Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c47b9fc6-c53b-3776-a84d-dffe3b6a420d.roa
File:                     c47b9fc6-c53b-3776-a84d-dffe3b6a420d.roa (raw, json)
Hash identifier:          kgtX6isCu/8QP3IXk6XcRynfuLLrmM4VVL7KbYtfuDM=
Subject key identifier:   02:B4:5C:9D:46:AF:90:62:C6:38:20:1C:F1:15:49:BF:44:96:01:CD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C95DB8B55C7774ED526E1A0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c47b9fc6-c53b-3776-a84d-dffe3b6a420d.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.86.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:95:db:8b:55:c7:77:4e:d5:26:e1:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=3f6c2273-2bb3-4faa-995a-737bcb45a0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:8c:d2:d6:6b:81:d9:4e:23:6a:79:11:b2:
                    5d:e8:32:3a:93:a6:b5:6c:88:61:4f:6c:6c:a0:55:
                    3f:13:c8:74:38:96:6b:50:df:e7:66:dd:3f:04:f3:
                    09:b6:d2:18:ca:bf:a2:d1:38:b3:b7:91:63:c8:c6:
                    7d:b8:53:16:ee:7e:1e:67:c3:13:a7:cd:ad:e0:6f:
                    a6:0c:42:74:9f:e1:42:cd:e2:91:be:13:79:f0:92:
                    47:fe:c0:ad:93:9e:bf:da:3b:d9:b0:17:7a:48:34:
                    1e:22:47:3a:1f:ba:60:56:cb:fb:9b:ac:3b:87:39:
                    ce:44:4c:ec:63:75:78:be:2f:21:c8:df:75:23:40:
                    8c:f9:68:65:33:59:73:2f:24:33:2f:a4:50:77:5b:
                    80:01:22:e4:f7:65:da:b1:34:56:07:8c:74:97:1b:
                    9c:79:b1:5b:c8:06:51:8a:c3:78:d6:6a:bb:1b:af:
                    0a:2d:60:19:9d:16:29:9f:aa:38:1f:5e:11:6c:d2:
                    51:69:86:50:49:22:61:46:2a:69:c6:3f:0d:9d:59:
                    78:fd:c5:ce:b8:4a:87:4c:59:c3:18:df:1b:ce:ab:
                    1f:34:f8:ff:9b:dc:6e:74:53:48:20:13:54:c1:8c:
                    91:de:b8:d8:24:b8:e5:94:e0:bb:60:62:c3:8e:c9:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:5C:9D:46:AF:90:62:C6:38:20:1C:F1:15:49:BF:44:96:01:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c47b9fc6-c53b-3776-a84d-dffe3b6a420d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:48:74:c6:8b:ca:3a:08:3c:6c:e1:78:db:83:b3:49:68:19:
         0a:a2:b9:a0:a7:8f:90:65:f8:5f:45:ec:8b:7b:0c:22:be:03:
         f8:d8:c8:44:21:75:d1:1d:8f:9b:2a:3d:b8:85:06:c2:16:93:
         05:68:c6:09:53:09:1c:ac:87:3a:74:7d:35:5c:08:4b:8f:90:
         12:9a:1f:5d:0c:8f:1a:6d:5e:2a:23:67:79:b2:f9:1e:93:aa:
         e0:e2:6c:77:70:f5:1d:1c:54:7c:52:07:16:02:2e:81:b1:41:
         bd:51:a9:c6:7f:2f:93:74:7a:53:1e:ad:eb:dc:87:53:a0:0f:
         83:a3:ec:1c:fe:ce:ba:f6:d2:c5:df:07:0d:99:31:5c:ee:04:
         12:7e:ad:58:88:05:84:89:88:df:d1:48:16:c4:d5:e5:16:a4:
         05:7b:99:ec:4d:c7:95:e4:9f:37:46:87:31:6a:81:7a:8e:b1:
         4c:6f:b9:4b:50:71:d3:02:93:9a:71:03:f2:5a:f6:e1:47:8d:
         dd:de:df:a6:80:d6:56:e7:98:73:7f:83:30:68:78:6f:aa:3f:
         2c:61:d1:13:b7:2e:04:a7:9d:7e:d9:3d:54:d3:1a:79:6f:ec:
         22:ef:54:0e:d2:de:c6:19:89:02:72:45:13:03:77:1c:19:00:
         05:67:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:34:42 2025 by rpki-client