Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1ab3e21-945d-39c1-a0d0-6694ac3a08cd.roa
File:                     c1ab3e21-945d-39c1-a0d0-6694ac3a08cd.roa (raw, json)
Hash identifier:          VS1PIkvezxfo2wHYhW7ahOzspYrJGrKehWYvBbqUVaE=
Subject key identifier:   A1:DC:BA:6C:4B:B0:6C:A5:77:E7:1C:43:27:D0:3C:3A:BA:D6:54:D8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD1632E750B0F926D3038B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1ab3e21-945d-39c1-a0d0-6694ac3a08cd.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:16:32:e7:50:b0:f9:26:d3:03:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=3e18b753-7d9d-42c7-b3d1-5e1e155f370b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:f7:14:b8:72:30:ae:96:ed:dd:d4:00:42:
                    42:1d:b5:f0:c5:cd:8c:17:3d:74:69:e9:6a:0e:fc:
                    76:71:94:07:99:0e:01:14:39:a3:7f:4c:28:c0:7a:
                    a0:08:13:ae:62:f8:e7:31:41:f6:76:12:40:7f:2f:
                    60:7d:06:ce:dd:ed:52:62:44:d1:50:82:d0:0d:71:
                    94:38:04:06:95:ca:f0:29:0d:19:d1:f3:19:53:90:
                    1a:85:c2:b4:7a:8d:91:a8:5c:19:9e:c5:ba:85:93:
                    12:55:94:a3:f7:5c:6a:ed:e9:04:15:84:6c:b8:0e:
                    6f:0b:43:88:5f:04:dc:3f:03:6d:95:ff:98:cc:05:
                    31:3f:08:61:71:f7:2a:9b:68:1f:4b:0b:4b:1a:a0:
                    ee:57:62:89:0f:d4:1f:25:9f:f8:27:57:78:47:cf:
                    f6:92:03:92:c0:f2:55:e9:39:d6:d1:8a:78:7c:ec:
                    e5:00:88:76:f2:1a:d1:31:81:8a:d1:6c:98:63:ea:
                    f5:d8:c3:60:f5:7d:fc:64:09:ba:de:52:46:1f:d8:
                    4a:db:2d:97:88:d9:79:14:86:41:92:3c:60:29:d8:
                    4e:fe:a1:8a:ef:94:60:a3:99:86:e6:a0:47:6d:e9:
                    da:17:97:78:f4:04:70:e0:07:82:07:34:83:43:0d:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:BA:6C:4B:B0:6C:A5:77:E7:1C:43:27:D0:3C:3A:BA:D6:54:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c1ab3e21-945d-39c1-a0d0-6694ac3a08cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:52:62:48:57:5f:84:2f:a0:4b:ac:51:e6:b1:a7:2f:a4:5c:
         e1:67:00:44:98:e6:eb:55:d4:5c:04:4a:63:e5:4b:85:97:63:
         91:58:18:c9:65:b2:10:9c:09:12:a0:de:db:47:0b:56:ed:ec:
         34:43:22:f2:77:b0:6c:c7:2e:a7:6a:48:c8:67:46:4a:8c:45:
         ae:dc:3d:f5:b7:94:1e:d2:d9:18:5c:23:b6:79:3a:1b:69:c6:
         61:47:3e:9b:a2:13:84:1e:43:c5:25:ae:d4:7e:24:c0:f2:42:
         a5:80:22:15:7b:e9:47:a1:80:d4:d1:0c:cb:26:13:59:0b:74:
         8f:8e:e0:a1:8f:f2:e0:8b:ce:37:87:b1:50:45:0c:e6:c0:88:
         38:7e:dd:73:52:41:b8:d9:8e:62:c6:1b:4f:9c:07:4e:54:e6:
         3d:2b:1b:9a:e3:15:21:da:82:0b:4f:91:d6:f1:e4:c6:36:e9:
         c4:a2:5a:6f:48:66:09:bf:9d:9c:36:5c:95:6e:47:a0:f8:4e:
         fb:83:01:f2:d2:2b:af:e7:70:80:1c:34:a4:33:86:40:ee:04:
         7d:c0:ee:b5:d7:94:d8:19:5b:3b:30:af:df:12:f9:3a:b5:4a:
         80:bd:8f:c9:bd:d9:ed:d5:39:93:c5:73:4d:63:70:7d:bc:33:
         e2:f1:0c:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9FjLnULD5JtMDi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
M2UxOGI3NTMtN2Q5ZC00MmM3LWIzZDEtNWUxZTE1NWYzNzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirb3FLhyMK6W7d3UAEJCHbXwxc2MFz10aelq
Dvx2cZQHmQ4BFDmjf0wowHqgCBOuYvjnMUH2dhJAfy9gfQbO3e1SYkTRUILQDXGU
OAQGlcrwKQ0Z0fMZU5AahcK0eo2RqFwZnsW6hZMSVZSj91xq7ekEFYRsuA5vC0OI
XwTcPwNtlf+YzAUxPwhhcfcqm2gfSwtLGqDuV2KJD9QfJZ/4J1d4R8/2kgOSwPJV
6TnW0Yp4fOzlAIh28hrRMYGK0WyYY+r12MNg9X38ZAm63lJGH9hK2y2XiNl5FIZB
kjxgKdhO/qGK75Rgo5mG5qBHbenaF5d49ARw4AeCBzSDQw0/QwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKHcumxLsGyld+ccQyfQPDq61lTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzFhYjNlMjEtOTQ1ZC0z
OWMxLWEwZDAtNjY5NGFjM2EwOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEogwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtFJiSFdfhC+gS6xR5rGnL6Rc4WcARJjm61XUXARKY+VLhZdjkVgYyWWy
EJwJEqDe20cLVu3sNEMi8newbMcup2pIyGdGSoxFrtw99beUHtLZGFwjtnk6G2nG
YUc+m6IThB5DxSWu1H4kwPJCpYAiFXvpR6GA1NEMyyYTWQt0j47goY/y4IvON4ex
UEUM5sCIOH7dc1JBuNmOYsYbT5wHTlTmPSsbmuMVIdqCC0+R1vHkxjbpxKJab0hm
Cb+dnDZclW5HoPhO+4MB8tIrr+dwgBw0pDOGQO4EfcDutdeU2BlbOzCv3xL5OrVK
gL2Pyb3Z7dU5k8VzTWNwfbwz4vEMPw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:54 2025 by rpki-client