Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/363072c4-a6c4-3fb4-beac-087b707f2d69.roa
File:                     363072c4-a6c4-3fb4-beac-087b707f2d69.roa (raw, json)
Hash identifier:          gE4pMMQ8x59cgVBJFwiBwOkUQBH3bCMCnSZ/Y/CTWSg=
Subject key identifier:   42:7B:F4:DD:51:98:C5:34:EE:42:B1:76:52:CA:C8:53:0D:2F:8F:F5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D444F2191CC93D0C95A2FF100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/363072c4-a6c4-3fb4-beac-087b707f2d69.roa
Signing time:             Thu 17 Mar 2022 04:00:00 +0000
ROA not before:           Thu 17 Mar 2022 04:00:00 +0000
ROA not after:            Thu 21 Apr 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:44:4f:21:91:cc:93:d0:c9:5a:2f:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 17 04:00:00 2022 GMT
            Not After : Apr 21 04:00:00 2022 GMT
        Subject: CN=4c8d4868-7c1f-478f-90ec-e39e96cdb438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:2f:5e:2c:86:77:bb:22:48:63:0a:03:a1:
                    e6:3a:d8:fc:3f:77:62:02:3f:dc:3e:d0:37:9a:8f:
                    79:f2:a3:da:e6:0a:1d:0f:4d:f0:5a:0e:8e:cc:57:
                    8b:00:2b:1f:ef:dd:5c:e4:4d:bb:6d:da:56:e7:5a:
                    0c:95:21:ea:82:df:ba:76:66:32:cb:2f:22:1a:15:
                    c8:ec:72:b6:9c:b5:5e:a1:6b:e4:da:ed:d9:d1:a3:
                    ed:6d:77:4e:f8:36:3c:f6:5c:df:50:5b:8d:9c:70:
                    c3:0f:81:33:d6:ce:9f:e9:c2:ea:ab:32:4d:06:35:
                    00:7b:db:b3:a0:50:1a:15:6a:6e:15:3f:3f:51:5a:
                    62:3a:60:9b:9b:2a:5e:6d:ca:dd:ef:9f:66:c9:dc:
                    67:ab:7c:e8:3b:f8:44:79:53:63:c0:39:f8:30:ae:
                    8c:b3:c6:81:68:be:14:73:10:aa:da:19:8a:8b:9e:
                    23:92:94:17:03:c5:c3:9f:11:8a:af:79:6f:d5:9d:
                    5e:dc:28:42:95:50:ac:3f:7c:29:4c:6b:1c:12:d3:
                    3d:cd:9a:bc:f9:ea:a7:f1:c9:f6:38:87:84:b8:5a:
                    4a:ba:2d:74:1f:78:9d:fb:c3:f2:62:11:b4:82:b3:
                    79:88:c9:b9:3e:ba:1c:cd:9e:10:f7:75:2c:eb:9b:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7B:F4:DD:51:98:C5:34:EE:42:B1:76:52:CA:C8:53:0D:2F:8F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/363072c4-a6c4-3fb4-beac-087b707f2d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:97:48:ef:7b:4f:7c:33:d2:85:b0:9d:ce:25:cc:a6:e1:c4:
         d4:b6:eb:7e:9d:98:43:8c:a9:55:1d:5a:02:46:45:8e:31:cb:
         72:a6:07:55:1d:42:a8:72:28:a3:04:d9:d5:82:7a:cb:32:5c:
         d8:e4:e0:38:98:70:46:d4:b2:58:ca:93:43:d6:59:c8:68:be:
         fc:9d:86:01:6d:ef:dd:26:03:ff:ff:15:6e:3f:8b:a5:29:29:
         bd:bf:b0:b9:25:a0:1d:95:98:47:05:df:f9:a9:bb:00:8c:fe:
         a2:82:d2:21:4e:be:56:9e:02:ed:d4:1a:df:a7:40:a2:be:ee:
         a3:68:49:41:da:5f:7c:e9:95:8e:c4:a3:19:8e:d5:b3:4c:52:
         70:b5:f5:1e:09:1a:41:cb:2a:66:4f:26:da:1e:18:ab:f6:79:
         f1:5f:ea:6f:95:3e:b4:84:78:7f:35:92:84:38:ca:93:48:91:
         e2:93:28:78:da:05:5a:6e:e0:6e:5d:22:4b:f7:a6:d9:42:a8:
         84:6c:3f:1a:bd:a1:46:67:6f:e8:0c:a4:ba:57:88:bc:1c:b1:
         50:d0:d4:02:cb:b4:d5:24:f1:e4:37:c5:cc:8c:15:4a:11:aa:
         32:09:5d:1c:b3:db:fb:5a:2f:1e:94:a6:99:fe:c7:57:11:ca:
         a5:12:5d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:40 2025 by rpki-client