Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ebebedc-826d-3a93-982f-e38c8dc882f8.roa
File:                     6ebebedc-826d-3a93-982f-e38c8dc882f8.roa (raw, json)
Hash identifier:          uZu1WwTTq2+ZVzNAsI/uGbsRxPkfJ0SUtyT438ROtko=
Subject key identifier:   72:AA:00:E6:70:26:C8:B2:42:06:4D:86:C8:EF:68:27:DE:5A:9A:53
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E3BFD1B134423A6509F979A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ebebedc-826d-3a93-982f-e38c8dc882f8.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        155.146.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:fd:1b:13:44:23:a6:50:9f:97:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=d2588937-4d05-4958-8b75-74ba76b2a093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:18:a8:b4:47:12:90:f8:cf:45:3f:4c:78:
                    97:ba:98:11:78:c2:de:6c:df:96:d5:9b:b8:bc:15:
                    03:17:cd:7d:8c:f0:e8:8d:39:57:61:45:d7:dc:92:
                    f0:bf:9d:3e:67:70:39:3e:9c:70:83:1a:15:e6:15:
                    cd:2b:27:47:9f:4e:7e:21:7e:8d:5e:17:b7:91:88:
                    5c:94:83:ce:a1:7f:d3:3d:db:84:dc:25:35:08:2a:
                    85:58:ce:ab:18:0a:5c:52:a4:04:a7:ac:a8:b1:bf:
                    5b:08:9b:1b:18:17:3d:dd:18:bd:5b:52:69:e7:27:
                    aa:b6:de:eb:7b:c0:b8:9f:73:9c:30:b6:98:5a:91:
                    a8:b7:c9:e2:a6:40:63:f0:4e:55:8e:3d:55:53:13:
                    d9:81:2c:11:95:f9:37:21:70:77:e9:0c:66:a0:80:
                    74:1a:ed:0d:c3:0a:63:0c:4f:aa:17:e9:5e:87:d2:
                    f2:b5:c2:93:3e:1b:9f:5f:9f:5e:4a:ce:05:cb:f9:
                    f5:85:62:6c:29:5c:6f:0c:33:2b:15:65:ab:1b:3f:
                    13:36:f4:3d:48:50:39:7e:69:8d:11:e0:2c:8f:80:
                    98:a2:43:ed:a6:50:c7:5e:69:b6:3b:24:22:41:bc:
                    80:fa:de:cc:26:bc:34:ab:2c:d3:fb:a4:b9:0e:8a:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:00:E6:70:26:C8:B2:42:06:4D:86:C8:EF:68:27:DE:5A:9A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ebebedc-826d-3a93-982f-e38c8dc882f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:7e:9b:da:23:e7:a7:f3:a2:07:e0:f1:11:0b:b0:7f:e0:af:
         a8:b0:b0:01:cc:80:64:ec:29:a7:43:31:ce:ed:8d:b9:54:cb:
         1c:2f:3f:bf:5f:fd:bd:c9:1d:1a:31:97:ba:17:8d:c9:17:7f:
         75:e8:55:16:76:0a:28:b7:e2:36:85:f2:d3:51:65:ac:c4:6b:
         41:b9:35:32:47:73:3a:19:0c:13:87:6c:0d:5c:82:ed:be:7f:
         00:12:c7:78:02:40:37:50:82:91:dc:8f:1f:98:99:3f:c6:56:
         6b:ee:2f:50:e8:b0:6b:61:36:af:c5:cb:7c:02:a8:a5:2a:27:
         69:db:93:6e:a2:5e:f6:c5:5f:29:e4:ba:bc:60:f5:5b:05:ca:
         6c:06:f6:eb:52:31:f7:8c:72:cc:4a:1d:a3:b1:a6:96:87:18:
         9e:67:af:bd:f2:d5:7c:61:0f:ca:5d:a8:20:c0:78:78:9f:0e:
         50:55:fd:3c:df:0e:0c:4e:69:a1:29:1f:10:3c:28:2d:d9:07:
         93:e9:35:2b:79:33:e4:72:a9:44:32:1c:b3:c0:a2:af:41:65:
         92:b8:c0:fc:0b:b7:98:97:41:72:4c:d6:d8:e2:49:44:2a:57:
         bd:f1:11:fd:0e:8c:63:af:5b:15:cd:7b:60:a2:45:14:fa:3e:
         f7:28:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:33:09 2025 by rpki-client