Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1f473eb-79ff-3f42-910a-0251273e6939.roa
File:                     f1f473eb-79ff-3f42-910a-0251273e6939.roa (raw, json)
Hash identifier:          fy35gGPQvFMdTeA/wZ5HHs8t89rKhhghUnB4ShyOmvc=
Subject key identifier:   2D:DB:89:98:C3:8E:47:17:23:C2:32:23:0F:FD:86:98:15:94:94:08
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584046EA20957AE551B7A09CA100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1f473eb-79ff-3f42-910a-0251273e6939.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.179.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:ea:20:95:7a:e5:51:b7:a0:9c:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=6d8ce545-975c-4f8c-ba6b-2023fc6313a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:10:c2:d0:05:cf:50:8d:30:6f:05:3d:6f:
                    0c:3f:8e:33:d9:c9:6c:d9:95:53:1e:51:07:94:fc:
                    c7:9a:1c:58:b1:45:14:74:c9:fc:db:39:d3:78:58:
                    2f:bf:62:65:15:d1:fe:f3:18:29:f5:6c:a8:67:2a:
                    b4:50:0b:6c:01:ac:eb:81:94:21:6f:b3:94:d6:fb:
                    7e:21:fd:4b:fe:a7:cf:79:88:8b:ae:e7:bb:94:8e:
                    77:3b:07:03:cc:e9:f4:90:8a:82:15:b4:c9:2d:9e:
                    80:d3:4a:03:8c:32:40:56:44:b6:d4:50:a1:d6:42:
                    c8:92:9a:fe:0b:2b:d9:69:0b:dd:3f:22:55:c2:84:
                    8c:25:94:ce:d4:c7:e9:39:ba:4d:2b:ed:e2:b9:68:
                    5b:45:3e:c7:34:cc:67:01:67:b8:45:1b:25:ef:e8:
                    65:a0:75:75:34:ed:08:a2:da:a0:6e:01:c9:b3:4d:
                    f9:3a:6c:ec:86:3d:c9:ff:11:fb:5f:44:ae:f2:5b:
                    9d:18:57:a9:5c:8b:4a:53:aa:9a:a4:d2:d9:e3:70:
                    1e:b4:7d:89:cc:79:97:9e:3f:aa:43:4d:6d:57:f7:
                    45:1c:3b:9b:25:07:2d:7c:57:70:fa:85:03:8a:b7:
                    8c:ee:51:eb:79:dc:40:18:ae:12:8c:05:6c:98:e2:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:89:98:C3:8E:47:17:23:C2:32:23:0F:FD:86:98:15:94:94:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1f473eb-79ff-3f42-910a-0251273e6939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.179.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:ce:42:34:24:b1:38:96:98:78:2b:a8:db:eb:25:30:65:
         5b:4f:00:5c:73:1f:44:cd:5c:70:be:ea:da:44:20:7e:d8:c2:
         1b:e2:90:fb:fd:ee:75:4c:ca:6e:52:06:7d:4a:99:72:95:61:
         9b:6c:0e:1c:4b:80:22:49:e5:9e:94:69:52:31:0d:08:9b:72:
         b6:10:6e:13:07:a1:6a:a5:10:c7:cc:ee:c2:31:2c:50:97:3b:
         8a:a9:99:38:8d:ce:2f:c1:84:51:75:57:5b:26:59:98:fe:8d:
         f1:11:f2:5a:62:bf:43:7f:44:77:1a:3a:a4:51:fe:41:7c:16:
         a8:b4:e0:1c:ac:23:ce:55:b2:c3:1f:d8:25:8f:34:3e:03:34:
         d2:e1:b0:e2:53:47:bd:86:90:88:15:96:b6:b6:6d:bc:d6:de:
         4c:a8:64:4d:48:54:62:42:34:39:dd:30:ed:93:16:c0:e0:87:
         68:f1:d8:83:2e:24:bf:de:67:63:d5:85:81:58:da:5d:18:a6:
         d9:65:ad:0e:c0:c9:41:68:b3:5b:dd:1f:ff:1b:2b:b8:96:68:
         78:82:60:23:9f:ac:79:fb:db:fd:3e:48:65:51:ad:8a:b8:4b:
         41:3f:c9:07:af:4f:74:16:e9:f1:d7:3e:6b:2b:5c:9a:3e:55:
         e7:cb:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:15 2025 by rpki-client