Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ccd3272f-a6ff-376f-a489-45d590643398.roa
File:                     ccd3272f-a6ff-376f-a489-45d590643398.roa (raw, json)
Hash identifier:          +s+oZxdm2AajbmjZ249eY7YEvXLNWyFy97NOVORa1rY=
Subject key identifier:   E0:FE:07:F7:49:20:FD:0E:B2:A5:22:94:48:2F:69:9B:BE:DF:29:72
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE4E351D83746612081B8B960
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ccd3272f-a6ff-376f-a489-45d590643398.roa
Signing time:             Fri 12 Aug 2022 12:00:00 +0000
ROA not before:           Fri 12 Aug 2022 12:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.246.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:e3:51:d8:37:46:61:20:81:b8:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 12 12:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=e236f419-9dce-4017-a96a-75b226fb110c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:05:f2:b7:55:f3:3f:29:fc:df:9b:a9:61:
                    cd:8e:e8:2e:6c:2d:f4:e6:30:1b:08:83:67:af:d1:
                    e6:18:b4:1c:c5:38:49:fe:a9:b4:72:ea:69:a9:f2:
                    f6:b4:34:ee:55:e0:77:99:e8:cb:4f:b1:dd:30:df:
                    c2:37:32:15:ac:d5:6a:67:19:09:85:fc:5c:dd:1c:
                    63:6b:08:7b:44:52:01:d0:95:41:f7:8a:a7:b8:b5:
                    cf:56:fe:ee:09:1d:f3:27:f9:56:47:ca:fd:7c:32:
                    d0:ef:79:f3:71:2c:fb:23:97:90:50:98:84:bc:40:
                    39:3f:81:fe:8d:e8:4a:b7:18:5d:3a:ac:de:b5:eb:
                    d6:1d:85:58:f4:70:43:84:98:d4:f3:f7:52:ac:02:
                    c8:06:9a:db:fc:24:36:6b:d7:04:02:57:46:8b:27:
                    fa:f6:77:00:b1:b5:fb:a9:c5:7c:fa:fc:44:a3:67:
                    39:cc:fb:59:23:aa:41:19:29:0f:5d:f2:ba:f2:0e:
                    d1:fa:cb:c0:0b:02:0d:25:ab:68:41:da:31:b8:01:
                    e6:36:ec:1f:4c:92:8c:d2:b0:1f:a8:0d:79:9f:c0:
                    1c:8a:10:e1:f2:42:02:05:4b:bd:5d:a0:28:af:d0:
                    a2:ff:21:b6:92:48:b5:11:1f:4b:bf:fa:29:ce:52:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FE:07:F7:49:20:FD:0E:B2:A5:22:94:48:2F:69:9B:BE:DF:29:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ccd3272f-a6ff-376f-a489-45d590643398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:1e:c1:41:90:e3:07:fa:1b:5a:fd:8d:30:32:2c:66:1d:
         48:f8:4f:05:01:2a:16:31:3d:46:fb:ac:a6:b8:17:96:26:fc:
         79:f9:31:e7:ae:be:c8:54:58:a8:8a:b1:dd:07:c7:69:69:8a:
         ea:9b:13:bc:a4:51:6c:ff:b8:53:03:3f:ce:b5:e9:fe:e1:ec:
         d8:c6:41:95:b0:2c:77:16:44:ed:29:7b:58:7f:81:76:cc:92:
         81:82:5d:a4:45:f0:4b:48:06:df:87:3c:7a:19:bc:13:87:18:
         65:0f:b0:6f:75:b7:6a:dd:41:18:62:29:f2:7e:79:ec:ae:3c:
         70:e0:a6:b6:30:61:a3:a5:76:05:ea:22:fd:2e:6e:91:41:d9:
         f0:74:c3:e2:47:27:13:a5:1d:94:8e:dd:e8:be:6b:39:91:78:
         cd:84:cc:57:86:b0:a3:b4:b3:bf:da:0d:8d:07:e2:cd:1e:08:
         dc:7b:06:d0:30:d9:43:e6:09:e2:ad:b1:d7:26:be:2c:7f:f4:
         7b:00:8c:ba:b1:12:8d:2d:7e:c3:f0:98:1e:80:bf:82:a6:19:
         dc:22:10:4b:23:68:09:16:87:59:e4:f2:17:b5:35:63:9a:1e:
         c5:56:63:aa:d3:22:19:26:bf:39:02:25:72:1d:32:45:35:4f:
         c6:f2:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:28:45 2025 by rpki-client