Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6547ae8-cbd4-32b1-9a80-f8bd69e12287.roa
File:                     c6547ae8-cbd4-32b1-9a80-f8bd69e12287.roa (raw, json)
Hash identifier:          FT0rafYpAFV0KXh5Vh+yEWoearYJNFbMYCmgjmbsIe4=
Subject key identifier:   E1:BF:FC:3D:E6:0E:CF:2C:13:FD:F6:8D:EC:F7:FE:2A:3E:EF:1A:6A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D324F031C0865B0A0F9ACC700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6547ae8-cbd4-32b1-9a80-f8bd69e12287.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.73.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:4f:03:1c:08:65:b0:a0:f9:ac:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=046db187-09e0-476e-9ea5-8e9a374c4567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:9e:05:76:ef:6b:1c:cb:0a:38:e7:2b:2b:
                    a3:e3:41:6b:6f:16:12:12:5d:27:a0:7c:a5:24:be:
                    c4:e4:19:f4:e6:a0:a5:bf:08:2c:81:89:09:a5:6f:
                    57:bc:ec:20:33:8b:15:36:76:7c:05:2b:9a:f2:f8:
                    bd:d2:ae:11:a4:1e:70:04:92:15:41:b3:01:5f:ea:
                    ab:e7:d7:58:05:a5:4c:f1:08:66:f1:bb:0d:1d:f3:
                    8b:63:50:7a:ae:60:b9:3a:de:d3:e2:82:50:3d:eb:
                    c6:34:36:32:88:cc:66:45:8d:8e:46:4b:08:24:1b:
                    26:20:7d:6e:fd:04:85:44:91:4a:09:38:46:81:ba:
                    d2:82:e5:fe:61:37:4e:b0:be:7f:ac:52:35:7f:26:
                    ec:33:48:6b:e1:a1:37:ee:40:b8:12:9e:49:fe:9a:
                    7a:7f:01:25:40:cb:95:de:42:22:dd:55:5b:63:0a:
                    ae:80:39:51:67:08:22:45:c7:a5:40:fe:56:e3:43:
                    39:f9:f6:cc:fc:3a:8f:9c:15:8e:5b:eb:b8:f1:4d:
                    78:f7:3d:8f:23:e5:af:a7:93:83:58:41:ab:5a:76:
                    65:0e:cc:c7:3e:99:fd:a8:f2:f8:6e:7f:f0:07:31:
                    14:3a:21:b1:bd:3a:c0:7b:e2:00:ac:73:b0:3d:6b:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:FC:3D:E6:0E:CF:2C:13:FD:F6:8D:EC:F7:FE:2A:3E:EF:1A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6547ae8-cbd4-32b1-9a80-f8bd69e12287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:62:87:17:7a:f1:2d:b6:d0:1f:24:03:f7:ea:b7:3c:f5:c3:
         ed:eb:ec:33:80:31:b4:e3:45:e8:3b:86:1a:4e:f4:a6:34:5a:
         63:44:d2:66:e0:78:e3:55:10:de:dd:cd:37:cd:95:76:9a:5c:
         25:54:f5:b0:14:9d:b0:33:d8:70:ed:e0:7e:91:db:19:5e:ab:
         38:b7:89:75:5e:1a:5d:cd:bb:52:6f:b1:aa:a7:2c:f1:19:06:
         49:03:6d:67:4c:02:eb:fa:31:6b:99:c8:50:af:fe:96:f4:8f:
         d8:dd:9b:2c:d5:21:22:e1:db:a9:37:50:5f:69:71:e6:a3:b6:
         b8:07:8e:f0:47:64:06:12:df:1f:fc:c4:b8:d1:98:ba:50:64:
         e5:7e:4a:85:cf:98:d7:ee:f9:07:97:1b:a3:ab:97:82:55:84:
         7e:29:43:70:b2:eb:ef:a4:fb:8e:73:bd:a9:5d:30:84:26:45:
         9a:56:95:d1:f1:ae:40:3a:16:94:4f:92:ba:2b:9b:86:90:6e:
         a7:9d:52:e2:d6:67:84:00:a1:cf:7f:80:8a:0c:d9:d7:da:4a:
         25:f3:66:d5:97:75:ff:e9:46:13:0b:82:57:3e:07:2b:c5:59:
         43:ec:71:71:04:4f:db:d4:b4:30:a8:c2:ca:cd:c4:cf:f8:51:
         21:0b:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:51:49 2025 by rpki-client