Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d88fb63-c395-3a86-9c11-d9c836a80003.roa
File:                     4d88fb63-c395-3a86-9c11-d9c836a80003.roa (raw, json)
Hash identifier:          HHJTNPukt97AL7+88OZTCY823/NXuZ1BILjRlzQAX6o=
Subject key identifier:   93:63:C1:4A:9C:56:A7:0C:66:39:00:54:23:47:65:CA:CD:FC:A8:25
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F19B2A9D3AF90238720AEB940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d88fb63-c395-3a86-9c11-d9c836a80003.roa
Signing time:             Wed 31 Aug 2022 12:00:00 +0000
ROA not before:           Wed 31 Aug 2022 12:00:00 +0000
ROA not after:            Thu 06 Oct 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:19:b2:a9:d3:af:90:23:87:20:ae:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 31 12:00:00 2022 GMT
            Not After : Oct  6 04:00:00 2022 GMT
        Subject: CN=c4d18135-47bd-4541-8e06-27fec4eef0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:40:99:91:e0:84:2d:93:34:60:2a:fc:bb:
                    82:0d:b5:3c:ae:80:45:46:fb:85:d6:b6:37:5e:8f:
                    2c:9a:76:ff:67:57:f5:77:e8:91:b5:78:52:93:ad:
                    b2:a9:ca:e0:60:b7:69:14:b9:14:8e:bb:05:42:30:
                    a3:21:4a:fe:15:82:ed:18:93:93:9c:57:ee:50:12:
                    11:ae:aa:83:85:ac:93:83:b0:fe:df:7b:41:e8:cc:
                    c6:ae:e6:8d:bd:3e:f4:6e:96:f6:3a:7a:36:d9:e7:
                    01:3e:60:8e:06:56:cd:8f:3f:69:0c:ab:13:f3:08:
                    75:1e:34:8d:0a:1c:a2:69:53:d4:f9:5e:76:e6:29:
                    7d:07:bb:68:54:87:15:5a:c8:92:cb:e4:b7:24:24:
                    7c:ec:70:1e:9d:25:12:4a:fc:ba:23:0b:d7:97:06:
                    a2:23:b1:b4:cd:d9:5b:ef:a2:68:05:f7:0b:11:69:
                    91:9e:86:69:31:16:47:1f:7c:29:05:e7:36:cf:cd:
                    5c:d4:3d:f1:ce:95:c8:af:d8:b5:cd:f6:10:fa:de:
                    83:65:c7:11:b1:dd:2f:7c:83:3b:77:54:9d:2b:1b:
                    e6:a0:c2:11:52:64:f3:98:69:49:f3:f6:42:f7:98:
                    12:ef:24:88:b8:52:86:d8:2c:4f:f4:cd:65:ff:fa:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:63:C1:4A:9C:56:A7:0C:66:39:00:54:23:47:65:CA:CD:FC:A8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4d88fb63-c395-3a86-9c11-d9c836a80003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:7f:fd:36:24:d5:fe:60:71:b3:f8:d3:5c:dc:94:51:33:
         dc:e2:b8:16:2e:af:86:9e:5d:2c:29:44:df:77:af:15:49:21:
         e4:87:e7:f0:2c:82:c8:43:f8:74:0f:aa:22:f3:3e:f6:9a:39:
         ea:ea:cb:06:a8:47:ca:9d:bb:d6:9b:9b:20:ed:a2:90:d6:20:
         42:58:51:c5:eb:00:39:1a:2f:86:81:5d:78:e8:b6:82:8f:25:
         05:a8:0f:80:ae:88:45:a1:9f:0a:0b:05:85:3f:4e:90:bb:32:
         e2:f2:b3:57:b5:86:e8:d5:df:64:36:8e:17:ed:38:b4:e0:f3:
         52:fc:f5:87:bf:35:32:7d:f0:85:3b:05:2b:55:48:39:53:75:
         eb:50:66:3a:1e:87:63:57:6e:3d:23:1d:1d:df:47:b8:04:13:
         d5:14:cc:47:15:76:81:4f:f5:3c:27:fc:98:03:5a:2f:ef:6d:
         4c:30:07:31:00:d0:7c:78:58:01:0f:fa:78:cb:3b:9c:b2:cb:
         d5:e0:2b:ab:ef:51:8f:54:d0:83:ad:7c:6e:3f:35:01:0f:17:
         26:c9:c1:c4:15:dc:46:c6:fc:92:2c:1f:08:7f:7c:f7:cc:4f:
         99:b5:f4:64:23:3f:51:97:91:bc:d9:79:7e:35:16:94:be:cf:
         c9:42:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:35 2025 by rpki-client