Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9497b5b-1833-3251-a6ab-191401f4f8fe.roa
File:                     c9497b5b-1833-3251-a6ab-191401f4f8fe.roa (raw, json)
Hash identifier:          3QQcDDsx/IlO1mdAXlH1zVyeckbMrLoxLF+AiYngTyA=
Subject key identifier:   A0:CB:FF:79:87:17:F0:ED:07:9F:52:F6:96:67:59:18:CC:76:E7:7A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE0C9BAC7031ECC0969000A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9497b5b-1833-3251-a6ab-191401f4f8fe.roa
Signing time:             Thu 11 Aug 2022 12:00:00 +0000
ROA not before:           Thu 11 Aug 2022 12:00:00 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.176.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e0:c9:ba:c7:03:1e:cc:09:69:00:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 11 12:00:00 2022 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=6b21a9fa-1d9b-4fd2-b398-0c63a9a27e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:27:8b:7e:56:50:e7:20:57:ef:af:96:51:
                    e1:32:8a:b2:7d:f7:f8:5f:bc:54:f3:47:b8:b4:32:
                    84:27:10:08:ba:2a:74:6c:7a:cf:27:c9:13:8a:5a:
                    28:31:65:c9:b8:3c:9b:f9:73:ac:f1:d4:7d:3e:78:
                    97:02:7a:66:7b:44:06:2e:e4:0a:b4:dc:6c:c6:08:
                    b7:b0:dd:c1:54:40:17:05:ef:8a:91:86:10:00:0e:
                    36:9d:ac:0c:8a:59:4b:de:09:da:39:e1:d6:23:7e:
                    81:79:24:71:62:bc:87:b5:a5:1c:2d:7c:2d:2e:80:
                    91:ba:db:00:e3:55:a6:48:22:4c:e6:74:90:10:16:
                    ae:96:7f:f0:83:64:05:1f:0c:bc:51:61:b9:ed:b1:
                    58:df:c2:13:26:88:74:9c:93:18:26:ff:d3:f6:f1:
                    b3:e3:f1:57:f1:a7:f6:95:a1:44:c3:01:f1:72:cd:
                    d2:51:82:15:9a:9c:99:b2:e2:07:7c:57:ed:1f:da:
                    05:50:30:09:00:de:b2:d4:80:0b:f3:5e:fc:8c:fa:
                    90:d0:3c:cc:ab:48:74:2a:0b:47:4b:0e:88:ca:10:
                    8a:f8:e7:a4:80:5a:51:5a:e8:69:68:51:c0:64:80:
                    c4:c0:0f:8e:d9:e8:0f:a3:c3:b5:ab:d4:a9:e8:a8:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CB:FF:79:87:17:F0:ED:07:9F:52:F6:96:67:59:18:CC:76:E7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c9497b5b-1833-3251-a6ab-191401f4f8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.176.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:79:1d:38:ea:ed:54:67:98:2e:48:f3:8f:16:f3:81:d6:bc:
         c0:fa:61:9b:ba:ff:b6:e5:f5:04:48:82:2f:d1:5b:05:31:77:
         46:46:cb:3f:2b:d3:9d:04:d4:62:c5:1f:ee:88:7a:ac:9c:91:
         86:64:20:09:c8:45:1f:c2:0d:e5:4a:6d:41:2d:1a:84:91:cf:
         7d:7b:48:f5:a6:c5:60:8f:1b:3e:b5:84:7c:6c:80:f9:b7:f2:
         a0:d6:a3:b7:dc:d6:15:f3:30:0b:98:4e:73:b5:c1:fe:8c:01:
         28:b9:97:d6:1e:3f:70:9f:30:f5:46:58:eb:64:21:62:45:ae:
         d1:7f:74:20:17:f0:19:ac:87:7b:f4:46:51:fa:52:fa:0d:01:
         57:9a:7b:04:a5:ed:90:4d:6c:42:57:c5:d9:69:68:1b:5f:ec:
         25:86:79:da:10:27:cc:8b:e4:b9:dc:a1:76:11:0e:19:1f:de:
         e1:e9:77:00:13:da:a2:cb:2b:73:d5:f4:3f:2a:a2:78:41:52:
         f3:c6:6e:28:6d:e2:66:d6:77:b0:c5:0c:a2:4f:a4:77:11:ed:
         ed:df:6c:c6:b5:78:3f:ee:d7:c1:59:8e:21:c1:16:8d:57:9c:
         aa:de:f4:98:b1:d3:d1:db:a2:96:ee:ad:3a:6f:5e:78:25:b5:
         12:91:33:87
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7gybrHAx7MCWkACgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgxMTEyMDAwMFoXDTIyMDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NmIyMWE5ZmEtMWQ5Yi00ZmQyLWIzOTgtMGM2M2E5YTI3ZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaoni35WUOcgV++vllHhMoqyfff4X7xU80e4
tDKEJxAIuip0bHrPJ8kTilooMWXJuDyb+XOs8dR9PniXAnpme0QGLuQKtNxsxgi3
sN3BVEAXBe+KkYYQAA42nawMillL3gnaOeHWI36BeSRxYryHtaUcLXwtLoCRutsA
41WmSCJM5nSQEBauln/wg2QFHwy8UWG57bFY38ITJoh0nJMYJv/T9vGz4/FX8af2
laFEwwHxcs3SUYIVmpyZsuIHfFftH9oFUDAJAN6y1IAL8178jPqQ0DzMq0h0KgtH
Sw6IyhCK+OekgFpRWuhpaFHAZIDEwA+O2egPo8O1q9Sp6Ki2PwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKDL/3mHF/DtB59S9pZnWRjMdud6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzk0OTdiNWItMTgzMy0z
MjUxLWE2YWItMTkxNDAxZjRmOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBErAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ3kdOOrtVGeYLkjzjxbzgda8wPphm7r/tuX1BEiCL9FbBTF3RkbLPyvT
nQTUYsUf7oh6rJyRhmQgCchFH8IN5UptQS0ahJHPfXtI9abFYI8bPrWEfGyA+bfy
oNajt9zWFfMwC5hOc7XB/owBKLmX1h4/cJ8w9UZY62QhYkWu0X90IBfwGayHe/RG
UfpS+g0BV5p7BKXtkE1sQlfF2WloG1/sJYZ52hAnzIvkudyhdhEOGR/e4el3ABPa
ossrc9X0PyqieEFS88ZuKG3iZtZ3sMUMok+kdxHt7d9sxrV4P+7XwVmOIcEWjVec
qt70mLHT0duilu6tOm9eeCW1EpEzhw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:33 2025 by rpki-client