Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01b184ba-6b8c-3c7d-8963-74152eada7f5.roa
File:                     01b184ba-6b8c-3c7d-8963-74152eada7f5.roa (raw, json)
Hash identifier:          a3C2Yh+vXcrYBW1OEd0Xd1kwRtAyA+V83hLu5UjHpcU=
Subject key identifier:   FA:1B:64:C9:C5:1E:7F:84:B5:F6:15:9A:81:2B:87:E8:02:9D:C0:54
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584000310D171CF6C0D56BE79800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01b184ba-6b8c-3c7d-8963-74152eada7f5.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Wed 28 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:00:31:0d:17:1c:f6:c0:d5:6b:e7:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Dec 28 05:00:00 2022 GMT
        Subject: CN=ab3638ca-1461-4b77-89d4-9e5131786d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:49:93:2a:9e:6d:8f:eb:01:1d:a6:e4:37:
                    24:3a:25:a8:96:33:20:8a:87:56:85:5a:33:ce:5b:
                    50:3d:bc:3c:01:62:14:59:bc:22:2a:31:70:69:ec:
                    2b:1c:d5:e8:b7:0c:40:7b:68:a0:76:90:d9:6d:70:
                    57:a0:07:5b:bf:71:a4:7e:38:de:5f:33:1a:6e:79:
                    1f:2b:79:19:de:ee:46:32:f5:c0:7a:fe:2d:20:5f:
                    a7:8b:88:38:b5:27:fc:81:f7:bc:b3:f0:c5:d1:d2:
                    e0:90:0b:c5:38:80:70:a9:13:ac:17:b5:42:b1:db:
                    21:c2:cf:3f:f5:e8:4b:21:0a:06:39:8f:0b:4a:db:
                    57:c7:7a:5b:d7:e6:94:a3:64:d0:c7:90:94:44:f3:
                    3e:74:ea:5e:b3:85:9b:60:a1:be:76:3b:b0:3f:b3:
                    e0:6e:c8:98:01:a8:af:7a:b8:2a:c8:e2:29:de:af:
                    6d:01:5a:a1:f8:c6:12:72:d2:75:31:e6:15:9f:ee:
                    85:43:fa:a4:0d:d1:45:09:f6:ef:8f:d9:db:45:91:
                    db:4f:50:6d:9c:78:71:fe:17:d6:0c:55:ae:7a:75:
                    45:3d:34:e6:de:5c:fd:14:5b:da:3f:28:d1:c6:5f:
                    16:b3:c3:1b:30:e8:74:a4:7a:eb:22:d6:d8:87:18:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:64:C9:C5:1E:7F:84:B5:F6:15:9A:81:2B:87:E8:02:9D:C0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01b184ba-6b8c-3c7d-8963-74152eada7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:3c:72:e9:c5:46:f3:17:fb:b5:99:64:b2:86:bc:07:79:
         5e:70:44:75:7f:68:bf:4a:8e:5c:57:44:67:6e:93:d9:e2:5f:
         8c:35:78:bb:c8:69:7c:f1:28:6c:13:9e:f0:ff:c3:42:f7:80:
         fc:a3:3c:46:72:84:a4:9a:19:c9:40:76:8c:0a:b6:d9:9d:d8:
         a4:16:d4:f5:03:50:e4:65:4b:9a:7b:c7:5c:c1:98:f3:e5:57:
         7a:d8:48:80:f0:71:fa:cf:34:5a:dc:44:de:8f:f3:e6:9d:10:
         51:b1:8e:7d:0a:40:fa:4d:cd:ea:1b:d5:4d:c3:a7:6e:25:10:
         9f:67:86:d3:59:ac:09:9c:5e:e6:d5:2f:a2:d8:3f:3a:f5:c8:
         45:6a:7e:45:c2:34:9b:ae:27:c5:ff:20:9b:bb:ab:7c:37:c7:
         94:42:c9:18:39:d4:56:34:4c:c0:0f:ad:f4:14:fc:9e:6d:5d:
         ea:13:7b:41:1f:8f:9a:31:f5:ce:75:62:63:d8:2d:19:be:0e:
         b4:d5:2e:7e:66:19:5e:16:8c:69:74:38:a9:46:66:eb:0a:51:
         51:10:ac:76:18:a3:6c:97:8c:d6:d0:54:87:b1:b1:93:f2:a6:
         b2:06:7b:e3:f4:3d:45:ab:fc:fc:12:24:a2:45:d7:58:4c:1f:
         c6:6c:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:07 2025 by rpki-client