Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8d906c6-0c96-32d8-9cbe-7a29fa59fb9e.roa
File:                     b8d906c6-0c96-32d8-9cbe-7a29fa59fb9e.roa (raw, json)
Hash identifier:          H+/bG86dEjgbc+6GBulK+4qJMGkOvF2IjwMCXP+ZGtQ=
Subject key identifier:   B5:81:DE:F4:82:C6:51:80:B7:C9:0F:39:6F:36:89:D0:82:20:E8:EB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7E9B889076135523DC3A03C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8d906c6-0c96-32d8-9cbe-7a29fa59fb9e.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.69.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:9b:88:90:76:13:55:23:dc:3a:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=670ca2c0-0444-41df-aec9-65349370def5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:a0:bf:49:41:05:95:6d:93:8f:03:e3:35:
                    b7:a2:86:93:de:f9:cb:a1:f5:bd:c2:7c:c5:e2:9f:
                    bf:36:82:c7:08:e1:c8:68:bd:e7:e1:93:f7:62:83:
                    48:0b:44:8d:ca:8f:0a:65:96:a5:c2:3e:d9:df:31:
                    c8:2a:34:9a:0f:b0:db:dd:3d:62:52:d5:32:bd:89:
                    54:82:59:e0:ae:90:77:09:8f:25:b0:6d:81:27:fe:
                    51:70:3a:e9:dc:55:87:ba:69:5b:8e:93:37:22:82:
                    98:7d:37:60:38:90:11:8f:da:1b:84:fd:03:40:3d:
                    5b:bd:6a:90:fe:ff:28:23:77:5f:f3:55:86:b3:ad:
                    eb:29:63:80:8e:c8:e4:63:fe:e0:a4:07:04:48:02:
                    c2:ef:94:d2:21:13:ef:ed:45:4f:d1:4c:ec:62:eb:
                    c4:71:51:e5:b7:9a:86:07:a5:a7:1f:64:11:46:85:
                    3a:43:48:58:61:1d:ba:7e:87:86:e6:45:bc:57:85:
                    5c:e9:b7:f2:56:9a:63:53:4c:4c:11:b4:85:e6:8b:
                    3e:43:9a:1c:b7:e2:f5:5c:66:54:92:9e:19:67:27:
                    be:25:d8:bc:cf:1d:9f:2e:97:41:b4:8a:93:c4:45:
                    ea:de:53:aa:5c:a6:5d:6e:ae:d2:58:df:b7:00:9f:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:81:DE:F4:82:C6:51:80:B7:C9:0F:39:6F:36:89:D0:82:20:E8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b8d906c6-0c96-32d8-9cbe-7a29fa59fb9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:15:25:f8:a1:c7:91:f5:e6:7b:49:ff:a3:66:aa:50:1a:
         0d:da:8c:e8:95:0e:81:d8:33:0b:fd:5a:33:71:5e:21:56:3b:
         66:79:c1:d7:98:de:bd:17:08:25:cf:67:80:53:43:d4:0f:94:
         29:3a:7f:1a:bc:6c:f7:a2:84:40:42:f7:91:19:e3:36:5e:84:
         db:c3:ff:8f:0f:8f:2c:67:18:b6:e2:a5:e6:59:3c:9b:ff:8a:
         58:3d:91:a5:de:3a:b8:70:99:40:1d:da:9c:7b:6a:9c:be:f4:
         2f:ba:14:88:3e:19:05:f8:27:8f:ac:96:9b:af:e1:f7:31:a7:
         31:21:41:70:82:41:43:ad:46:73:82:bb:b2:be:e9:fe:76:27:
         91:ba:42:c9:b3:3b:d7:e8:39:99:80:f6:38:da:4e:e1:8d:87:
         32:c5:d2:b9:7c:58:34:0f:d9:94:06:15:1c:f3:0e:65:82:06:
         a7:b8:fc:1f:21:02:00:7c:1f:99:67:5d:bc:ed:40:6a:3f:94:
         d1:b0:04:ca:ca:02:94:28:7f:7b:03:4c:9c:c0:ce:74:9e:bf:
         bd:88:02:eb:57:99:c0:8f:2e:63:67:63:2d:5e:c9:2f:57:c3:
         4d:ba:9f:fa:37:29:8b:31:5d:aa:5e:5a:55:43:ea:8f:1f:38:
         8b:da:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:42 2025 by rpki-client