Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6090c6d6-fa77-3f2b-b0fb-a994eda8ee0b.roa
File:                     6090c6d6-fa77-3f2b-b0fb-a994eda8ee0b.roa (raw, json)
Hash identifier:          dF2VOZ7ynCl0p5fSzgEr67M3WwwanO2SvNTkPmwhN2A=
Subject key identifier:   03:36:63:49:26:2F:A6:73:47:C9:00:7A:A6:97:AA:8C:AF:5B:39:4E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F28ACAC62FD6735D88CFF0280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6090c6d6-fa77-3f2b-b0fb-a994eda8ee0b.roa
Signing time:             Tue 06 Sep 2022 12:00:00 +0000
ROA not before:           Tue 06 Sep 2022 12:00:00 +0000
ROA not after:            Wed 12 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        155.38.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:28:ac:ac:62:fd:67:35:d8:8c:ff:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  6 12:00:00 2022 GMT
            Not After : Oct 12 04:00:00 2022 GMT
        Subject: CN=10eb307d-886d-4d24-8648-4394d67534d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:1a:78:e8:3f:92:46:68:ff:6f:31:9e:a9:
                    fe:69:e4:d2:dc:10:2c:3f:6f:c4:02:6b:91:a3:91:
                    f1:dc:0e:2a:07:e8:a8:91:76:f9:07:5a:30:20:c1:
                    97:c9:bf:48:45:0e:7d:34:5d:a0:90:c4:18:63:3c:
                    5e:4f:ef:e1:a0:c4:bf:ac:39:fe:92:ad:f1:c7:9a:
                    62:d9:e2:78:a5:16:ff:7a:26:06:eb:78:88:0e:d5:
                    e0:27:35:06:63:12:d2:61:77:65:46:e7:1d:bd:cf:
                    6d:8c:2d:6d:e1:da:9a:64:91:f4:35:24:fe:23:5b:
                    ea:f8:b6:ae:ad:9b:50:44:fa:16:8c:a6:2c:40:4d:
                    57:32:4f:ef:9a:86:11:57:68:22:ad:99:42:64:7e:
                    c2:59:24:c0:33:10:09:f9:5b:c4:fe:8d:b6:cd:fc:
                    b9:8b:01:66:92:f9:41:e4:13:e2:c5:d9:b6:bf:bd:
                    b2:20:5a:8c:75:75:ea:74:b6:9d:95:33:6a:b2:5f:
                    73:cd:f7:d9:7d:15:49:d4:eb:c6:b9:6b:54:8c:b4:
                    c0:00:e7:d8:27:a8:4a:77:01:a3:94:c7:f8:78:79:
                    ab:01:8f:a7:76:6c:70:57:01:e4:64:9b:20:12:ac:
                    cc:66:cc:a9:7b:be:93:18:13:68:f4:8c:4f:91:42:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:63:49:26:2F:A6:73:47:C9:00:7A:A6:97:AA:8C:AF:5B:39:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6090c6d6-fa77-3f2b-b0fb-a994eda8ee0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:65:5c:c4:d0:ba:ee:66:58:35:c2:03:73:92:4a:94:ef:ea:
         2e:7a:c4:92:2e:08:02:c8:64:91:f8:59:4e:3b:cd:9b:ea:80:
         77:54:cd:99:09:2c:05:9e:69:32:c0:7d:ac:a1:2e:f8:ce:0a:
         c3:b5:f6:f6:96:a9:a2:84:24:08:ec:96:b6:c9:2f:3e:6d:7f:
         6a:16:d1:13:6f:75:a6:28:ca:a8:21:fc:66:3f:50:43:79:4b:
         96:96:93:3e:03:84:d8:e8:d8:d3:fd:6a:70:59:db:c0:b6:7f:
         e5:35:f8:dd:c3:a2:ae:9a:28:98:e1:20:7c:a9:c7:a7:b6:ac:
         3a:dd:ff:e4:3f:3d:6b:2e:b6:82:1e:88:b3:00:a9:45:ee:fd:
         7d:44:ad:eb:35:0f:49:25:95:88:49:17:b0:b7:ed:52:6e:0d:
         dc:4d:f5:a6:3d:d8:3e:ce:9b:87:90:94:fa:72:f5:62:fa:9f:
         b5:09:73:8b:a7:d7:bc:c6:cd:c0:96:64:68:94:2b:e3:00:03:
         e5:f3:71:4d:fe:2a:cb:ec:46:6e:19:ec:0a:8c:3c:3e:9f:2d:
         fa:f6:b2:0d:58:d4:8d:05:df:0d:34:0b:bd:9e:40:24:37:46:
         17:00:3c:3f:2a:f8:bd:04:85:40:ea:80:07:1d:42:eb:0b:cc:
         bc:58:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:46 2025 by rpki-client