Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea9c5581-8d27-391c-906a-553353ca1158.roa
File:                     ea9c5581-8d27-391c-906a-553353ca1158.roa (raw, json)
Hash identifier:          Euod7G28SjdXrTWgXk2aPaa1K0LUpm/9lb9HnDVPG/4=
Subject key identifier:   AF:38:60:7B:B1:83:79:21:15:FD:AB:7A:C4:78:62:4A:59:E9:62:67
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D80A6F009F522F9C9AAE90FC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea9c5581-8d27-391c-906a-553353ca1158.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.137.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:a6:f0:09:f5:22:f9:c9:aa:e9:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=5bc5f311-0dec-4e13-ae24-366a707cb9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:51:5d:cf:bc:30:1d:05:70:31:95:66:f7:
                    4b:24:60:3d:96:63:dd:32:c5:1c:dd:41:fd:a9:47:
                    20:54:ae:ab:c3:89:c4:4e:05:5c:6d:e5:d2:8e:e7:
                    c5:83:47:e8:cb:63:03:eb:8a:1e:c8:ba:bf:7e:09:
                    2d:af:6c:eb:fb:fd:eb:aa:b5:6c:5a:a4:a6:1e:da:
                    ea:f3:86:7a:b3:60:4a:63:05:b7:fb:87:aa:cc:fc:
                    33:e5:dc:aa:9f:a6:e7:ca:3a:ed:6d:c3:b7:21:22:
                    65:51:6a:8d:59:7b:c5:57:6a:21:3e:7c:ac:fb:12:
                    04:a7:8e:1b:d2:fb:90:70:ad:85:04:1a:90:9f:07:
                    4d:7c:2a:e2:89:9a:6b:8a:08:a5:1a:bd:c8:2c:3f:
                    21:42:29:30:68:46:f2:48:a1:cb:c7:93:1e:af:00:
                    ae:3b:92:9a:93:e9:b9:09:94:fe:93:e6:51:39:28:
                    2c:b0:14:92:f6:43:7d:e7:08:83:2f:31:cd:f4:42:
                    f9:3d:0a:34:f0:da:db:9b:30:ec:54:b1:cb:db:64:
                    69:1a:ff:9a:84:f9:81:30:ee:bf:75:ae:3d:55:12:
                    10:cb:2c:60:bb:72:58:6e:77:80:b4:ea:1e:40:46:
                    cb:00:c6:2b:44:cf:a9:21:68:99:38:92:e4:31:3c:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:60:7B:B1:83:79:21:15:FD:AB:7A:C4:78:62:4A:59:E9:62:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea9c5581-8d27-391c-906a-553353ca1158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.137.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:28:51:b8:aa:67:7a:15:4f:ef:50:2e:c9:c5:44:7b:ce:
         77:65:e5:71:8f:0d:dc:c5:44:18:43:72:be:c4:c4:17:14:df:
         86:60:ab:37:8b:af:3a:fa:66:83:71:7e:30:7b:c2:03:14:33:
         ac:ce:76:dc:1e:28:e7:49:97:56:b8:14:1b:dd:c4:7c:0d:cb:
         fa:6d:aa:10:c2:6f:3b:ec:56:c4:e9:27:ad:ae:bf:1b:a4:00:
         5d:2c:6a:78:71:46:37:98:8e:58:a9:5e:6b:a0:13:6f:b6:42:
         4c:b4:11:c0:32:1a:21:81:3f:51:e3:65:62:f1:08:de:b8:09:
         34:58:ac:49:a7:44:49:39:e8:00:8b:93:8e:7c:d6:43:f2:16:
         a8:f6:b9:8d:8a:74:79:36:f0:ad:77:a6:8d:49:6f:d1:d4:74:
         d7:9c:b3:07:72:54:4c:76:ae:40:41:cb:99:ca:37:1a:cd:ac:
         86:0d:99:e1:68:78:83:42:05:bc:29:37:ee:ad:c9:3a:5f:93:
         79:87:c1:64:30:5c:96:8a:7b:c3:be:6e:08:4b:f9:4d:67:b4:
         a0:e2:38:61:8e:c4:f1:3c:f2:a4:c2:86:b9:37:13:b8:23:22:
         36:3c:70:ec:ea:be:d7:74:24:1a:b9:3a:31:ce:54:d4:83:9f:
         8b:0d:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:06 2025 by rpki-client