Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/723bb156-e90a-3c9f-9771-d4bb63b28bf8.roa
File:                     723bb156-e90a-3c9f-9771-d4bb63b28bf8.roa (raw, json)
Hash identifier:          jp0Q+NbX7rxN+IEZmocWYfoR/Wa/2eSWZ4sVi2YMryM=
Subject key identifier:   2D:DB:82:89:61:D7:96:1F:25:D9:82:83:93:EF:02:44:05:DE:9C:2B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C80BEA42774A89FA87190F850
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/723bb156-e90a-3c9f-9771-d4bb63b28bf8.roa
Signing time:             Thu 06 Jan 2022 05:00:00 +0000
ROA not before:           Thu 06 Jan 2022 05:00:00 +0000
ROA not after:            Thu 10 Feb 2022 05:00:00 +0000
asID:                     6167
IP address blocks:        155.146.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:80:be:a4:27:74:a8:9f:a8:71:90:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  6 05:00:00 2022 GMT
            Not After : Feb 10 05:00:00 2022 GMT
        Subject: CN=edbf8e38-ef83-4ba3-b53c-4ef30615c704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:e5:bc:26:fe:42:5b:d5:a7:ef:bd:4a:56:
                    ef:d7:87:70:42:ef:1c:bd:13:44:df:00:7e:6e:80:
                    4a:e5:73:01:43:9a:29:f0:30:93:93:88:fc:54:b5:
                    84:6a:f9:19:d9:1d:e7:ec:f7:ff:d6:d9:0d:29:09:
                    df:b9:b7:bf:00:79:07:65:25:a9:cb:11:e5:b2:07:
                    e4:79:ab:4d:cf:91:cf:0d:7d:88:30:5f:4f:13:35:
                    e2:27:9c:86:70:92:3c:1a:70:fc:7e:43:1e:cb:6d:
                    8b:a8:bb:a2:db:2f:5c:44:a7:0d:ea:c8:06:72:7f:
                    d3:7b:7c:b8:0a:55:a3:bd:3f:b6:c6:cc:17:42:7c:
                    e8:70:a9:5e:04:d0:82:fe:b0:25:3d:88:33:66:b7:
                    f5:48:c6:68:bb:6f:03:e7:e0:de:37:32:be:c4:eb:
                    ef:7a:88:2c:f3:2c:12:25:10:52:d0:97:8d:0f:de:
                    e4:bc:c2:0a:fd:55:4e:2c:ad:25:bc:73:05:07:4b:
                    e4:0d:29:ae:a7:bd:36:e0:18:30:ad:a4:10:d8:eb:
                    af:86:aa:64:80:60:59:99:9b:ac:b7:63:d8:af:ca:
                    ab:fd:b2:c5:bb:32:89:6c:2a:ac:19:03:41:cf:32:
                    f9:85:50:03:97:35:04:bd:a0:72:7a:80:b4:fb:8d:
                    e7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:82:89:61:D7:96:1F:25:D9:82:83:93:EF:02:44:05:DE:9C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/723bb156-e90a-3c9f-9771-d4bb63b28bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:e6:00:f3:2d:d0:29:38:32:d4:f3:f0:1b:52:86:6e:04:
         67:0e:54:51:4c:b9:45:58:62:b2:bf:0a:73:a0:1d:34:10:c1:
         a9:5b:3f:54:e2:db:40:2b:86:ba:56:9c:b0:43:66:19:82:15:
         99:eb:6d:14:82:1d:29:ce:6f:c8:32:4c:a0:8f:91:8d:92:be:
         6c:49:1c:64:7f:5a:b1:e5:f1:6c:d2:a2:2a:ca:6a:37:e8:af:
         fc:14:c2:50:42:1d:70:7d:c7:fa:52:f3:fb:18:63:e3:27:64:
         36:93:1b:35:11:38:f3:c1:da:7f:55:a9:fd:c2:7c:d8:88:e9:
         d0:1d:14:f1:76:5a:e6:dc:65:85:cc:4d:09:15:a6:03:63:c3:
         9f:eb:b7:65:f3:31:3e:20:5f:49:36:6b:aa:2e:06:a0:a3:15:
         58:93:da:12:16:1d:e0:7c:6c:11:cb:3c:29:b7:b3:1d:42:9c:
         1b:1c:ec:e8:cc:9c:17:46:0c:ed:76:a3:63:d6:9e:98:60:b3:
         8e:1b:3b:59:06:14:84:ab:48:7c:47:c9:7f:5b:ee:ed:aa:1d:
         12:53:9a:b7:75:4a:60:51:a7:49:d9:f1:b8:ba:e2:9b:26:43:
         56:75:14:f7:52:b5:0c:08:0f:98:9b:9c:a4:29:ff:15:b9:8a:
         cf:16:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:50 2025 by rpki-client