Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3416c7c5-fb7f-31e9-b946-95079486009a.roa
File:                     3416c7c5-fb7f-31e9-b946-95079486009a.roa (raw, json)
Hash identifier:          YBb5DaEWsp3e/7w0B6Vz+f+j7+ZFmqM26it7fdOmaKc=
Subject key identifier:   17:CD:DB:0F:E3:89:D3:7E:B7:92:81:08:FB:75:30:B6:1A:79:95:C6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D2A2AE161E6A479FF5ED4DB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3416c7c5-fb7f-31e9-b946-95079486009a.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     701
IP address blocks:        155.146.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:2a:e1:61:e6:a4:79:ff:5e:d4:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=85fba6d7-ec8b-481c-be39-c9e62c99ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:1c:b7:f8:f0:25:2a:1b:b3:2c:83:63:dc:
                    a2:57:d2:18:80:b9:92:79:a2:d4:58:eb:32:2f:4c:
                    8d:e3:16:87:a2:2c:80:cc:d5:5d:1a:92:9d:98:7b:
                    76:30:f4:81:81:88:c4:33:bb:53:9d:a3:9c:81:2a:
                    29:64:d4:0d:55:7b:3c:ec:ab:84:e6:b8:fb:df:65:
                    be:43:5f:3d:73:b7:91:51:53:ac:12:40:27:08:60:
                    66:84:46:f4:f2:38:38:c4:92:03:27:8d:91:06:4d:
                    cd:2c:e0:8a:2e:b2:5f:05:ff:56:d7:b8:e0:eb:2e:
                    51:e5:40:b3:4c:60:56:fd:e7:1a:7a:f0:e5:cf:31:
                    55:db:19:33:a7:50:ab:80:e2:0c:ff:73:e1:ce:3d:
                    a5:c6:dc:52:22:0d:43:cb:10:fd:df:71:45:20:b8:
                    95:39:6c:51:cb:85:63:d8:51:7d:1e:6c:c2:6b:1e:
                    97:a7:91:cc:19:76:67:d9:81:58:72:6a:5a:c4:50:
                    2a:54:17:8f:41:41:71:d8:10:84:0f:b3:ee:3b:ed:
                    9f:22:4d:81:9a:88:34:cf:fe:be:a7:84:23:cf:09:
                    70:4d:7c:49:d2:02:19:46:cb:fe:bb:c5:6b:87:d0:
                    b1:ab:bc:c6:75:c9:d7:1b:2e:09:28:64:43:d1:1d:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CD:DB:0F:E3:89:D3:7E:B7:92:81:08:FB:75:30:B6:1A:79:95:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3416c7c5-fb7f-31e9-b946-95079486009a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:85:3f:6c:5f:f3:ce:58:b2:54:41:31:cb:67:38:60:9e:d5:
         ca:05:c9:c5:9f:81:3f:44:a3:22:57:48:fd:b1:47:eb:58:17:
         00:f1:44:69:30:25:14:07:80:76:cd:ed:85:d8:a5:9b:48:80:
         11:55:c1:d7:1e:d5:39:f2:fd:87:9d:bb:50:a2:78:94:5f:7c:
         db:b4:c0:7b:19:d1:d8:ea:80:a4:7d:da:ab:8f:6d:f7:66:81:
         13:db:fa:c4:92:b7:bc:9c:10:80:fc:a2:5a:97:6f:b5:2c:f8:
         39:ee:2e:b9:f2:fb:3f:f9:30:e4:a7:33:a4:17:41:82:ef:14:
         cb:15:fc:11:a4:02:69:e9:a6:e6:90:e8:6c:0c:b1:33:5a:75:
         d8:12:a6:e2:9a:83:51:5c:d6:34:b5:d5:9c:eb:8b:97:b8:c4:
         f7:5d:ce:c6:cc:75:a0:b3:a9:c3:b3:65:18:b5:c2:c3:77:4a:
         78:c0:d8:13:ca:02:f7:c3:f8:d3:4b:37:c1:b1:7c:32:45:28:
         55:91:6c:ba:76:1e:ee:40:e0:92:27:e6:c6:c6:d9:b0:17:61:
         2e:01:ac:a7:66:a5:81:ac:b2:ac:b8:1d:62:53:ef:06:29:bb:
         6c:78:b9:ed:8b:c8:26:1d:22:4f:f2:f6:c4:0e:f7:0a:2a:91:
         1f:73:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:51:35 2025 by rpki-client