Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0a1dffa-1706-38bf-89c4-e2e63d7b3026.roa
File:                     c0a1dffa-1706-38bf-89c4-e2e63d7b3026.roa (raw, json)
Hash identifier:          6zkiiTFApUbvMIEYjVgrXm/I7+kDgjOPVmgrB3guOhE=
Subject key identifier:   D2:E2:B1:C7:B7:A6:C9:36:36:29:39:B7:28:46:14:E5:A8:9E:37:6F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE4583655A9ADBA1EF2A3B580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0a1dffa-1706-38bf-89c4-e2e63d7b3026.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.186.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:58:36:55:a9:ad:ba:1e:f2:a3:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=30f72251-ceaf-429b-afd8-9b89ea91a6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:10:98:bd:9d:25:48:42:28:35:58:6c:e5:
                    0b:f3:cd:8a:53:42:52:ad:a9:a0:1d:4c:a8:eb:9d:
                    59:9b:5a:05:1d:28:13:43:51:82:b6:2b:af:50:88:
                    f2:1f:15:08:d6:e7:ce:70:6f:a7:47:a7:6e:08:65:
                    ea:ea:2f:88:33:8b:a7:00:2a:2f:0e:87:7d:1c:22:
                    37:1d:79:75:9a:ad:b5:ad:7d:ee:67:69:21:15:7d:
                    71:75:a9:cb:5a:a3:40:47:2a:70:60:07:30:fc:90:
                    e3:a7:04:7b:bc:0b:c2:df:b6:5d:bc:1a:92:f3:ba:
                    c1:cc:f7:b1:97:eb:31:c4:2d:ef:25:7b:2e:63:56:
                    d0:30:de:4b:54:47:7d:06:28:e2:8e:e1:8e:e9:34:
                    f5:20:85:9f:50:62:55:af:88:85:c6:f0:29:36:97:
                    f1:03:9f:58:1a:a3:bd:6e:f5:ab:ce:bc:bd:d4:68:
                    1a:6a:89:c4:ed:c2:d1:0a:de:46:b5:ff:ce:73:c5:
                    b6:21:65:87:07:68:a1:aa:6f:37:ce:b1:1c:24:8c:
                    3e:16:9a:4d:32:cc:60:84:a7:bf:e4:04:b0:01:20:
                    81:a3:e8:b2:14:59:4d:63:8e:4f:94:fa:b6:5f:4a:
                    ff:89:82:21:71:3e:59:b0:35:c6:87:4f:cd:60:51:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:B1:C7:B7:A6:C9:36:36:29:39:B7:28:46:14:E5:A8:9E:37:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0a1dffa-1706-38bf-89c4-e2e63d7b3026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.186.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:a8:17:eb:3d:75:1a:fc:21:27:14:c7:70:64:76:9f:db:
         1e:19:30:d3:bb:ec:54:ca:d0:52:fd:bf:3a:6f:35:d0:58:40:
         5e:8d:2f:93:fe:0d:df:ac:4b:78:cf:cd:da:f8:de:df:7e:c8:
         10:1d:c9:e6:1a:2f:79:fb:cd:c5:d9:10:4e:9f:f9:51:9c:9c:
         99:9f:5e:29:16:75:cb:c5:77:b2:c5:cb:54:77:09:26:30:34:
         8e:ec:b8:fd:58:96:d2:93:35:aa:7c:9e:21:94:ee:ad:81:66:
         27:2d:6e:e9:d8:10:7a:7e:e9:32:5d:fe:21:61:17:ef:b5:7f:
         02:83:d0:e7:ec:b0:00:d8:0f:a5:3b:04:a1:69:45:6d:06:c3:
         20:16:73:c6:84:d7:0b:f3:61:40:70:70:ad:a5:27:39:1e:af:
         2d:d9:5b:90:29:01:63:8f:d9:84:db:24:3c:71:b1:c4:38:53:
         3a:f2:43:68:5f:49:77:71:e1:a2:d4:8c:9a:4b:e3:52:15:00:
         f1:f6:15:83:06:e8:16:e2:91:2d:83:cb:21:27:43:10:64:53:
         db:f7:b6:4d:77:4a:a0:18:e7:eb:d6:67:4b:6a:dd:40:9f:70:
         9c:6b:41:5e:4a:cd:b3:de:49:34:42:98:52:f3:e1:0c:7a:5b:
         0e:db:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:58 2025 by rpki-client