmkpGnMSu+JDwfFET2AILB6FNpZ63C
i+nsi/PHuqhdchtAEWCsjiBd20wPEOt44JpnqZdZcTT6OIEFmOOqMQlrTpKq9mNa
+FIgWfGTT/lLrYh1IOQQdJGaxGs40ufmXALIufB2Jcnpf30d43oOTZ628lYOTYi4
hCXV2kreenoYX19Kn4P3kU14Br+Y5iprEVV2kx8J+Hf2GmdOg3k+iSHGsMoXw985
G3FlH9chI5cdRE4LEXjZIEiS1Vm/g7H9QgZuy+NHebK5cEJeqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFHW0Nz0NO7aCLLexzj4kkMJ5DHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjI1NjUxNWUtYjJjYi0z
MTEwLTg3ZWItMDkwNGQ3MWMwMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnIRTRHSa+Nxfi9K/ts+wk5fmUABy7yGNUWClIIFLnSZHAyROsSLhe3AW
mDUWQJR79kawph/WHCl18gB5tlxzDkLzff0ZcfVQVUyzzcVjODlKszdTCeVs/2P0
rjo2d9NQZzyWnKDmb5UnQPBmPKmEssqd48JduKClJhpwa1ETRZl5NrC41KdhgRcj
HZEV8IbgoO2zxpQpGua24UDt5wXM0YMlKFgXlJgz0AAtLSW2ay1CYM5oRvACZdV3
Puz9DXiqIw9d+Ikx9kmgqASfZ3/k+uPHH+tXYncS9ecO7iKrp4gH04aw5HjZQ22u
nQTQAq/B+7P7BWIqww0+9ZnvPpSiWw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:57 2025 by rpki-client