Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e7a741b-163a-3498-9c2b-4248cb7dbd6f.roa
File:                     5e7a741b-163a-3498-9c2b-4248cb7dbd6f.roa (raw, json)
Hash identifier:          b6SozdGfXnltp8XlKlffQDZbqPJ/Nn+QUhRJwE0Od4M=
Subject key identifier:   0F:7C:49:84:CA:CA:B0:1B:CF:57:1F:7E:09:37:0A:E4:81:8A:E1:9B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FEA3C0D2FA3648EE3E5301980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e7a741b-163a-3498-9c2b-4248cb7dbd6f.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 20 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:3c:0d:2f:a3:64:8e:e3:e5:30:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 20 05:00:00 2022 GMT
        Subject: CN=1458b6fb-1f86-4886-8ebe-50e4d093c515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:10:1e:af:e8:70:24:e5:13:27:6c:11:08:
                    44:dd:f4:bb:13:37:3e:a7:a0:6e:ed:f1:76:ee:a7:
                    91:a4:67:df:e1:2d:33:c7:c2:15:79:48:13:3c:2f:
                    ec:85:28:8d:27:11:fc:93:97:b0:bc:87:47:b3:c4:
                    86:8a:d3:3a:b0:f9:35:dd:8e:58:6b:cc:0d:57:5e:
                    54:0a:ff:7c:db:3c:91:eb:dc:9c:ea:ea:ec:e1:68:
                    28:9f:d7:87:48:c0:b1:80:30:06:15:dc:7c:40:77:
                    cf:e4:ab:7d:d7:5e:58:f5:e2:16:32:03:c6:46:44:
                    dd:1f:16:20:0c:f1:ab:df:ca:2a:33:84:4e:85:8a:
                    b1:17:28:96:be:78:02:a3:c7:49:7d:86:c3:7b:ec:
                    a5:af:a5:6c:24:d5:1e:1b:61:ef:d6:37:a6:21:5f:
                    14:70:33:c8:98:65:61:ba:ad:dc:7d:f1:f5:34:00:
                    d2:23:b2:1b:3b:ff:3b:78:fd:1e:1e:8e:00:37:28:
                    11:4f:30:16:dd:52:67:88:7b:8b:80:8c:97:8e:8e:
                    c7:38:2e:9c:b6:af:fd:89:21:e0:c7:0b:c5:d2:71:
                    9c:77:dd:a0:62:24:54:7a:0c:91:de:5e:b9:33:8a:
                    a5:7b:a0:50:9b:2b:f8:de:c9:ef:28:1a:98:ab:cc:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7C:49:84:CA:CA:B0:1B:CF:57:1F:7E:09:37:0A:E4:81:8A:E1:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e7a741b-163a-3498-9c2b-4248cb7dbd6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:93:d2:06:14:bf:4f:7e:73:c8:c2:6c:a5:d0:06:47:82:1e:
         ba:f6:26:80:83:86:ac:dd:27:f9:42:4f:8d:18:ce:b5:4e:1b:
         cc:86:e4:a2:16:08:14:55:54:e3:42:8f:93:a5:78:2d:49:de:
         89:24:d3:86:fe:0f:86:23:8b:5d:f0:cf:e2:ca:40:c0:01:88:
         de:ea:d1:dd:3c:2c:6f:a4:aa:80:0b:23:b8:f3:b7:3d:98:53:
         c7:49:be:4c:1e:81:b3:c9:44:ce:7c:00:20:70:27:a9:72:1d:
         90:7c:31:7b:cb:24:65:b8:cb:eb:55:56:05:60:37:87:fc:61:
         9b:98:f8:5a:e6:98:92:e7:13:8b:00:f7:74:4a:c7:57:f2:fc:
         22:1d:1e:8c:67:9d:a5:20:c7:dd:83:60:62:4b:3d:26:cb:12:
         7a:66:54:de:a0:60:82:f5:44:c5:7a:c5:fe:2f:b9:ee:12:71:
         f5:02:d1:44:ce:54:5e:79:3b:5d:13:f0:62:30:24:03:c7:23:
         05:67:99:84:29:42:16:1e:1a:6d:19:e7:7b:7b:64:8d:33:5d:
         c6:35:2e:d4:6e:ad:64:d5:b2:31:1e:b2:8f:5b:07:51:61:34:
         11:3c:a9:7e:f9:4d:5e:ff:61:93:44:f5:e0:f9:ac:cb:19:07:
         5d:a7:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:57 2025 by rpki-client