Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c29424-f5c7-3842-bec6-704c95359046.roa
File:                     d2c29424-f5c7-3842-bec6-704c95359046.roa (raw, json)
Hash identifier:          i/AodhajYRgS3MpkfiLIApg6FDZXhcHsw2IaiWe89jg=
Subject key identifier:   00:8A:99:98:FF:C9:63:AB:9C:FA:92:12:D3:1F:C2:B2:78:40:30:35
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D329247919CB0907BB66FD440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c29424-f5c7-3842-bec6-704c95359046.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.184.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:92:47:91:9c:b0:90:7b:b6:6f:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=b245263b-7ae7-41b1-9b1c-ad7d4d3df5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:4c:7f:14:2b:15:89:f2:85:af:60:ae:17:
                    40:29:92:c6:b1:7f:fd:07:4b:10:6c:1d:61:0e:98:
                    b2:f1:14:00:55:a8:bc:b3:c1:df:5a:9f:9d:67:7f:
                    c4:62:7b:dc:e8:41:3e:19:fe:ad:d7:e3:ab:73:6e:
                    9a:24:82:98:dc:02:a7:94:8d:e1:18:2e:2d:4c:cf:
                    f6:a8:6c:e8:0a:a4:21:53:72:99:1b:f1:e9:96:de:
                    3f:06:d5:04:b6:31:ac:15:bb:7d:4f:32:a5:b8:ab:
                    b0:bf:d1:95:f8:bf:16:2d:85:b5:71:3c:9a:18:db:
                    64:09:62:0a:4a:93:ba:e2:de:ac:5d:fe:df:01:c6:
                    5d:5c:a5:00:00:f3:a4:03:c9:06:90:3a:92:d0:26:
                    46:69:43:b9:1e:1e:f8:f8:74:9a:8f:2c:ff:91:0a:
                    d2:ae:e1:a9:f0:57:96:63:f7:92:d1:98:1e:0d:77:
                    2e:fd:2f:43:b9:98:87:c1:cb:19:5e:d1:e9:0c:93:
                    be:66:11:36:88:4a:99:e4:8a:89:7d:52:3f:89:00:
                    1e:ee:94:e8:37:a9:4e:7f:ec:05:15:63:34:53:c6:
                    4a:55:25:81:73:4f:6d:5b:36:21:7f:87:37:ee:15:
                    82:a2:ef:40:91:61:b1:4b:74:7f:53:6f:13:13:8f:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:99:98:FF:C9:63:AB:9C:FA:92:12:D3:1F:C2:B2:78:40:30:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2c29424-f5c7-3842-bec6-704c95359046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.184.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c3:16:f6:16:d1:28:f7:1b:a3:f1:32:10:87:85:32:3a:ef:
         08:43:e1:85:51:46:ec:2d:01:6c:41:b2:92:42:45:d2:94:91:
         5a:c4:b3:41:ad:0c:cf:e7:3f:f6:29:93:91:e4:e5:10:3b:b2:
         1d:63:11:8e:b6:06:c0:3d:bf:7e:b7:cc:9b:2d:6b:9b:de:64:
         77:15:2d:6e:3f:04:99:cf:7a:f7:1e:73:a1:56:c1:37:4b:c4:
         05:f5:b5:c2:54:8b:e1:6b:cc:72:b8:a6:26:f0:1f:06:04:72:
         76:6c:8c:b8:37:49:e0:6e:fb:0f:53:5b:8c:5a:05:eb:87:19:
         f8:a7:94:a4:eb:a0:cf:85:be:cc:13:50:bb:45:d9:d9:48:fc:
         62:bb:2d:89:3e:28:92:e0:3c:46:eb:d8:75:d7:58:1b:a0:a7:
         43:0c:9e:5a:2d:60:82:9b:af:10:5b:4c:f1:6e:dd:f7:58:64:
         a0:18:59:4b:13:2e:2a:7d:71:2f:4a:40:ce:d9:fe:cf:90:d7:
         a7:5c:a5:14:88:70:80:09:41:11:84:bb:5c:2f:cb:ab:1a:4a:
         f8:1b:46:78:cc:30:07:11:5c:f1:cc:74:ff:69:9e:5a:77:55:
         60:21:07:1a:1b:a1:bd:42:70:71:2f:50:39:99:4d:90:bb:dd:
         c2:8a:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:33:47 2025 by rpki-client