Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c55f0204-359b-31fc-ac2e-81ece5d7e1e8.roa
File:                     c55f0204-359b-31fc-ac2e-81ece5d7e1e8.roa (raw, json)
Hash identifier:          JETjroZPAm2zju+GqO1LPJGMZmISj0gbkfUD3NXg1Eo=
Subject key identifier:   05:A2:96:96:C6:7D:47:6E:8F:CC:A7:AA:FA:8E:A8:D9:B5:D1:2E:8B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0C4373FBE91F8A385501C880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c55f0204-359b-31fc-ac2e-81ece5d7e1e8.roa
Signing time:             Fri 26 Aug 2022 12:00:00 +0000
ROA not before:           Fri 26 Aug 2022 12:00:00 +0000
ROA not after:            Sat 01 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.175.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:43:73:fb:e9:1f:8a:38:55:01:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 26 12:00:00 2022 GMT
            Not After : Oct  1 04:00:00 2022 GMT
        Subject: CN=89ec1747-d29f-4608-aa21-9a6c87b5d4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:97:91:2e:4e:e0:e0:aa:f0:b5:da:28:58:
                    05:ca:6e:bb:36:e6:54:b4:96:2f:5e:15:85:8f:47:
                    b6:15:3f:9b:fb:2b:0d:a1:84:4a:25:a8:72:df:eb:
                    3e:7b:5f:19:19:47:bd:e5:91:9c:4e:97:c2:6e:31:
                    1a:a3:ea:ca:e1:bf:89:1a:fc:3d:80:cb:87:2e:bf:
                    c9:21:66:08:98:87:8a:5c:01:0b:9b:2b:74:02:d2:
                    c1:5f:b2:26:54:a5:32:b8:c4:f3:e3:b4:45:85:ba:
                    28:1c:0e:9b:12:70:03:d4:55:eb:bd:8b:50:01:d2:
                    61:e6:d1:21:5b:7b:60:2d:10:0a:f7:67:4a:6c:bb:
                    5a:4f:aa:85:68:14:4e:47:b3:df:57:00:c3:be:68:
                    ee:ff:fd:07:62:2a:b7:8b:b2:f6:93:38:75:e1:ae:
                    0d:d8:73:8d:f0:ef:a7:1c:2b:cc:1e:79:9c:65:bf:
                    b6:7e:de:46:15:aa:c3:ba:28:4a:0f:eb:dd:fa:09:
                    7a:a6:ec:4b:24:f3:67:80:16:24:aa:35:ab:2b:f8:
                    27:00:27:46:5f:b8:5e:b8:64:7c:b4:c1:11:3c:79:
                    60:07:81:fa:63:d9:00:02:42:34:d7:ad:d7:c6:22:
                    12:53:b8:75:52:a5:b2:43:88:a3:96:bc:09:fe:b0:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A2:96:96:C6:7D:47:6E:8F:CC:A7:AA:FA:8E:A8:D9:B5:D1:2E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c55f0204-359b-31fc-ac2e-81ece5d7e1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:47:57:73:7a:ee:88:1b:78:3e:26:8d:65:65:00:00:ed:
         77:f6:65:10:d9:83:a6:15:8b:e2:3a:89:b2:0f:da:52:17:48:
         4e:1b:c3:6c:73:f0:d1:75:f4:58:49:87:ae:6d:85:30:9e:20:
         d9:b0:86:22:85:b0:25:0a:a1:03:29:7a:7f:86:fc:ae:d8:d7:
         44:84:9b:5f:19:cf:fd:e1:62:56:72:be:63:69:ec:59:39:64:
         ad:ae:36:ae:f2:5b:2d:cc:d8:0d:ff:33:a6:c0:63:b1:8b:d4:
         7f:60:72:3f:bc:56:11:ca:a3:af:97:a3:9b:d2:7a:52:cb:ff:
         2c:51:7c:f1:57:f3:09:b3:2f:26:f9:82:bb:f2:2f:3f:60:da:
         ad:de:c1:c0:31:0d:c2:ea:47:83:15:74:be:b3:9e:36:3d:f4:
         94:d8:f7:41:8f:9f:b7:b3:a7:4d:7b:06:b1:c7:77:65:bb:55:
         d1:a6:8c:41:c7:2a:bb:a5:21:2b:88:cd:15:39:87:d7:50:fc:
         3c:57:e2:c0:6c:84:4a:73:16:3d:29:f1:99:77:03:70:4b:e9:
         13:54:9b:6f:84:3e:1d:87:b8:63:d0:24:e7:18:a5:13:20:12:
         2b:7a:6a:f0:3f:1c:7a:83:4d:83:f8:4c:2b:73:62:cc:f2:be:
         e1:87:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:48:55 2025 by rpki-client