Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3d4369e-ab62-32d6-aa1d-4f500fce467b.roa
File:                     f3d4369e-ab62-32d6-aa1d-4f500fce467b.roa (raw, json)
Hash identifier:          W8NlfUQO/hE2N53gSBYOwSn9ujeH4iusPSklhgJBwBA=
Subject key identifier:   CD:B7:2C:CD:5B:78:39:99:3B:50:14:FF:35:5C:54:51:AE:9C:45:6D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCFDBD7FE40F1A6477F8FA380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3d4369e-ab62-32d6-aa1d-4f500fce467b.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:db:d7:fe:40:f1:a6:47:7f:8f:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=96930bab-e525-4e20-9095-b47fad6c9f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:55:15:bb:62:fe:70:42:d9:b9:bf:f3:e0:
                    be:09:af:13:3c:67:08:ba:fa:ca:6e:ff:77:ac:ea:
                    e3:c1:8b:70:e5:70:7c:83:60:ad:7c:83:1b:d3:59:
                    e1:b5:38:3e:20:dd:c7:01:69:0b:5a:c6:61:6e:65:
                    21:c9:79:5a:9d:6f:cf:51:46:91:37:dd:88:91:83:
                    ae:f3:4e:13:f5:24:e4:de:48:41:c5:6f:fa:3e:01:
                    90:b1:87:5e:12:55:10:24:4a:61:5d:ed:2c:cb:3c:
                    f0:82:01:55:9b:93:b8:88:22:da:0b:84:82:85:03:
                    93:66:7a:b8:d3:0e:ff:ac:e7:44:5a:c5:01:b2:f1:
                    2f:4f:c1:95:b3:74:4c:ec:ac:a1:23:08:e7:65:22:
                    37:7a:da:3d:9e:fa:18:d9:71:47:19:85:37:e1:dc:
                    c6:5c:f2:79:fe:b8:bd:bb:65:ee:93:a1:8b:cc:73:
                    dc:93:20:26:8c:5b:f6:31:0f:33:83:06:d5:a0:b0:
                    8f:70:87:63:2e:9a:6f:ca:1d:83:74:c4:b6:8b:d4:
                    79:c8:39:ee:47:7e:82:be:9a:3a:8a:6e:5d:64:7e:
                    cb:16:cd:2e:7c:b6:b5:61:8d:e2:de:ab:e8:9f:90:
                    aa:24:5d:b5:17:bb:08:e7:16:af:c7:c9:c0:ba:1b:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:2C:CD:5B:78:39:99:3B:50:14:FF:35:5C:54:51:AE:9C:45:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f3d4369e-ab62-32d6-aa1d-4f500fce467b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:8c:ea:f5:fd:c1:2b:3a:8d:7d:6c:8b:68:66:59:55:0c:
         71:b9:53:98:ee:5d:23:43:cd:b0:93:41:74:21:b9:7e:66:3b:
         a6:53:54:cc:a0:b3:e7:b4:5c:24:0a:2c:25:24:06:db:c7:a8:
         e0:31:99:22:1a:9d:d6:69:60:5a:d1:d0:0b:85:44:5a:e3:6e:
         5b:de:08:e3:fe:a5:fa:f7:48:6a:4f:dc:33:d8:85:6f:77:21:
         cc:81:89:02:71:bc:0e:be:7f:18:56:2e:60:19:ae:80:2a:86:
         ab:66:2f:a1:7e:39:d5:1f:c7:72:c4:71:ee:0c:6b:99:80:b6:
         c7:27:34:25:d3:86:59:b6:e2:a1:8a:96:91:60:b8:12:1c:8b:
         4c:ac:15:5d:03:a6:d6:b5:7c:de:7c:83:e6:1a:77:a3:0a:07:
         65:e4:85:4d:20:39:ea:7d:2c:3c:66:24:66:df:23:aa:60:9c:
         42:5a:1e:52:45:23:fd:93:cb:35:78:e8:05:7d:f3:58:b8:20:
         fa:88:2c:f8:d5:cc:4a:d5:53:c7:6d:2b:3d:92:5a:ba:40:96:
         b7:34:30:1a:dd:b4:31:fb:1a:36:98:2b:51:84:2c:11:d9:24:
         cf:b9:6f:bb:03:7c:27:70:5d:53:f4:18:7b:fe:a6:bc:68:a9:
         f1:01:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:30 2025 by rpki-client