Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72124f73-dd40-3ab4-8b45-aed9b2791397.roa
File:                     72124f73-dd40-3ab4-8b45-aed9b2791397.roa (raw, json)
Hash identifier:          ONMLbaAReEgQvTNY1P++s+B9Y9MIWMODiHwncsFhjtw=
Subject key identifier:   8F:38:52:1C:DB:8F:A4:E0:6C:D7:F5:E2:9C:82:CC:47:8F:08:61:97
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CB490B10750AA119DE4834A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72124f73-dd40-3ab4-8b45-aed9b2791397.roa
Signing time:             Tue 25 Jan 2022 05:00:00 +0000
ROA not before:           Tue 25 Jan 2022 05:00:00 +0000
ROA not after:            Tue 01 Mar 2022 05:00:00 +0000
asID:                     6167
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b4:90:b1:07:50:aa:11:9d:e4:83:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 25 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2022 GMT
        Subject: CN=aa7d5c82-233b-48f1-a843-1c8def52161a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:d5:c7:88:41:98:fc:e6:5c:6e:7f:1c:08:
                    ec:0c:01:82:d2:85:a8:2a:8a:30:96:d7:ad:a2:eb:
                    9f:5e:af:6f:88:e0:6d:64:c7:ef:1a:07:7d:e5:8a:
                    9e:1c:0d:e4:59:10:9a:d6:de:48:97:de:0d:b0:85:
                    ab:ad:49:7b:05:07:ec:ed:27:56:42:87:90:c7:65:
                    2a:f3:78:8e:8c:85:24:08:01:62:88:86:4f:a9:8a:
                    83:b1:cb:0e:92:89:9b:b0:bd:2e:5c:67:20:c3:44:
                    b9:fc:29:2c:73:ae:b5:87:0f:97:2a:16:6a:91:db:
                    b7:7d:11:69:64:ff:ea:68:73:c8:b0:9c:2e:65:be:
                    fb:50:66:70:84:d0:fa:ed:af:46:8d:44:6d:b8:22:
                    b9:60:1f:57:e2:23:06:40:f6:57:a8:98:8a:9f:79:
                    b4:85:9e:10:93:87:3b:8f:d1:1f:54:da:1a:60:89:
                    fe:de:9d:92:d9:e1:91:17:a8:13:bd:73:dc:d2:40:
                    c8:97:b1:f9:46:c9:10:f4:fb:57:19:45:af:97:6b:
                    20:2d:ee:49:ec:f6:ad:7f:c2:37:00:05:f8:f9:16:
                    87:86:6d:f9:4e:5b:76:82:55:41:68:fd:f6:d7:8c:
                    dc:04:c4:7b:d3:eb:82:e4:4e:b2:8a:f1:22:75:7c:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:52:1C:DB:8F:A4:E0:6C:D7:F5:E2:9C:82:CC:47:8F:08:61:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72124f73-dd40-3ab4-8b45-aed9b2791397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:49:ae:10:d8:f1:71:a1:97:cf:2a:16:12:90:a9:a5:ee:a9:
         58:ba:b7:d3:dd:16:88:6f:02:9e:9d:8e:47:f1:cc:8c:69:68:
         05:6b:17:b2:ff:cc:af:53:c1:68:89:c3:63:90:92:da:f5:22:
         e9:5c:5e:e5:ad:24:f6:9b:3e:a3:bb:55:07:84:5d:65:44:0f:
         f1:76:8f:f1:46:d4:56:7e:73:18:ab:7f:95:9a:70:e5:05:28:
         24:88:da:12:65:eb:0c:53:97:59:50:9f:4b:bb:e5:08:2b:10:
         e0:0a:d5:aa:bf:9d:ad:e5:8d:6f:f8:89:ae:ae:34:99:77:d1:
         fd:00:ef:37:e3:01:6e:23:c1:cd:c4:2b:21:af:95:71:5f:a1:
         ac:f4:fc:91:be:50:88:c9:3f:dd:b6:fc:ab:bd:7b:73:36:16:
         dd:b1:96:c7:86:0b:04:9c:0a:2f:c6:3c:f8:0c:7a:5d:bb:d3:
         2b:77:a6:4f:a5:37:d4:ce:ed:70:97:ac:b1:96:28:3c:7b:48:
         87:b4:18:ac:37:1a:c9:aa:d3:30:1a:1d:5f:cf:b8:38:30:3b:
         25:bb:ab:c2:5b:7a:b5:c9:15:e8:2d:1a:76:f9:20:fe:f1:11:
         bd:32:b8:9a:2e:1e:69:02:b8:7c:55:2f:a5:5a:74:58:ce:ec:
         2d:1b:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:15 2025 by rpki-client