Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa430833-ea21-3d90-8006-d236f0713b7d.roa
File:                     fa430833-ea21-3d90-8006-d236f0713b7d.roa (raw, json)
Hash identifier:          QPjNeL1B26Tp274MDnZ2mXOytTl2LMsQ+42fat3yiwc=
Subject key identifier:   32:D3:1B:96:6F:51:8F:1E:FF:3F:7D:F0:15:9B:8A:0E:FE:C3:FC:40
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840413EB0D115B64212561EA880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa430833-ea21-3d90-8006-d236f0713b7d.roa
Signing time:             Thu 15 Dec 2022 12:00:00 +0000
ROA not before:           Thu 15 Dec 2022 12:00:00 +0000
ROA not after:            Fri 20 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:41:3e:b0:d1:15:b6:42:12:56:1e:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 15 12:00:00 2022 GMT
            Not After : Jan 20 05:00:00 2023 GMT
        Subject: CN=cb7b952a-ff7e-4aef-baa7-840ead6493fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:10:82:25:41:29:99:0a:ea:74:ef:67:73:
                    31:86:9e:23:36:c3:73:77:84:6b:f7:7e:7a:1c:5f:
                    0a:7a:b3:8a:08:97:ed:0b:99:a6:cb:41:cb:91:f3:
                    67:d6:df:1d:b2:7c:46:72:85:ed:60:7b:5c:a1:14:
                    69:31:19:e4:0b:68:62:be:36:e2:dd:fa:70:d1:b7:
                    0d:21:78:3a:54:18:0d:db:c8:10:13:58:af:2f:65:
                    b2:cf:01:f2:c3:73:bc:71:c4:48:1b:20:ed:63:a2:
                    db:1d:8c:df:88:be:01:d0:3b:ab:88:68:72:f4:f2:
                    b7:3e:b2:53:94:de:a7:ab:fc:7d:b1:19:96:db:a9:
                    2d:63:92:78:14:b9:bf:78:01:dd:9a:66:07:45:b2:
                    a1:12:8d:f0:8a:27:84:19:b6:bd:65:80:9d:1a:db:
                    ed:cb:f2:7a:ac:ed:8e:da:c4:a4:09:23:dd:30:85:
                    1e:6b:19:a3:06:e2:60:31:94:03:2b:45:25:7c:3e:
                    f9:13:17:ac:ef:c4:3f:0f:ff:f7:2a:8c:5c:05:cb:
                    3c:95:ed:55:55:25:e6:4f:ff:d7:1c:c6:b0:db:41:
                    d1:43:64:94:a0:3f:df:d5:cb:fb:66:a5:29:7b:9e:
                    82:e3:6a:b4:e0:01:ed:2c:bc:59:70:00:28:50:6b:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D3:1B:96:6F:51:8F:1E:FF:3F:7D:F0:15:9B:8A:0E:FE:C3:FC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa430833-ea21-3d90-8006-d236f0713b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:7f:2a:16:ba:13:dd:8c:8f:90:f5:b1:ed:29:9d:bd:b4:
         49:a8:58:88:22:60:c0:28:cb:73:73:a5:00:e7:fc:ac:43:a8:
         b1:79:83:a0:83:36:d8:d4:32:ae:5c:a8:cb:41:42:c6:3d:4c:
         29:71:99:c0:5a:78:e0:00:8b:79:dc:67:8c:7c:f0:86:a2:09:
         1f:a6:78:4c:6b:ec:15:c4:4b:ad:ad:ac:5c:d6:30:cb:ec:9c:
         15:b9:5b:36:e5:a0:ef:d2:59:db:80:85:d1:67:6e:df:1c:0c:
         0a:fa:4e:f8:ed:8a:0a:08:7f:04:ec:b8:e4:b9:2e:4e:48:8d:
         5c:44:46:5e:1a:4a:c2:37:73:a3:e2:a5:09:43:44:87:50:fb:
         f3:1f:ff:ae:c7:00:55:f6:f0:b9:e0:e6:d9:03:96:33:98:3e:
         43:20:2e:d8:10:66:27:30:22:6d:42:8b:55:c7:9b:1b:e1:55:
         b1:20:4d:83:18:f8:ef:0f:78:a2:f7:d6:1a:2b:50:e5:c0:9b:
         75:43:d1:9d:d3:da:b1:f5:8a:9f:0e:da:39:a2:dc:38:2b:35:
         47:bf:89:f5:54:c4:34:4b:e6:df:88:b3:73:00:1c:e8:c7:bb:
         1e:1a:a3:a2:07:a2:e5:59:a9:25:53:b1:1b:0f:d9:18:76:6b:
         98:3a:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:30 2025 by rpki-client