Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6698a47-0c74-3e91-b002-0d84cc4da433.roa
File:                     e6698a47-0c74-3e91-b002-0d84cc4da433.roa (raw, json)
Hash identifier:          z0SLoqnqifMFi8bB16ztMLgHMpV7S/55hWQCyfH0Zig=
Subject key identifier:   FC:37:20:CE:32:9A:3F:69:F6:FA:F4:9A:E3:33:FD:C2:95:4E:5F:29
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DFB57C85E5525B94E068BB2C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6698a47-0c74-3e91-b002-0d84cc4da433.roa
Signing time:             Sat 21 May 2022 12:00:00 +0000
ROA not before:           Sat 21 May 2022 12:00:00 +0000
ROA not after:            Sun 26 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.39.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fb:57:c8:5e:55:25:b9:4e:06:8b:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 21 12:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2022 GMT
        Subject: CN=b3db735d-0de7-4dfb-aec5-f4a908e5d048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:e7:b9:8b:54:2f:b8:a3:63:19:b1:4d:45:
                    52:60:6a:60:3b:95:d2:8f:41:04:4e:0e:b7:a0:2d:
                    df:d3:85:d9:2f:47:80:04:4c:31:34:3a:60:2f:30:
                    6d:0e:5d:c3:36:4c:24:bd:b3:19:d8:69:76:39:0b:
                    f4:95:ca:8f:55:1d:d7:53:a2:f5:9a:39:39:48:8b:
                    8f:33:02:9d:e5:49:a9:28:9c:24:1a:da:00:d0:d8:
                    7c:df:2a:43:e6:cb:4e:51:1e:8d:5d:44:70:2f:72:
                    e1:2a:47:6c:60:b9:70:af:4b:c4:67:3f:3c:b3:0a:
                    ff:a9:64:94:14:33:8c:cb:89:d9:44:2b:6f:a1:5c:
                    20:4b:ed:ec:40:98:cf:6d:7e:34:47:a4:b5:ae:5e:
                    83:32:e1:4b:f1:85:b6:97:6e:3e:18:97:97:30:40:
                    9c:1b:4b:e1:c1:8a:56:55:04:4b:53:a6:4f:0d:39:
                    61:fb:7a:f5:c8:a3:1d:3f:25:8c:70:92:f4:d9:93:
                    8d:1e:a8:89:72:17:53:9a:d6:c1:4a:83:2e:09:aa:
                    b4:39:0a:c0:04:eb:43:1b:c4:52:29:63:cf:3c:30:
                    39:51:11:a3:cf:56:47:bd:e5:c3:f6:d6:b5:69:4e:
                    c0:81:52:94:52:a6:6e:b5:d6:52:b2:65:bf:71:e1:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:20:CE:32:9A:3F:69:F6:FA:F4:9A:E3:33:FD:C2:95:4E:5F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e6698a47-0c74-3e91-b002-0d84cc4da433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.39.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:41:a8:bd:bc:58:74:3d:17:4c:86:9a:25:6f:14:31:f7:9f:
         d4:a0:0a:c0:91:da:fc:ad:3f:d0:36:13:d5:d8:ad:e2:3a:32:
         ab:6a:90:f3:c1:37:c1:27:f0:6b:00:6e:38:4a:15:74:db:0d:
         41:39:9d:9f:f1:1d:40:06:74:7d:37:53:6c:35:db:4c:79:03:
         91:43:17:b6:d4:5a:52:c3:ae:e5:31:c0:17:84:7e:41:30:9c:
         f0:0f:c7:8f:62:df:0e:ae:86:cf:bb:a1:a0:a8:ad:d3:06:8c:
         a2:5d:69:a6:d8:6d:57:15:f3:d1:6b:d9:44:07:f4:fe:3a:c3:
         a3:bf:48:54:a3:7e:56:47:56:65:28:8c:89:05:86:f5:f4:37:
         af:0e:fc:36:80:b9:8b:35:b0:8a:bf:eb:fc:b9:7c:3c:45:1a:
         a9:02:dc:26:43:1f:51:80:f5:3c:68:32:53:05:73:8a:d2:6d:
         38:9b:62:63:c5:12:98:45:9a:aa:0e:f0:12:03:e8:d3:7f:96:
         0e:9c:52:e0:cb:a6:0d:19:54:10:9e:bc:16:a1:ce:c6:33:46:
         35:19:57:0f:05:7b:63:f2:5a:36:44:c6:73:19:5c:c1:f8:91:
         bd:6a:bc:08:c7:b1:14:93:09:af:cb:c9:08:9d:92:20:71:41:
         98:db:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:42 2025 by rpki-client