Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc87d0f3-472a-36a9-bb8f-3983edf37842.roa
File:                     fc87d0f3-472a-36a9-bb8f-3983edf37842.roa (raw, json)
Hash identifier:          NCkPSJMb00BOb3XcaOJDSjiI2MLdK5Phn1ivZb6F3GI=
Subject key identifier:   6E:66:70:74:77:B1:4C:9D:BF:4C:D7:CC:DD:49:50:8A:8D:F4:1E:63
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E700ABD604077D6E1399C6200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc87d0f3-472a-36a9-bb8f-3983edf37842.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.111.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:70:0a:bd:60:40:77:d6:e1:39:9c:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=1dc15a1c-8422-4848-bc47-094d5c597c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:f4:ee:6d:1d:74:23:a3:e0:6d:42:38:60:
                    ca:f9:d5:d0:ba:f4:a1:ca:16:84:05:d1:26:32:c7:
                    a0:0e:90:03:ad:34:64:83:b2:13:99:b1:e9:90:42:
                    01:da:d0:64:a9:b5:46:36:f2:86:64:9c:e9:af:4b:
                    1f:b4:ce:c1:64:f9:27:ff:ee:a2:12:0f:47:06:2e:
                    be:f8:48:52:a2:d7:a6:96:dc:4a:a8:de:9d:3c:e1:
                    73:e6:3c:24:15:ca:dd:45:e6:43:3c:60:b6:c1:62:
                    fe:99:ce:d2:0a:71:f6:41:8d:4f:a2:8d:be:ff:e3:
                    58:86:0e:29:41:8e:8f:25:d4:73:5e:00:04:f8:4c:
                    f5:13:0b:ec:93:10:39:22:38:22:e3:33:b5:fb:61:
                    11:92:06:cb:a8:44:05:d5:2e:ea:01:1b:7a:c0:8b:
                    4b:e6:e6:3e:14:76:58:69:c2:06:27:6f:82:a9:00:
                    c8:5a:ba:26:dd:8c:1b:f2:af:8d:01:95:39:c6:51:
                    19:de:1c:59:24:44:79:c3:42:12:62:e0:d7:f1:54:
                    68:a7:3e:c7:79:ec:1b:b4:6e:4e:65:58:9e:ed:ce:
                    9e:96:2e:6f:fb:91:9a:e3:f2:c3:d5:3d:f5:7d:91:
                    f5:0a:8f:61:4a:17:91:1b:b1:0b:3c:06:2d:e0:96:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:66:70:74:77:B1:4C:9D:BF:4C:D7:CC:DD:49:50:8A:8D:F4:1E:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc87d0f3-472a-36a9-bb8f-3983edf37842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:4a:1d:0d:79:9f:e3:8a:2f:81:97:8b:aa:62:4f:26:72:
         8a:12:81:29:bc:de:fb:6a:7d:34:4c:6c:b9:25:83:63:6f:1e:
         03:a1:52:e7:4f:4e:a4:b8:53:ce:76:30:4b:48:3b:b2:21:ef:
         98:63:e4:bf:a4:b8:2f:2e:a9:96:51:f8:9a:d8:fe:5f:18:55:
         73:3e:1d:f1:6e:3a:0c:15:ef:07:66:21:68:63:48:b4:7c:6f:
         2c:b3:0d:86:88:be:0d:e2:97:67:86:44:29:d8:92:bc:18:43:
         a0:48:b9:bf:5e:7a:7f:9b:f3:2d:6b:f3:7e:aa:f0:50:23:40:
         63:49:80:d0:19:19:51:e5:79:f8:64:6c:05:0d:37:1f:3d:22:
         f2:8a:25:f8:f2:d9:ed:4b:37:98:95:7c:b8:40:b4:2a:39:f8:
         01:92:de:19:6d:15:01:15:d3:ac:be:f6:0b:b3:b6:32:bb:ae:
         86:69:36:19:f0:db:54:b6:64:ff:a4:69:2f:72:04:be:78:27:
         1c:1f:c9:0c:61:36:a8:e9:f8:ea:c8:2e:16:29:9d:51:6c:98:
         fd:6a:bb:d9:ba:89:4b:ff:41:a4:48:aa:92:7b:a1:37:18:d6:
         5e:95:42:1d:cf:c5:51:2f:3a:ee:ff:8b:48:1e:e9:97:38:01:
         3c:93:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:11 2025 by rpki-client