Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d293673d-8785-3ece-9d87-bd71f3c268fb.roa
File:                     d293673d-8785-3ece-9d87-bd71f3c268fb.roa (raw, json)
Hash identifier:          uZZuZGjI0MzvPw+JOjWC2vAokyDRqBvOtbnBNgHw+BQ=
Subject key identifier:   CC:C4:0C:16:DD:BA:DD:70:D7:7F:FB:B9:07:12:F5:FA:DA:D0:26:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5B377959C7966FD04124E780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d293673d-8785-3ece-9d87-bd71f3c268fb.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:37:79:59:c7:96:6f:d0:41:24:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=805e6ca6-1bba-4a85-a441-f8a3daedf8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:d1:9c:9d:80:7a:1f:ed:17:37:ec:58:92:
                    18:16:1a:56:c8:62:d8:17:56:8d:1e:20:13:28:b6:
                    40:38:cc:36:5e:44:23:e1:6e:df:18:ad:d8:72:d7:
                    8f:cd:84:32:3f:44:c2:2d:fa:74:40:0f:5c:c9:66:
                    1c:f9:ec:9c:8f:3d:d4:e3:29:2d:90:b9:f4:21:e3:
                    6b:9d:74:ed:f0:50:ba:6f:a7:39:a3:02:b0:0c:2d:
                    5a:d5:1a:78:2e:3a:d7:f6:96:1c:95:14:0e:9c:a2:
                    75:48:d5:8b:da:85:fa:36:d4:b6:ed:ce:c1:ad:52:
                    45:a0:ff:64:a3:97:e5:b7:7a:48:d8:d7:36:f1:02:
                    4f:23:23:9e:48:35:00:36:e5:2d:1d:d6:f8:65:58:
                    be:e6:03:62:b3:e7:cd:b4:be:ed:fd:8d:80:b8:eb:
                    8c:6f:58:cd:dd:e6:da:7d:04:5d:c4:0b:05:73:08:
                    94:9f:f3:b8:b8:04:d9:52:f9:6d:20:f4:1c:60:7d:
                    07:3a:72:92:bd:ba:72:46:98:fc:b1:9f:6c:0d:a1:
                    25:c1:12:ca:f1:46:b0:e4:39:43:da:dc:d8:d0:04:
                    97:12:5d:8b:5e:68:3e:80:61:dd:e5:69:a4:1c:4a:
                    65:35:04:84:b9:d5:70:03:7d:2d:a7:39:20:aa:81:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:0C:16:DD:BA:DD:70:D7:7F:FB:B9:07:12:F5:FA:DA:D0:26:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d293673d-8785-3ece-9d87-bd71f3c268fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:09:76:b9:f0:2e:58:08:fe:54:0c:da:07:12:65:04:a1:c4:
         88:1e:4a:28:0a:ba:65:96:4c:07:d4:6c:fa:a1:76:42:3a:89:
         e8:02:e3:12:7a:e5:9e:a8:af:05:53:b8:8c:53:04:2b:cc:40:
         8f:d4:cd:05:5d:c4:8e:ce:9e:44:05:7c:c7:66:24:f8:4e:a0:
         f6:6e:b0:fa:7c:5b:bd:67:9d:5d:2f:db:f4:17:c3:f6:ae:87:
         7d:74:b2:41:eb:73:ed:18:97:af:77:dd:ea:b5:11:b1:48:bd:
         f2:57:ab:e9:46:d8:5d:23:5b:7a:b3:9f:85:c4:57:7a:de:ea:
         e5:04:8a:cf:94:61:c6:39:2e:ca:be:20:ec:b2:41:fe:72:ea:
         88:7f:0a:9a:9e:73:46:2f:33:2c:5e:79:0d:ef:6a:7d:4d:cb:
         99:65:49:9a:80:58:d4:2b:11:af:15:08:a6:8d:e5:df:d1:91:
         f2:1b:2d:f2:0e:d7:cf:fa:b2:81:34:c5:51:c9:83:ce:52:57:
         7f:5b:ae:5c:fb:b7:ea:94:1c:58:25:55:cf:0c:53:db:7d:20:
         8b:6b:c1:0d:a1:22:8a:47:68:6d:ac:67:c2:bc:a9:b9:d0:73:
         d9:07:26:5f:6d:22:a4:d1:75:2c:cd:03:bd:b8:a3:4e:74:f4:
         3b:8e:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:31 2025 by rpki-client