Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e59a190a-0a85-3df4-a9fa-38444c16309e.roa
File:                     e59a190a-0a85-3df4-a9fa-38444c16309e.roa (raw, json)
Hash identifier:          KqURnlnH598Up2NEFncZc8ksy5zOMvJTTir0DsE8EkU=
Subject key identifier:   BB:27:FD:B3:34:6A:E8:33:E3:C9:55:B6:6B:44:06:56:8A:9E:F3:05
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DFAD8D7F39E68376DF3514380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e59a190a-0a85-3df4-a9fa-38444c16309e.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.116.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fa:d8:d7:f3:9e:68:37:6d:f3:51:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=6e687f0b-c41a-402c-89b0-1868ab2c515d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:a7:b1:5d:cb:50:cd:23:d1:fc:de:82:5b:
                    c8:fc:a8:60:97:2a:0e:e9:a5:62:6c:1f:0d:a0:d1:
                    9f:c5:c1:0b:94:de:f3:63:0b:a8:84:f4:04:9d:76:
                    a1:4b:03:39:4a:19:d2:c1:8b:aa:1e:b1:dc:93:6d:
                    05:b1:b0:e3:4e:d5:64:b9:83:5b:73:96:ea:e6:bb:
                    50:20:99:13:67:25:04:2e:39:11:fb:23:32:39:cf:
                    aa:ad:67:42:cb:ce:24:11:15:eb:b0:a4:a9:b2:00:
                    b0:ae:d9:b1:a2:78:a8:e3:48:d5:dc:fc:98:b0:89:
                    b1:98:93:a8:17:30:99:8b:b6:ee:ad:1f:b0:b8:fe:
                    d0:99:75:b8:e9:2d:79:2d:e8:a8:55:b0:f9:39:3b:
                    6a:53:14:b1:1b:77:8e:12:9e:55:53:a1:63:72:b1:
                    08:41:15:57:6d:31:f6:5d:eb:0b:9d:06:ee:9d:e3:
                    55:be:7b:de:32:5c:32:54:8b:00:c7:ea:3d:ba:23:
                    9c:7d:9c:38:02:a1:64:29:0c:ea:da:42:40:e5:35:
                    1a:e6:d2:1b:23:88:f6:ab:f6:2a:72:64:6e:0a:1c:
                    e9:58:ac:49:46:18:33:96:c2:a2:51:75:0f:e9:1f:
                    ac:bb:83:a1:c4:63:17:04:21:61:4f:2c:b0:e0:8a:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:FD:B3:34:6A:E8:33:E3:C9:55:B6:6B:44:06:56:8A:9E:F3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e59a190a-0a85-3df4-a9fa-38444c16309e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.116.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:a3:82:e4:97:b3:92:a0:8c:74:cc:af:a5:9a:97:f5:07:
         b4:75:6e:00:0c:88:16:0f:53:96:26:4c:78:a0:f8:ad:d7:48:
         ce:0f:df:2f:fc:cf:58:05:5e:78:01:6c:b8:c6:35:46:e0:1e:
         07:14:8a:89:de:0f:2a:b8:dc:a7:00:c8:e8:7c:9b:2f:84:fc:
         5c:21:72:40:5e:64:95:99:7f:96:5d:97:4d:25:72:20:24:ce:
         f5:31:82:ff:cf:6b:52:07:ce:83:8c:72:a9:ac:68:1a:90:b3:
         b1:9f:62:c0:a4:89:45:c1:57:51:54:59:e8:fd:45:82:03:92:
         f6:b4:4e:95:66:e7:c0:e1:85:3f:85:49:53:b7:a0:be:ff:3d:
         6f:8d:f9:78:fc:cc:55:2b:f8:5b:1c:f3:f6:f7:99:df:8b:d8:
         fe:bd:58:eb:7a:11:8d:b6:42:e4:bc:80:27:aa:cc:7d:28:0b:
         a4:81:3c:7b:d2:b4:a6:e4:3e:24:6a:64:31:38:0e:68:2c:26:
         cc:57:02:3d:0c:b1:5b:7f:4e:33:a0:38:6f:c2:c3:f3:05:b1:
         02:b9:df:35:fa:0e:b3:5c:2e:5c:b0:15:61:6b:82:2d:74:8c:
         4a:2b:83:82:00:e1:e3:53:69:66:9c:20:f6:b1:56:1f:2d:cc:
         d2:39:cd:80
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD362Nfznmg3bfNRQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NmU2ODdmMGItYzQxYS00MDJjLTg5YjAtMTg2OGFiMmM1MTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC2nsV3LUM0j0fzeglvI/KhglyoO6aVibB8N
oNGfxcELlN7zYwuohPQEnXahSwM5ShnSwYuqHrHck20FsbDjTtVkuYNbc5bq5rtQ
IJkTZyUELjkR+yMyOc+qrWdCy84kERXrsKSpsgCwrtmxonio40jV3PyYsImxmJOo
FzCZi7burR+wuP7QmXW46S15LeioVbD5OTtqUxSxG3eOEp5VU6FjcrEIQRVXbTH2
XesLnQbuneNVvnveMlwyVIsAx+o9uiOcfZw4AqFkKQzq2kJA5TUa5tIbI4j2q/Yq
cmRuChzpWKxJRhgzlsKiUXUP6R+su4OhxGMXBCFhTyyw4IqzlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLsn/bM0augz48lVtmtEBlaKnvMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTU5YTE5MGEtMGE4NS0z
ZGY0LWE5ZmEtMzg0NDRjMTYzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEnQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR72jguSXs5KgjHTMr6Wal/UHtHVuAAyIFg9TliZMeKD4rddIzg/fL/zP
WAVeeAFsuMY1RuAeBxSKid4PKrjcpwDI6HybL4T8XCFyQF5klZl/ll2XTSVyICTO
9TGC/89rUgfOg4xyqaxoGpCzsZ9iwKSJRcFXUVRZ6P1FggOS9rROlWbnwOGFP4VJ
U7egvv89b435ePzMVSv4Wxzz9veZ34vY/r1Y63oRjbZC5LyAJ6rMfSgLpIE8e9K0
puQ+JGpkMTgOaCwmzFcCPQyxW39OM6A4b8LD8wWxArnfNfoOs1wuXLAVYWuCLXSM
SiuDggDh41NpZpwg9rFWHy3M0jnNgA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:13 2025 by rpki-client