Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd693d75-31e4-3258-b09a-0d23bc8e97bf.roa
File:                     bd693d75-31e4-3258-b09a-0d23bc8e97bf.roa (raw, json)
Hash identifier:          iF9cE2Y0B4kQ34xZszRZcDIuIg+hSpSZBraxZHdSuRU=
Subject key identifier:   5E:63:98:07:5E:DD:F0:83:8F:FF:DC:14:EA:FE:3B:AB:72:92:6C:73
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DFABB1CF5DD2EB93B4F38DC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd693d75-31e4-3258-b09a-0d23bc8e97bf.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.110.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fa:bb:1c:f5:dd:2e:b9:3b:4f:38:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=35d8c2c7-4215-41b3-829d-b6df900245b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:7a:0e:a5:56:23:1a:9b:94:92:7b:0e:be:
                    bc:49:65:19:65:cd:fd:5f:d1:f4:87:e8:7e:92:33:
                    0a:1a:ec:a2:08:e9:21:82:f1:cf:33:d6:e6:68:de:
                    25:85:b1:35:3e:c4:2d:35:ff:66:3a:49:9c:82:78:
                    f2:00:2d:c1:1c:46:d4:f2:60:e1:5b:ec:c7:a6:cf:
                    d2:98:1e:6f:b5:7f:c9:e9:a3:ed:76:ea:3c:3c:91:
                    e1:51:1d:9d:b0:45:a6:58:a4:d9:8c:2e:c9:87:53:
                    82:96:ee:9d:06:ac:a8:53:e0:00:38:b7:d2:20:66:
                    23:a0:ac:6f:24:9a:d6:14:b8:01:1f:35:06:eb:66:
                    7d:d7:1b:9c:26:df:e4:a3:07:53:28:aa:4a:5b:aa:
                    f5:a2:56:02:43:61:99:6c:88:40:81:da:72:61:a5:
                    3d:84:d7:4a:1e:b5:09:39:5e:9e:66:d4:65:2f:db:
                    f5:61:42:9d:51:10:47:09:95:3e:fc:1a:0c:ce:48:
                    39:2e:17:a1:eb:cc:13:8c:39:6e:98:16:68:9c:31:
                    c5:ef:10:6f:c5:c5:1f:01:19:be:6a:c2:4d:56:42:
                    1b:b5:ec:50:6c:39:79:fb:b3:36:28:6b:37:22:c2:
                    5c:3d:80:1f:b2:ac:e3:19:5e:9f:e2:0e:5f:ba:9c:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:63:98:07:5E:DD:F0:83:8F:FF:DC:14:EA:FE:3B:AB:72:92:6C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd693d75-31e4-3258-b09a-0d23bc8e97bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:18:16:e4:87:5c:82:df:41:c8:68:f4:f7:d8:5a:73:34:7f:
         93:c1:32:c4:49:60:d0:6f:e3:24:8a:71:67:b2:c2:ce:9b:d2:
         7f:aa:86:0c:ad:5e:70:e0:2b:73:0a:f6:76:57:62:06:11:47:
         73:5c:dd:98:68:fa:f5:c7:58:d5:e4:36:ce:2e:24:f5:ee:0f:
         15:04:10:b4:57:5f:5e:2c:ba:1a:23:b3:5e:8b:c1:fe:da:12:
         0e:7c:a2:4e:33:34:0c:27:25:5c:2d:10:d1:63:dc:98:5e:41:
         b9:bd:b1:17:d8:5f:8e:bd:cf:38:65:09:e9:1b:06:64:11:32:
         05:42:38:cf:e7:15:aa:cb:fc:fe:52:7e:7f:14:e9:55:46:9d:
         44:02:3b:d4:65:1f:3b:2f:18:20:c2:ef:ef:ec:43:e5:04:80:
         c7:aa:d3:65:fd:82:bb:d5:5a:33:60:03:16:f9:f5:52:6f:1a:
         41:2e:44:f2:83:5e:e7:c0:7e:8d:47:4f:28:e2:a6:ec:8e:05:
         2b:6f:39:ef:5e:18:d0:99:83:c8:24:1d:a5:da:7e:22:41:39:
         e2:2d:01:37:2c:86:e9:59:1c:dc:62:90:92:30:34:31:42:54:
         b2:b2:17:c9:14:6b:6b:62:45:16:e3:fc:74:a8:0f:e2:dd:2a:
         91:ef:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:14 2025 by rpki-client