Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eebda46b-c024-3ac0-a85c-c6439154d82f.roa
File:                     eebda46b-c024-3ac0-a85c-c6439154d82f.roa (raw, json)
Hash identifier:          2/1JVu5iXpRhx/W7O4pMWcs2mXsA8Ekat5/zvl51RMQ=
Subject key identifier:   45:36:9C:FA:6B:E3:9A:BF:9C:B2:0A:6E:36:ED:7E:7E:3B:0F:75:90
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D5964D4465785B19AFD217180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eebda46b-c024-3ac0-a85c-c6439154d82f.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.46.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:64:d4:46:57:85:b1:9a:fd:21:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=c60443c9-88f1-463f-befc-cdc39f5bd289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:af:cb:26:cd:dd:e6:81:20:5b:47:82:05:
                    75:1d:33:ed:63:05:4d:8e:67:a9:b2:04:d4:5b:94:
                    d6:71:52:50:32:3f:57:d3:1e:cd:1a:b2:bd:61:46:
                    4c:00:0c:7e:ce:12:0e:10:cf:a5:c9:11:87:a5:88:
                    00:3a:20:10:4e:a5:da:07:9b:87:6d:d2:50:32:11:
                    12:6c:01:e2:be:e9:69:dd:2b:aa:8f:d3:c6:bf:81:
                    51:53:db:d6:8f:cb:49:24:05:15:63:d6:c9:90:64:
                    4c:f7:58:c5:26:74:a5:0c:8b:92:ac:e2:76:a4:d7:
                    3f:29:e1:ae:8b:8d:ed:a7:2f:ec:6e:bb:ed:ad:f8:
                    79:33:c3:e9:72:0a:68:b1:45:1c:11:f7:35:ca:10:
                    e0:57:b6:9f:14:b2:9f:f3:00:fb:73:4d:e6:f4:76:
                    8a:67:5b:30:ce:4c:8f:a9:c7:60:49:84:4b:7c:13:
                    72:17:1e:c5:6e:8a:e5:a6:c7:83:45:43:72:12:67:
                    be:3c:34:c2:8b:3d:e7:ab:cd:6c:e6:f6:62:fc:53:
                    7a:b7:28:99:10:c4:97:2d:6d:8a:7c:0a:07:37:7f:
                    80:94:83:9d:b8:70:e0:0e:98:e5:4c:5c:51:da:d2:
                    c7:40:f8:22:d6:8f:19:30:0e:75:00:1a:87:53:76:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:36:9C:FA:6B:E3:9A:BF:9C:B2:0A:6E:36:ED:7E:7E:3B:0F:75:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/eebda46b-c024-3ac0-a85c-c6439154d82f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.46.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:46:47:93:c2:46:98:f8:89:39:e8:41:87:4e:2b:f9:eb:24:
         1d:c1:69:9f:fc:e1:e0:af:a5:00:7e:53:b1:04:17:1e:7c:43:
         7f:41:bf:6e:70:d8:20:b7:c8:5f:c5:ac:57:14:bf:33:9c:93:
         ce:f4:41:bf:03:68:47:99:47:f5:59:36:d4:25:fe:0f:c5:3a:
         ac:5f:8d:0e:15:20:a5:80:22:92:3f:b3:04:00:21:e5:e3:a2:
         04:10:d0:1c:58:91:c2:9b:e7:1e:ab:0e:8e:15:0c:3e:93:8d:
         d7:2d:d5:fa:15:d5:f1:cb:e7:61:b1:4c:39:32:2d:63:9f:e1:
         65:5c:bc:55:c8:78:30:ad:aa:af:55:25:46:0b:00:90:b6:c0:
         95:c7:71:b6:5b:41:a0:d1:16:de:5d:d6:fc:f2:48:4e:f7:36:
         73:37:0f:c1:b2:1d:c6:0d:aa:ef:1c:82:66:fb:24:fb:c7:f2:
         a5:e8:fe:0e:50:5b:e8:ed:be:32:ab:9c:25:43:fe:1b:31:22:
         6d:82:fe:ac:1a:b3:4b:bb:80:00:ed:a2:43:bf:43:8c:b5:a1:
         23:1b:8e:bc:4d:5e:9b:e5:5f:dc:82:9a:5b:83:88:ad:10:43:
         55:f2:80:a7:18:0d:22:6c:b6:55:22:74:53:01:6f:40:99:f0:
         1f:63:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:01:36 2025 by rpki-client