Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb4c24ad-643d-3d6d-ba33-a3eba9959e1e.roa
File:                     eb4c24ad-643d-3d6d-ba33-a3eba9959e1e.roa (raw, json)
Hash identifier:          Asvl4mxIVqus7kqoRstOOIbkHcobHxXHYxOcnoQXvUc=
Subject key identifier:   94:82:5D:5C:C7:F5:6D:D8:96:59:5A:D5:B0:DE:86:E5:46:42:52:47
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D326CDD09E2A061471C26DA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb4c24ad-643d-3d6d-ba33-a3eba9959e1e.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.123.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:6c:dd:09:e2:a0:61:47:1c:26:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=3abddedc-11dd-4856-a554-43f66d43c5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:2d:03:c8:29:1a:56:fc:7f:32:10:65:d3:
                    33:88:bb:90:84:3c:72:44:de:be:f8:80:05:af:2a:
                    0d:e9:ed:bd:a0:c1:de:ce:f1:9e:80:16:6c:fe:f2:
                    ee:0d:4f:c9:e1:00:6e:b3:d0:bd:5a:80:f5:e4:4e:
                    78:a5:36:14:e5:ac:49:8b:d1:91:1c:95:6b:00:32:
                    9c:78:da:b2:0b:05:b7:67:07:17:42:bf:4f:f0:ba:
                    bf:34:a6:81:db:ef:05:11:50:99:78:9a:ca:79:6b:
                    b8:3c:31:f1:b8:6c:98:e4:b7:65:8a:11:75:6e:85:
                    2a:c0:d1:31:ce:0d:48:19:f5:3b:4d:05:b6:cc:c5:
                    92:c3:c7:61:c2:6e:ae:c9:61:f0:33:c1:71:81:e1:
                    70:13:01:3d:a3:a9:eb:94:f2:fc:bb:4b:2a:71:b4:
                    b7:d4:02:44:40:68:19:cd:65:29:28:eb:25:51:63:
                    d1:7f:a2:76:b5:e7:19:15:55:df:6e:8a:9a:0a:34:
                    64:60:37:66:47:1e:d6:a1:06:4f:2d:6d:03:d8:7a:
                    6f:e8:a3:c6:f2:0d:4c:73:2e:21:76:fa:cb:1d:50:
                    ee:8a:3f:4a:6b:7e:99:72:f7:cd:d6:3d:43:4f:b5:
                    cd:4d:4b:35:07:8c:cd:39:8b:09:9f:59:73:fe:4f:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:82:5D:5C:C7:F5:6D:D8:96:59:5A:D5:B0:DE:86:E5:46:42:52:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eb4c24ad-643d-3d6d-ba33-a3eba9959e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:cb:98:f6:79:75:ae:2f:bb:2c:a7:41:73:9d:09:1b:85:38:
         69:de:3f:35:78:f9:8d:0e:bb:4a:d4:ec:30:a1:da:d5:61:c0:
         d5:c0:87:15:bf:92:dc:93:92:27:39:d7:e2:7b:e8:0f:7a:31:
         35:6f:54:a2:1d:68:e3:cb:e4:b5:9e:b4:84:ff:5f:e0:c9:8f:
         4c:f7:56:52:db:52:8d:59:c5:18:a3:89:c9:0a:c9:7a:cd:ed:
         7d:9d:8e:e4:a5:9a:79:c2:4f:8b:b5:83:50:7d:cc:68:a7:45:
         d4:a9:27:ff:92:9e:10:dc:92:8f:a8:03:9f:ce:53:40:ac:b8:
         b7:3e:8e:71:7b:23:46:b6:dd:4f:84:f6:61:11:ec:97:54:85:
         7a:19:66:f4:a1:04:71:76:a2:e7:78:c5:27:59:47:22:ab:db:
         0b:df:69:cb:71:29:cc:ee:6a:f3:aa:85:58:e6:75:8a:45:58:
         79:70:09:ea:70:67:1f:83:89:02:21:cf:60:3e:e1:a8:92:b9:
         9f:5b:67:46:f9:bc:71:43:bb:4c:e3:ed:8d:b0:74:c9:de:90:
         b7:f3:fc:c1:52:e8:07:47:be:43:5c:a4:ad:fa:03:c9:ce:70:
         94:4b:72:8a:4c:00:f5:01:f0:a6:18:e0:2c:3d:11:bf:d6:62:
         76:cd:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:05 2025 by rpki-client