Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10080361-6ec6-37fe-8242-b413de6dbc20.roa
File:                     10080361-6ec6-37fe-8242-b413de6dbc20.roa (raw, json)
Hash identifier:          y0TpheLJQzVOw/2Ggu21FJdcxPIOxQK9VYLaHKZv4i4=
Subject key identifier:   F2:9A:66:26:24:BF:04:A1:49:8A:A7:49:65:6C:DB:B4:3D:A3:D6:56
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D030DA80022C5B09728A7BB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10080361-6ec6-37fe-8242-b413de6dbc20.roa
Signing time:             Tue 22 Feb 2022 05:00:00 +0000
ROA not before:           Tue 22 Feb 2022 05:00:00 +0000
ROA not after:            Tue 29 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        155.146.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:03:0d:a8:00:22:c5:b0:97:28:a7:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 22 05:00:00 2022 GMT
            Not After : Mar 29 04:00:00 2022 GMT
        Subject: CN=e43f2082-d02a-423d-8d3c-9d9c248a45a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:4a:d1:8f:28:4e:51:78:82:7a:ba:2d:35:
                    0a:41:30:5e:8a:dd:f2:78:5a:1f:0b:23:65:7c:c9:
                    1f:9d:21:5d:20:e3:0e:52:6a:9e:90:a9:03:3d:14:
                    15:8a:d5:f3:2f:e1:88:65:10:e5:76:c1:22:31:a3:
                    cc:6f:86:ed:9b:18:6e:65:dd:07:b5:a8:ff:0c:d4:
                    e8:f1:f4:c6:4f:07:a0:c9:d1:ab:1f:7b:95:37:47:
                    7f:2b:34:50:bb:51:41:bd:2a:fd:f0:69:31:c9:7f:
                    4b:03:fc:bf:29:13:3d:58:13:8b:73:70:ae:b8:72:
                    b8:60:ee:b8:51:75:12:4a:79:ee:0c:43:9d:ef:bc:
                    b9:4b:f7:25:7d:f2:fd:59:13:8a:55:a6:38:07:96:
                    6c:ac:39:c3:e7:23:46:8e:11:33:66:45:93:ca:a9:
                    b9:f1:cc:8d:c1:3d:fb:12:e2:92:92:55:52:09:5e:
                    7c:7b:9f:d4:35:6f:db:32:e3:65:7d:dc:be:72:b4:
                    70:92:0b:b0:04:62:c4:a2:9f:27:a6:31:6a:49:94:
                    9d:10:f4:97:54:ab:47:2c:d2:47:88:59:26:f1:30:
                    ff:01:bc:fd:da:16:37:81:c7:fd:84:fb:4a:d5:a4:
                    d1:a7:ca:de:5a:62:e1:4c:a5:f7:f3:23:af:e1:0c:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9A:66:26:24:BF:04:A1:49:8A:A7:49:65:6C:DB:B4:3D:A3:D6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10080361-6ec6-37fe-8242-b413de6dbc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:f1:8e:b9:89:6c:55:fa:a1:01:b6:45:ee:38:82:6b:8e:
         66:50:60:29:08:f0:1b:72:68:f7:f5:74:68:d1:bf:ee:28:99:
         14:92:79:5a:89:6d:57:ec:3d:9f:45:81:69:90:2a:5b:fd:ba:
         16:c8:c1:d2:53:fc:93:18:44:b7:45:f5:87:93:3d:36:02:41:
         2e:a7:24:46:f3:e1:ea:5a:63:38:b6:23:82:f1:5d:a0:54:06:
         47:45:0c:48:a9:24:e4:27:e9:bc:a4:ca:b8:32:02:0e:ca:2f:
         fa:71:79:5f:3c:f3:c9:32:e2:69:9c:e7:29:d1:c7:a9:fb:0f:
         41:80:8c:d1:28:aa:41:49:d5:1b:65:56:9d:34:d5:e8:80:18:
         87:6c:25:79:40:d2:c1:96:8d:6f:ef:3c:50:a6:56:6f:1e:3a:
         87:e7:80:c5:af:3c:96:fb:5d:2b:07:43:f9:1f:f9:1b:1d:dc:
         1f:57:0d:79:d3:9f:3d:89:7d:1e:55:a0:48:d7:82:ae:b4:f1:
         57:05:5b:bd:33:fc:21:9a:96:df:97:76:ef:e0:9b:ac:6f:b7:
         85:95:63:b7:4d:c4:c4:00:d8:24:93:6d:06:e2:06:22:b2:f6:
         56:7d:be:a3:d4:5b:f3:d7:e8:61:88:9c:43:8d:f3:1e:e6:64:
         53:b6:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:23:32 2025 by rpki-client