Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f77dc4e3-c934-3c5f-a98a-9b87b4681ab5.roa
File:                     f77dc4e3-c934-3c5f-a98a-9b87b4681ab5.roa (raw, json)
Hash identifier:          x3uoaE4eZPAHXzco0G8RiV37/agtmTS8sgQYOOvGMGs=
Subject key identifier:   54:4A:87:72:77:27:A0:47:1B:84:43:BC:79:CC:15:21:CE:D7:EA:DA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D328AA014B6C4F995BDD6AA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f77dc4e3-c934-3c5f-a98a-9b87b4681ab5.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.176.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:8a:a0:14:b6:c4:f9:95:bd:d6:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=d6ae76bd-15d3-42a7-9f20-aa3c1914f71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6d:40:e6:41:06:da:d8:9d:d0:6f:58:b1:44:
                    cf:45:11:5e:a5:a7:30:31:ba:94:73:83:07:58:d1:
                    12:b7:a8:34:32:36:e0:be:03:e8:da:ad:b5:fd:68:
                    3b:7a:c4:be:85:65:18:66:8f:d6:ae:23:e7:51:2d:
                    4e:8f:28:db:fc:31:67:3f:94:49:a5:1f:95:58:97:
                    95:c1:7b:ec:0a:68:7a:b6:76:e7:dc:01:0f:f7:54:
                    ed:43:80:b6:37:59:ba:df:cc:12:96:e5:8b:46:d6:
                    38:11:83:a0:13:76:09:9c:1e:7a:e5:dc:c1:8d:54:
                    d3:99:a7:43:b0:26:c2:f6:33:4f:66:cb:0a:e9:07:
                    b4:6d:d2:fa:80:50:12:17:b2:41:bf:95:2c:0f:c2:
                    eb:7c:34:84:e6:03:31:71:27:04:69:9a:f1:92:d7:
                    f8:0d:a8:a2:51:d5:30:4b:cf:73:49:2f:98:29:6a:
                    8d:c2:33:4c:80:be:22:4d:46:c7:f0:f0:f7:83:5e:
                    1f:29:c0:4d:51:88:d0:83:2e:ad:dd:d0:30:2d:67:
                    97:da:18:c4:e8:36:bd:c5:e9:2a:dc:9e:ee:a1:b1:
                    20:81:d4:79:98:4f:76:de:fb:a7:78:0c:55:49:09:
                    15:c1:e8:57:c9:a1:6f:dc:20:38:97:62:4a:f2:83:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:87:72:77:27:A0:47:1B:84:43:BC:79:CC:15:21:CE:D7:EA:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f77dc4e3-c934-3c5f-a98a-9b87b4681ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.176.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:14:26:ef:56:ca:b3:08:bf:10:dd:34:45:c4:b3:28:9e:42:
         0a:8e:8f:3e:c7:c1:1f:06:17:10:f7:65:1d:82:09:f6:28:2f:
         58:5e:c7:cc:99:a7:42:d2:0d:7d:87:17:8b:20:84:ab:19:1e:
         98:9e:c3:75:94:9f:ce:92:ed:a5:cf:c6:3f:4f:14:15:2e:52:
         e7:c4:c1:48:6f:6f:46:ca:3d:4b:c4:89:27:75:83:73:68:70:
         59:c6:e4:d4:e0:22:16:d6:73:bd:99:2f:d8:b3:ec:bb:3f:9f:
         21:84:d9:6d:99:7a:71:2f:a5:41:a7:01:bd:dc:42:1c:4a:3f:
         ec:33:ff:0f:84:87:be:dd:7e:38:da:66:90:74:0c:0f:d2:c7:
         23:7e:b2:62:9a:51:b4:3f:25:de:93:13:d1:94:26:53:66:e1:
         70:3b:a0:52:0d:fb:91:35:57:0b:ee:c9:e8:ce:1f:36:8c:7d:
         f9:0e:e2:82:47:d1:51:54:14:ba:09:84:cb:23:64:e0:04:e6:
         c1:85:43:8c:91:ac:ba:a1:d1:00:38:ed:ae:1c:c4:b6:79:92:
         3c:2a:72:61:bb:ca:a4:16:79:b5:58:74:37:75:dd:fd:12:0a:
         be:6f:c6:ff:4c:a9:ef:0a:30:b5:35:e5:6c:02:2b:2c:8f:e9:
         54:fd:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:30:47 2025 by rpki-client