Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6194ab73-2584-39f1-b075-020c79b588f7.roa
File:                     6194ab73-2584-39f1-b075-020c79b588f7.roa (raw, json)
Hash identifier:          sXKprXY6VKFsfiPFLosUxTpzfkqUy6RO21URbHPlCBo=
Subject key identifier:   CE:54:4D:AB:E0:18:4D:A2:B8:01:4D:45:68:51:EC:F0:44:F9:9E:42
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D67612FAA172CD1EED5D178C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6194ab73-2584-39f1-b075-020c79b588f7.roa
Signing time:             Wed 30 Mar 2022 04:00:00 +0000
ROA not before:           Wed 30 Mar 2022 04:00:00 +0000
ROA not after:            Wed 04 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:67:61:2f:aa:17:2c:d1:ee:d5:d1:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 30 04:00:00 2022 GMT
            Not After : May  4 04:00:00 2022 GMT
        Subject: CN=e288db67-d4f2-4379-a74e-5ef7740df307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:29:6e:0e:91:2b:3e:3a:5e:7a:0c:18:11:
                    b7:2b:04:35:45:79:80:ef:bd:96:19:ec:5b:b2:3e:
                    a0:61:c1:94:7f:41:41:8f:69:7d:82:f0:e4:31:62:
                    7d:bb:73:da:04:36:c6:ad:35:49:55:9a:99:7b:32:
                    3f:3e:c7:c2:ba:72:5f:fe:13:bb:f5:21:1a:a2:e5:
                    1f:0d:a8:63:db:1c:c5:ca:50:a7:f1:7b:57:c5:a0:
                    82:e9:d2:14:3c:82:a3:3b:38:95:66:76:82:b2:9b:
                    b3:3d:17:20:01:32:81:29:b6:eb:06:4f:ef:9e:6c:
                    ff:ad:4c:27:62:e3:33:12:7f:c4:ba:79:10:b3:61:
                    65:2e:55:f4:de:7a:45:86:33:9b:ad:53:eb:4f:a3:
                    fe:5f:d1:a1:e7:a5:5b:1e:f3:b4:ae:b3:c3:7b:54:
                    15:49:55:8d:e7:46:3f:c6:3b:4b:83:f8:e8:4e:6d:
                    23:36:8a:db:22:38:ab:da:32:1b:fe:5f:0c:80:43:
                    55:92:c4:58:c5:8d:e3:ee:fd:25:37:44:38:14:cd:
                    54:01:c3:25:84:83:41:92:f1:5a:54:50:18:67:87:
                    58:9b:d6:db:a7:65:30:db:42:e5:11:6b:b9:21:d5:
                    70:9a:08:93:14:4c:25:ad:00:1d:27:3e:73:ad:3e:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:54:4D:AB:E0:18:4D:A2:B8:01:4D:45:68:51:EC:F0:44:F9:9E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6194ab73-2584-39f1-b075-020c79b588f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:be:79:a3:1c:3c:f6:d4:e0:be:43:b3:32:a4:da:e0:20:
         f3:61:fe:cb:20:f5:fc:39:62:3d:23:a2:2a:f9:a2:ff:f3:40:
         c5:0d:e7:04:3a:1a:a5:92:8a:d9:54:a2:ba:f5:9e:b7:60:3a:
         32:3d:dd:53:61:7b:84:4e:1c:f7:a4:cf:ad:1f:de:42:1c:dc:
         bb:29:ea:54:43:69:dd:b5:98:8f:ee:36:7a:92:2d:10:2b:0f:
         ae:e7:93:cf:71:18:24:03:55:dc:4d:11:66:c3:51:64:f2:bb:
         ab:74:e4:16:d6:a9:19:1c:94:23:2d:9f:bf:a6:47:f9:25:5c:
         9d:31:9f:a1:01:0b:f5:82:71:e4:82:82:73:db:87:4f:e4:94:
         9e:18:45:7f:11:05:79:ba:76:1b:c1:53:69:06:a5:48:38:19:
         d5:ca:fb:de:c5:63:e8:c7:de:74:05:15:c5:a2:88:5a:6f:d0:
         e2:c3:16:b3:71:2c:e3:9b:bd:b6:4d:7f:52:fd:fc:51:7a:66:
         bd:78:3d:d1:23:4d:aa:ce:74:90:c3:aa:4f:86:33:41:a8:72:
         d0:22:90:d5:17:0b:54:be:fb:12:bc:75:8b:8a:e6:b9:70:ea:
         39:e4:be:66:04:14:8f:c5:81:3c:2d:05:ec:cf:b2:e4:8f:0f:
         e3:c0:5c:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1nYS+qFyzR7tXReMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMzMDA0MDAwMFoXDTIyMDUwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZTI4OGRiNjctZDRmMi00Mzc5LWE3NGUtNWVmNzc0MGRmMzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTcpbg6RKz46XnoMGBG3KwQ1RXmA772WGexb
sj6gYcGUf0FBj2l9gvDkMWJ9u3PaBDbGrTVJVZqZezI/PsfCunJf/hO79SEaouUf
Dahj2xzFylCn8XtXxaCC6dIUPIKjOziVZnaCspuzPRcgATKBKbbrBk/vnmz/rUwn
YuMzEn/EunkQs2FlLlX03npFhjObrVPrT6P+X9Gh56VbHvO0rrPDe1QVSVWN50Y/
xjtLg/joTm0jNorbIjir2jIb/l8MgENVksRYxY3j7v0lN0Q4FM1UAcMlhINBkvFa
VFAYZ4dYm9bbp2Uw20LlEWu5IdVwmgiTFEwlrQAdJz5zrT7q5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM5UTavgGE2iuAFNRWhR7PBE+Z5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjE5NGFiNzMtMjU4NC0z
OWYxLWIwNzUtMDIwYzc5YjU4OGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlDcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoym+eaMcPPbU4L5DszKk2uAg82H+yyD1/DliPSOiKvmi//NAxQ3nBDoa
pZKK2VSiuvWet2A6Mj3dU2F7hE4c96TPrR/eQhzcuynqVENp3bWYj+42epItECsP
rueTz3EYJANV3E0RZsNRZPK7q3TkFtapGRyUIy2fv6ZH+SVcnTGfoQEL9YJx5IKC
c9uHT+SUnhhFfxEFebp2G8FTaQalSDgZ1cr73sVj6MfedAUVxaKIWm/Q4sMWs3Es
45u9tk1/Uv38UXpmvXg90SNNqs50kMOqT4YzQahy0CKQ1RcLVL77Erx1i4rmuXDq
OeS+ZgQUj8WBPC0F7M+y5I8P48BcuA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:05 2025 by rpki-client