Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6ecfda3-38f3-3f72-b17e-b67a5c2a91e1.roa
File:                     b6ecfda3-38f3-3f72-b17e-b67a5c2a91e1.roa (raw, json)
Hash identifier:          azcvgczRlbjAcCmawIVIGO1NmbKV6A49BFdSF8VSBL4=
Subject key identifier:   13:70:8C:7C:E9:3F:61:E9:0C:9A:2B:CA:9F:E5:A0:04:AD:57:88:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0B5769B86E1885B58F2ED1C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6ecfda3-38f3-3f72-b17e-b67a5c2a91e1.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.103.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:57:69:b8:6e:18:85:b5:8f:2e:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=cad6936a-6e0c-4e99-8332-7347531aca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:8f:58:8e:8b:cb:f7:dc:62:d2:cc:d7:49:
                    d4:01:96:53:a5:31:d8:ea:d0:93:b3:2f:50:ec:70:
                    57:94:30:73:f7:13:ce:03:a0:db:23:d5:6a:c8:17:
                    9e:50:c9:38:31:3d:6a:fa:66:fb:e2:fb:56:55:1a:
                    94:22:14:d4:be:7f:69:43:85:de:81:3a:bf:f4:d9:
                    3c:1b:5e:6a:f6:64:db:f1:fc:4c:a4:57:21:33:08:
                    13:4f:d8:cf:54:1f:46:a6:34:5f:ea:90:96:2a:42:
                    b4:7c:b8:5e:4f:9f:7a:d6:65:9c:2a:6a:e2:f1:fa:
                    f7:32:ba:b8:27:27:df:2b:bc:61:76:31:4d:64:10:
                    e8:75:6a:15:61:83:07:7a:9d:85:e5:1b:70:85:f3:
                    be:ac:73:8d:82:d5:a0:4d:07:53:91:a6:ed:a7:b8:
                    4b:29:49:03:59:7f:79:04:e6:9c:35:96:23:2d:06:
                    93:9e:f8:91:b7:b6:42:20:3e:79:3e:27:e6:05:5e:
                    52:8d:88:7a:cc:ee:60:f6:98:b3:02:e3:8a:c2:2e:
                    3a:52:e0:2a:c4:ab:a7:4e:07:db:a2:6c:05:3e:15:
                    f6:ca:05:44:b8:8e:93:cd:71:3c:c2:b5:8c:dc:85:
                    49:11:69:a0:7f:01:2b:6f:4d:bf:27:29:40:0d:51:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:8C:7C:E9:3F:61:E9:0C:9A:2B:CA:9F:E5:A0:04:AD:57:88:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6ecfda3-38f3-3f72-b17e-b67a5c2a91e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.103.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:0e:81:92:a4:da:a0:8a:ab:b5:78:29:8e:1a:a5:8a:f6:
         68:54:e5:d5:8f:86:d0:6c:36:e9:a5:a5:e4:06:90:06:a3:b9:
         57:cd:b7:7e:14:fc:a0:df:b4:c7:68:33:af:62:af:af:0a:6a:
         5d:61:af:5f:cc:aa:36:80:62:67:00:3d:40:27:8f:e3:3c:ea:
         74:b4:3e:82:05:eb:1e:bb:84:90:5f:ce:cb:aa:d3:d5:7d:d2:
         7b:f8:28:dc:47:47:5b:ab:fe:6b:f9:96:f4:dd:8f:86:45:a0:
         22:91:a6:e1:63:65:84:bc:90:7a:e5:93:51:72:05:56:b6:29:
         4d:5c:4d:dc:a8:8a:4a:f5:72:82:9e:62:f6:7d:87:f3:84:86:
         3b:4b:3e:47:45:d2:97:83:8e:9e:54:30:9e:f3:18:70:09:2e:
         bc:d9:7c:a5:57:0b:14:b5:dc:4c:f9:ee:19:d0:12:87:ef:e4:
         2d:5e:4e:86:f8:23:a1:36:94:54:47:ea:7a:d0:bb:f0:60:65:
         71:97:cf:7a:e7:1e:3e:95:13:f9:0b:7f:65:81:05:7f:ff:ff:
         03:21:7f:49:65:13:a1:0c:03:87:43:e5:d1:ec:69:d3:83:cc:
         9e:75:e6:44:cc:3b:b4:2a:d7:f0:cc:32:89:47:af:80:af:1d:
         44:c0:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:58 2025 by rpki-client