Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11b40559-1c13-30fc-8162-5f8c57404504.roa
File:                     11b40559-1c13-30fc-8162-5f8c57404504.roa (raw, json)
Hash identifier:          Jx0wDwdqgUL1Q4cFllcSiJAcA3fhT13gMQHLQPTcKAQ=
Subject key identifier:   10:1A:51:DE:AB:EC:AF:C9:D4:13:AB:6A:23:5D:86:98:0D:07:59:33
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D512A0B4F9C8BCE1FB9C6E0B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11b40559-1c13-30fc-8162-5f8c57404504.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        155.146.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:2a:0b:4f:9c:8b:ce:1f:b9:c6:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=e6085c29-cef4-45b4-ba92-867b7893d0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:46:16:a2:90:f8:c5:b7:ad:db:ec:7d:b3:
                    d0:3f:d1:a9:8a:b2:02:64:d8:9d:81:61:80:a4:a9:
                    e0:46:7c:86:06:8d:a7:18:2a:41:1b:c3:e2:31:8b:
                    13:39:0d:49:f2:25:54:ee:6f:a8:4e:13:fd:98:1a:
                    b8:d4:bb:3a:74:e7:23:62:f5:77:31:4e:8e:33:d3:
                    0d:67:5a:af:bf:73:da:3c:1a:f2:a8:ab:2a:a9:8b:
                    3f:9e:58:67:d7:fd:ff:df:9a:f0:99:b3:77:43:8e:
                    c2:7a:96:f5:b4:1d:6b:9f:fd:e2:c5:80:15:da:63:
                    e1:51:6f:eb:ff:31:f0:d3:99:99:fd:48:86:7d:ae:
                    88:54:f8:38:50:ce:a4:68:1e:98:11:95:7f:02:3c:
                    37:cc:37:8b:bb:83:12:47:60:f4:fd:02:37:fd:52:
                    99:3b:81:0b:2c:0b:b1:ec:1d:66:f9:81:b1:12:09:
                    2b:d6:38:5b:5b:86:b2:86:6a:a1:5e:1d:15:62:7e:
                    54:01:bb:e8:a5:5f:38:bb:1c:4a:01:41:d1:fd:60:
                    46:8e:0e:27:09:5c:12:24:e0:65:e2:9c:98:51:14:
                    3f:c1:e6:24:2d:60:07:fd:7e:dc:f2:5b:44:1b:eb:
                    eb:b0:c2:86:e2:fa:05:cd:76:73:09:fe:b5:7c:f7:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:51:DE:AB:EC:AF:C9:D4:13:AB:6A:23:5D:86:98:0D:07:59:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11b40559-1c13-30fc-8162-5f8c57404504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9b:48:c0:13:5d:db:65:bc:85:e0:06:24:d3:52:d4:93:35:
         57:46:8c:48:83:c6:40:7b:89:df:d6:36:25:b4:9e:e4:b9:5d:
         20:f1:25:97:f9:23:4d:b5:36:f3:d6:69:c0:a6:50:ca:6b:09:
         4c:25:06:c0:0b:88:b6:9b:ba:28:c8:a7:fc:99:9a:4f:45:a8:
         83:c8:48:18:a3:4c:69:80:fd:15:98:b5:7e:e3:ed:94:1e:fb:
         00:e6:52:6a:0d:00:db:d8:72:43:1a:bd:9d:fa:89:f8:9c:e9:
         c9:07:96:6e:90:f1:e7:93:b5:a1:6b:5e:4d:da:08:b3:c5:a7:
         b3:ef:8c:90:aa:7c:ce:5d:3a:13:1d:70:81:ec:ad:a4:eb:ea:
         45:ac:b9:17:cb:99:e6:05:7c:6e:f6:be:c4:81:64:be:5d:4d:
         9b:3f:d4:5b:f2:0a:83:75:ae:b7:a1:44:31:00:d5:64:39:83:
         15:32:70:5e:52:6f:5d:ae:1a:16:b5:d3:b8:20:d0:c6:37:b8:
         b6:ec:70:02:b5:5b:88:e9:8c:31:71:03:e7:00:a2:b6:3c:1e:
         20:9b:5d:6b:36:74:92:52:73:dc:fe:8d:17:fd:54:b5:d2:f3:
         71:16:e3:63:c5:cc:a6:cb:30:27:c8:53:33:ca:1e:88:aa:2c:
         34:d0:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:34:08 2025 by rpki-client