Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/599b77c4-432e-33ce-91bb-56aeef62fa48.roa
File:                     599b77c4-432e-33ce-91bb-56aeef62fa48.roa (raw, json)
Hash identifier:          81pxhViJOPvdH+T0LKlU9eStDhZ3wGeB8KQLLTNuxxM=
Subject key identifier:   8E:96:7A:1C:34:4E:BA:2B:39:A5:E8:1B:12:79:3E:89:52:70:0A:0D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D426B1581D1E6FFF57176EF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/599b77c4-432e-33ce-91bb-56aeef62fa48.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Wed 20 Apr 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        155.146.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:42:6b:15:81:d1:e6:ff:f5:71:76:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Apr 20 04:00:00 2022 GMT
        Subject: CN=220140c7-2ee4-4ca1-9fca-e803a82f38e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:37:e4:be:ae:8f:43:b2:44:c8:1c:de:19:
                    cd:95:b1:75:c8:1c:cb:06:07:f9:54:f8:b8:35:f5:
                    a7:d8:be:30:a6:72:c3:eb:36:1a:38:4d:90:1e:d8:
                    db:ff:d7:26:1e:8d:35:04:9e:f5:51:d7:5f:ed:15:
                    48:7e:7f:79:76:e5:91:1e:af:07:1d:e1:27:57:a7:
                    49:43:88:f2:1e:45:90:ad:84:24:d2:15:97:21:57:
                    68:d9:64:c0:0b:83:9a:fd:e4:08:ac:6e:99:fc:ea:
                    9f:73:3c:97:66:0c:22:77:f4:a9:98:e6:93:c9:06:
                    78:9f:78:97:9c:a7:85:34:af:43:cc:ed:93:43:69:
                    db:ea:d9:b5:5b:5e:19:46:d1:61:4a:67:7e:5e:f5:
                    b3:de:ef:f4:66:a6:33:da:6d:2b:df:7e:55:d8:4a:
                    e6:9c:ec:88:8e:e0:c6:b4:56:ec:de:89:08:c2:93:
                    22:3f:04:f6:14:23:5b:93:84:9e:e5:f1:87:c1:95:
                    5e:24:57:62:5a:fb:b7:b8:c3:d8:b4:63:ce:f7:a3:
                    c7:ef:e3:70:0e:5b:ad:e8:1e:d4:3f:5e:e5:57:8f:
                    23:67:48:c3:0f:ad:6b:5b:0c:f4:f8:fe:b2:8e:a4:
                    1d:32:0e:93:da:07:c2:78:b2:15:67:e0:81:12:f7:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:7A:1C:34:4E:BA:2B:39:A5:E8:1B:12:79:3E:89:52:70:0A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/599b77c4-432e-33ce-91bb-56aeef62fa48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:97:3c:a8:65:4d:61:41:59:2d:e7:8d:df:77:f3:6d:f0:
         58:1c:29:b0:80:fb:68:53:2c:fe:81:b8:c0:dc:53:85:ba:ec:
         e7:1f:36:50:bf:15:77:6d:cc:92:8a:9e:4b:61:27:02:1e:84:
         9f:c9:26:79:64:c5:97:18:23:b4:ec:b4:ca:84:70:e2:9d:a9:
         bc:69:b0:cf:fe:60:bb:3a:c9:dd:37:9c:93:fd:f6:ce:e3:a7:
         55:ea:89:79:53:6f:71:64:56:ba:e9:c1:76:29:df:3f:13:5b:
         7b:24:08:68:a0:46:b4:81:f6:f4:4d:39:88:79:c7:bf:ac:80:
         23:b2:4d:e4:31:e3:d6:2e:cd:db:04:74:4d:12:2c:fd:c9:1a:
         18:8c:0f:5b:b2:e7:25:5a:4e:23:c2:d9:2e:eb:56:c9:87:77:
         1c:f8:b3:6f:72:a8:13:81:46:d1:80:e0:54:74:b5:de:64:06:
         24:bd:7d:4a:7d:01:43:1b:28:30:f2:cc:b6:5d:42:f1:48:a8:
         6e:a2:5b:81:08:eb:b7:a7:b2:04:5f:7b:1d:3e:51:34:f4:37:
         47:37:80:2b:19:ca:69:92:07:a3:de:4f:e7:57:89:9a:22:b0:
         03:a9:44:0d:d8:8a:d6:5b:4d:65:66:3c:1d:ff:4c:98:a6:68:
         44:0e:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:37 2025 by rpki-client