Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cbbe871-eff0-3404-a29e-44bc2b38b0a6.roa
File:                     7cbbe871-eff0-3404-a29e-44bc2b38b0a6.roa (raw, json)
Hash identifier:          OgtySXsciOaGNI/n0t0H+h6KXhV7QS/CrCWbxj1Mmm0=
Subject key identifier:   A3:57:36:81:6E:52:F9:A1:BA:65:D8:E4:FD:14:EF:76:24:AD:37:DE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E2AEAE0309877A7B46F76DD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cbbe871-eff0-3404-a29e-44bc2b38b0a6.roa
Signing time:             Tue 07 Jun 2022 12:00:00 +0000
ROA not before:           Tue 07 Jun 2022 12:00:00 +0000
ROA not after:            Wed 13 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2a:ea:e0:30:98:77:a7:b4:6f:76:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  7 12:00:00 2022 GMT
            Not After : Jul 13 04:00:00 2022 GMT
        Subject: CN=07744d91-c991-41dc-a973-b2f9d42ef942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:78:f9:77:a3:5c:33:b9:d4:4f:3e:4b:76:49:
                    32:7f:cf:d7:00:8e:96:00:78:03:f7:b0:11:35:67:
                    48:b5:c9:8b:2a:c9:80:ef:d3:bd:8d:b2:8f:52:ec:
                    d9:f9:95:45:d3:d2:c8:55:34:2a:db:aa:a5:7d:40:
                    97:f4:60:09:34:35:36:ed:e7:94:4c:f7:b8:c5:9a:
                    22:5a:26:78:7b:45:2d:40:74:3d:b3:99:eb:b2:03:
                    28:ab:a4:b8:5c:f6:d3:b3:0a:89:70:ab:4e:ba:12:
                    ca:43:f6:fa:36:43:1b:e4:bb:a4:5d:fd:bf:95:94:
                    8e:5e:85:b0:6f:f9:89:cd:77:06:28:a7:86:e1:c8:
                    64:f1:82:18:19:76:dc:be:fa:93:9f:60:a4:9a:8e:
                    f8:b9:de:5c:79:bf:b2:42:f1:e3:09:1d:ef:63:70:
                    2a:e6:ee:49:5e:4f:9f:f4:40:ba:74:a4:02:7e:92:
                    66:ba:76:ca:83:c0:4a:a2:89:a8:48:c1:84:a4:31:
                    5e:c7:a8:fb:41:b8:22:d8:24:e8:6a:5d:dd:5f:60:
                    c4:4e:f7:dc:d3:37:34:c7:25:db:2a:e6:08:89:57:
                    c5:d5:a0:76:82:d9:0f:0b:24:bc:ff:16:b3:9c:d5:
                    59:62:73:93:35:77:86:53:e6:4e:09:77:5a:1e:82:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:57:36:81:6E:52:F9:A1:BA:65:D8:E4:FD:14:EF:76:24:AD:37:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cbbe871-eff0-3404-a29e-44bc2b38b0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:91:6a:6d:85:40:4e:17:a3:d8:19:74:e6:af:c0:c2:3e:ec:
         4b:f0:c7:5b:43:3f:81:e6:33:17:0d:df:54:87:a4:b4:d0:7e:
         f9:a6:b9:20:f0:81:7d:4d:71:53:b7:c3:90:ae:4c:1a:21:d3:
         a8:78:9b:40:b1:2b:99:0b:0b:85:98:a7:f4:08:38:66:bc:de:
         16:fb:a1:97:f8:49:dc:32:8f:56:e1:76:00:a4:fa:af:49:43:
         55:0a:d2:c3:72:8b:47:1f:a3:94:9e:56:ce:b4:0d:db:0b:8e:
         1b:cb:88:88:4a:fb:c2:fd:6f:0b:a6:42:9a:e7:37:08:43:34:
         8d:d5:b5:ea:4a:d8:da:0b:d3:09:8a:55:2a:47:fd:9a:f4:c1:
         59:c7:08:91:62:c8:52:f6:67:bf:f9:b6:d7:78:7f:2f:3a:87:
         3c:3b:1f:50:73:31:9c:bc:80:85:07:f5:f0:43:20:0b:9f:23:
         0e:e2:f6:41:dc:a0:2f:43:10:b5:99:71:3f:b5:f0:1f:95:4a:
         e2:77:dd:20:7c:6f:c3:1e:d4:49:03:90:2a:e7:8f:c9:13:ad:
         6d:1c:62:70:ae:f3:7a:66:df:e0:bf:b9:cd:76:fa:36:68:9e:
         06:56:40:a7:69:c9:22:02:ad:a8:d6:ff:8d:43:cb:c0:b8:b3:
         3a:ff:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:57 2025 by rpki-client