Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eccf52d2-7203-3dd8-af70-745f4ff24753.roa
File:                     eccf52d2-7203-3dd8-af70-745f4ff24753.roa (raw, json)
Hash identifier:          2qycvpIHcM7fn5/4yodY7n0c/ZH5b0mUHT8JX8RA18U=
Subject key identifier:   8C:59:3C:90:F4:5B:8E:86:06:06:8E:A0:D8:95:15:EE:A7:42:27:58
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858401FBE733EE3D414316E130580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eccf52d2-7203-3dd8-af70-745f4ff24753.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.192.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1f:be:73:3e:e3:d4:14:31:6e:13:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=a5121f1e-d22f-48c0-8071-8a165c18b23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b4:16:53:a5:a9:a9:52:2a:44:70:21:f5:f6:
                    94:2e:c8:da:ea:73:1e:7e:7a:2b:65:d7:e3:c5:cc:
                    33:04:03:ed:b6:fb:3f:af:00:32:d8:26:80:f0:8e:
                    b0:d0:24:e3:e6:65:d3:25:00:25:dc:e9:fb:d0:a0:
                    39:10:78:ed:f7:c4:51:f2:71:2f:46:fb:f2:95:cd:
                    b2:29:e1:28:16:1f:6b:c6:3a:e7:df:70:4d:70:1e:
                    7b:4b:ef:5b:9c:bf:56:66:60:db:ca:ae:fb:ca:ed:
                    6c:dd:b0:d1:16:51:30:3a:74:31:0f:aa:6c:5d:c2:
                    5a:56:39:5b:81:84:ff:05:a4:4d:36:5d:96:28:60:
                    91:03:2c:5c:79:01:76:b9:e0:5c:73:16:6a:a3:cd:
                    6c:8c:ed:f3:02:d6:f4:c9:23:7c:9d:a2:bf:a8:2a:
                    7f:72:b7:46:01:5e:f7:fa:81:90:c4:4b:8b:39:2f:
                    5e:0b:aa:71:86:1e:1b:eb:9e:4b:df:56:1e:d9:53:
                    50:5f:94:f6:02:a5:bc:8c:0a:6a:5e:00:06:1d:9a:
                    b5:92:65:6f:26:4e:84:de:7f:0e:31:eb:fb:72:c9:
                    de:47:c7:06:5d:4c:ae:82:9e:e2:37:61:95:c3:46:
                    e6:77:b2:15:4e:42:b7:97:6f:c3:0e:d3:e8:1c:96:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:59:3C:90:F4:5B:8E:86:06:06:8E:A0:D8:95:15:EE:A7:42:27:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eccf52d2-7203-3dd8-af70-745f4ff24753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.192.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:57:e1:32:96:b7:ba:67:39:90:5e:dc:93:0f:c9:c9:6f:d6:
         84:e9:1c:cd:f7:59:76:3a:9a:8b:d3:51:66:f6:bc:6e:70:0a:
         d5:60:a7:83:2b:cd:73:41:d0:d6:30:a7:b5:1d:de:4d:58:16:
         37:ad:05:c8:ce:b8:6d:c8:c7:63:f8:2b:3f:40:65:8c:71:7b:
         b0:67:4e:8d:a9:11:01:48:31:03:ea:f2:88:30:60:15:4d:9c:
         dc:50:e9:ab:19:1a:6d:f7:cd:4d:f1:82:0a:b4:19:55:c6:9c:
         72:47:ce:ca:8d:b7:1b:b0:bb:73:15:e0:a0:e5:28:2e:4b:22:
         62:c9:f5:9e:6d:c3:66:5e:46:c3:dd:cc:a1:a5:48:4d:69:70:
         89:0d:58:12:74:c6:31:ae:b5:df:8d:6f:e5:33:94:83:2c:6d:
         74:5f:13:47:e0:f8:91:df:13:7b:62:38:9b:60:3e:cc:0e:2d:
         42:cb:60:4f:10:c2:2c:45:c7:f8:f1:d1:3f:14:e0:3e:16:55:
         0b:f3:09:ed:65:79:6c:2d:cd:5a:3d:ca:3f:ad:a4:88:a0:ef:
         ff:00:1f:07:7b:ba:65:e8:0e:2f:d3:e8:69:d4:ea:35:aa:5a:
         65:c2:bf:18:91:cc:f8:66:04:ec:ed:68:6e:a7:57:fa:e5:58:
         1d:5e:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:51 2025 by rpki-client