Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c150690f-4d53-3654-bc8a-2e148ddf5dff.roa
File:                     c150690f-4d53-3654-bc8a-2e148ddf5dff.roa (raw, json)
Hash identifier:          kv15wIAiQLLqSTZHY5Oxk+yERDxSVb2sCML9E3/tD88=
Subject key identifier:   29:03:C9:CD:50:25:47:44:76:49:92:32:FE:A5:F0:2C:3F:F5:2D:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD09D6831896685A3F022FA40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c150690f-4d53-3654-bc8a-2e148ddf5dff.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Sun 11 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.35.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d0:9d:68:31:89:66:85:a3:f0:22:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Dec 11 05:00:00 2022 GMT
        Subject: CN=a280ba42-5a81-4e7d-ab41-5bdae23d036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:c1:2f:38:44:34:0d:05:b5:4c:92:5d:20:
                    84:91:c8:ea:47:9b:02:09:2f:cc:c3:fd:84:07:da:
                    23:c8:9c:f2:f6:8e:10:e8:66:99:4b:c7:c1:5a:25:
                    79:50:67:d1:17:67:dc:9d:90:0d:ba:76:26:d0:ea:
                    38:6a:1a:4c:d1:02:a9:1f:76:01:99:f4:9b:fe:73:
                    df:ed:16:fc:98:15:7f:0f:2a:fc:62:25:6f:38:c6:
                    6d:b0:0b:41:c6:db:93:2e:3e:00:1c:62:67:aa:a0:
                    6b:4a:c0:68:e4:59:09:d2:76:93:51:5d:2c:c5:70:
                    f1:02:e2:ee:64:6c:b0:09:14:43:6e:38:86:06:27:
                    4f:d1:e8:50:68:4c:c9:fd:51:ce:93:68:33:1b:69:
                    50:81:d0:b9:b4:33:3f:5d:72:02:ac:79:64:7d:60:
                    33:cf:85:4d:be:e0:d9:81:d7:89:73:c1:ca:4a:e1:
                    e9:8b:4c:68:a5:e0:72:ba:5c:a7:9d:a0:20:c1:d1:
                    d7:54:07:f8:48:e3:de:e3:03:60:54:ee:f4:67:3f:
                    a7:69:d4:db:37:25:f7:f9:4a:16:96:3c:f5:34:ab:
                    b5:e9:21:d3:7d:79:a0:f1:f3:87:82:c0:a4:f2:ca:
                    07:5b:b5:d1:df:b4:ab:9e:53:df:d5:be:fd:cc:61:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:C9:CD:50:25:47:44:76:49:92:32:FE:A5:F0:2C:3F:F5:2D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c150690f-4d53-3654-bc8a-2e148ddf5dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:39:b2:62:11:74:39:86:8f:58:41:8b:33:cc:56:48:cc:49:
         15:32:56:74:b1:7d:8f:4d:67:af:59:41:ec:5c:f5:3f:12:68:
         82:db:2d:3b:93:14:ab:52:fb:a2:14:90:31:67:18:fd:50:73:
         63:68:22:10:bc:06:16:59:f6:24:18:ca:b9:47:39:9d:39:97:
         37:09:f5:f8:a5:d8:71:54:66:3f:a9:a8:bd:d0:61:cd:36:8b:
         d5:42:cb:d2:ab:f0:9f:20:6c:8f:3f:95:42:b8:d0:95:98:0c:
         ee:c7:42:61:e7:e1:2e:75:56:80:ff:74:51:9b:a4:8b:bb:8b:
         59:90:1c:9e:e7:87:ac:a6:82:9b:b0:6d:1e:89:08:8f:5f:26:
         0e:1d:fb:f6:ec:59:8b:68:e9:b7:fc:8e:f0:81:a5:6e:e6:39:
         4e:1a:57:26:7a:91:98:9b:bd:00:12:ce:f6:67:9d:c8:9a:23:
         9c:14:f1:0d:cc:bd:cc:5c:4d:e8:aa:89:89:98:08:6d:88:c6:
         03:f8:ab:a5:2f:1b:c0:a4:d2:ee:e9:b9:8e:0d:fc:2d:96:11:
         7f:c5:5a:6c:fe:68:3d:82:0f:6d:f3:21:a0:f9:74:00:71:06:
         09:6f:18:48:ae:04:fe:96:8c:28:0e:57:02:3e:62:3c:8b:91:
         0f:c9:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:17:22 2025 by rpki-client