Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7f847f0-b4c7-36ee-819b-8ad26ecdd4a3.roa
File:                     f7f847f0-b4c7-36ee-819b-8ad26ecdd4a3.roa (raw, json)
Hash identifier:          GNTx3h9KWqO1F9+/v2VYEPiMw8wiUwmRzo02jyS6Amg=
Subject key identifier:   A8:33:4F:3B:8F:6C:4A:7F:D2:FA:B2:DD:4C:CF:AB:62:6C:BB:D1:27
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6F08F989DAE2236E6AED0A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7f847f0-b4c7-36ee-819b-8ad26ecdd4a3.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.191.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:08:f9:89:da:e2:23:6e:6a:ed:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=a8881bce-592b-4f05-b894-56ff09adf223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:ae:6a:21:3c:41:48:ba:1d:ef:d9:59:21:
                    7f:eb:63:5d:8a:21:bf:3c:52:d4:eb:37:f1:a7:9e:
                    17:bf:69:d7:c9:96:6f:09:34:44:b5:48:f4:8e:0b:
                    c0:a3:a6:96:ed:97:bd:02:bc:0e:c7:82:e4:fd:7f:
                    7d:7e:bf:4d:76:82:68:89:a9:cd:50:85:7a:f7:24:
                    7b:1a:65:03:21:be:22:ad:60:18:25:6c:60:86:c5:
                    a1:fc:16:06:ab:5d:dc:64:ee:2f:87:80:af:dc:fb:
                    d6:65:e4:2e:a7:86:6b:0d:85:9b:20:d0:18:10:9b:
                    c8:ab:a1:5f:29:71:e5:7c:24:96:06:84:17:da:9b:
                    57:31:5e:ec:d4:f9:cb:76:2c:ba:45:ae:27:2d:f3:
                    e1:25:34:14:51:fd:48:aa:52:34:e8:b1:ff:ce:0c:
                    04:78:0d:39:f3:aa:94:49:de:f4:2f:9c:37:7f:5d:
                    7a:7e:32:0a:71:6f:f4:ef:da:05:86:2d:8e:7f:7f:
                    da:ba:04:5a:4c:96:14:57:62:32:cd:57:f9:e8:51:
                    ba:e5:72:37:6c:67:37:fd:97:d9:62:5f:70:c6:48:
                    b6:f3:1f:0e:fc:8c:31:f6:e8:24:0a:a4:02:aa:0e:
                    78:ea:c4:05:43:9d:38:63:f8:fb:48:06:32:e9:83:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:4F:3B:8F:6C:4A:7F:D2:FA:B2:DD:4C:CF:AB:62:6C:BB:D1:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7f847f0-b4c7-36ee-819b-8ad26ecdd4a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:3b:de:6e:2f:5b:d2:4c:e2:0c:6f:d3:3a:66:b1:37:a0:
         7d:77:3b:4d:ce:82:34:5a:65:13:83:47:3f:e2:7f:d6:06:dd:
         7f:87:4f:92:5a:ad:d5:e9:d1:4b:b9:c6:95:a0:e4:26:90:4e:
         50:69:2b:f9:b9:4c:7a:53:10:00:36:a7:7c:97:a4:b3:02:e4:
         85:4b:72:c0:37:46:de:63:4e:0f:5a:30:f2:d3:b2:e7:18:98:
         d2:40:77:fd:db:f8:ba:41:20:6c:76:cb:cb:d5:19:67:6b:16:
         8a:8c:ed:48:cc:f8:5e:b1:14:d5:32:5a:1c:13:b2:14:f2:e0:
         23:f1:c4:54:ee:b4:25:3f:87:20:00:a6:76:ad:ca:26:17:f4:
         d1:b9:4e:27:32:52:bd:06:9a:1f:d5:a0:9c:f9:52:b2:e3:b6:
         29:30:85:a6:6c:e2:0f:17:0c:df:2d:4f:37:4a:c6:c6:11:10:
         a9:84:28:2d:62:7c:37:01:79:8c:fe:a7:ac:8d:e1:97:b3:d2:
         a4:66:80:90:0d:1b:31:bf:b5:30:6f:4c:52:9e:05:08:a0:ee:
         00:9a:08:8b:0a:7c:00:3a:73:21:83:f2:63:f0:b3:cb:e1:80:
         ae:97:00:24:e3:05:ed:a5:f0:93:03:39:0b:2b:63:4f:eb:9a:
         7e:35:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:43 2025 by rpki-client