Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b1d1a31-a356-3563-861c-ce0293c69560.roa
File:                     6b1d1a31-a356-3563-861c-ce0293c69560.roa (raw, json)
Hash identifier:          sIihNWF0zXpF9QuFCR2uUhr1OFyPEB98gbMHp2O8xv8=
Subject key identifier:   31:6B:C8:5B:9B:5A:2C:FC:1D:C1:25:A0:B7:21:EF:70:47:C8:7E:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840116F71235A5C4F6117300480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b1d1a31-a356-3563-861c-ce0293c69560.roa
Signing time:             Mon 28 Nov 2022 12:00:00 +0000
ROA not before:           Mon 28 Nov 2022 12:00:00 +0000
ROA not after:            Tue 03 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:11:6f:71:23:5a:5c:4f:61:17:30:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 28 12:00:00 2022 GMT
            Not After : Jan  3 05:00:00 2023 GMT
        Subject: CN=ee80728c-64af-426e-bf9f-500a231f09e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:30:fd:f6:c3:a4:df:ab:87:55:ac:16:7b:
                    cc:29:4f:80:cb:cc:5d:80:de:31:b4:c3:90:03:35:
                    6f:c8:06:09:6f:e9:35:df:51:74:72:47:26:92:2d:
                    68:56:82:c3:a8:14:0d:6c:0f:6e:36:bf:ff:36:dc:
                    67:f0:2d:d7:da:d8:96:ee:bb:5c:24:92:7b:50:a8:
                    5a:f8:44:6c:ba:ad:c2:87:35:74:27:25:c3:6d:8f:
                    bb:e0:1b:7c:d8:c5:ee:be:7c:15:22:c8:92:c3:5f:
                    cd:0e:8a:ab:be:f0:37:4b:82:2e:84:a5:27:cd:a7:
                    60:d8:0b:81:37:10:1d:7f:23:e2:73:86:06:13:57:
                    1c:36:9a:f1:29:f2:96:99:18:82:2c:42:73:7c:bf:
                    11:b5:0e:ae:45:bd:18:52:b8:8d:9e:92:18:5f:64:
                    b3:72:e3:e5:d9:02:ce:38:0b:00:99:f2:fb:01:50:
                    eb:cf:bd:1a:f2:5e:c7:fe:80:95:e8:6d:f6:a8:88:
                    83:e3:c3:44:70:f1:e8:f9:90:8f:4d:0c:3b:18:19:
                    ca:83:ab:16:66:42:32:ce:93:b7:08:73:70:2b:08:
                    37:24:d6:2c:79:02:9a:d9:49:b5:61:c9:28:dd:02:
                    ec:db:d9:2d:b0:1c:ca:a8:04:cf:64:75:3d:3d:43:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:C8:5B:9B:5A:2C:FC:1D:C1:25:A0:B7:21:EF:70:47:C8:7E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6b1d1a31-a356-3563-861c-ce0293c69560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:f6:62:dd:4a:af:66:60:bd:99:a2:19:4c:b3:17:ca:92:
         a7:6c:bc:3b:2b:d1:a9:71:ef:be:ba:04:ec:84:ce:5a:7c:e2:
         4f:91:31:af:3c:f2:94:17:6f:13:8f:ba:f0:f3:19:f4:21:8f:
         58:75:73:be:03:e2:fd:fe:bd:ea:a2:2c:63:aa:14:17:a8:4e:
         0d:a8:8c:cf:1c:e2:02:bb:d0:2b:11:25:de:2d:5f:b9:3e:2d:
         fb:1d:1e:7b:32:23:51:54:b7:fb:7e:9f:2a:ae:28:8b:fc:97:
         ac:45:a1:d1:c0:33:a4:1a:57:cf:b3:23:72:85:d2:29:1c:c9:
         91:55:7e:0c:10:16:66:46:fd:d3:8e:a3:3c:8f:71:a6:c6:be:
         91:de:dc:70:28:45:24:bd:b7:a7:d5:a9:fd:92:0b:03:ef:73:
         fc:ea:84:03:b1:45:3a:42:c6:5c:ca:51:85:24:01:97:ae:43:
         16:0b:73:2f:39:55:80:a8:84:45:13:dd:78:29:13:41:31:71:
         b9:4b:3e:b3:1b:7b:a7:2b:ed:d7:77:0f:5d:d6:8a:21:ae:26:
         c4:b1:bb:ae:5e:67:a4:31:a2:7a:63:96:ad:02:02:60:ec:e1:
         8c:c2:6e:67:88:85:59:14:c3:1a:1d:38:d8:24:5d:08:58:ac:
         24:f4:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:12 2025 by rpki-client