Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8285ef3e-2f43-3b23-ae4d-719be65105e2.roa
File:                     8285ef3e-2f43-3b23-ae4d-719be65105e2.roa (raw, json)
Hash identifier:          2xqxKZBuYBd4twQIVWu48/B9ff7FY5BLqkYvEzNLM2Y=
Subject key identifier:   C0:20:5C:D8:E7:BC:01:90:C9:5E:74:C9:21:8A:48:9A:AD:1C:CE:CE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D426B2243F68A7ADEB5065C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8285ef3e-2f43-3b23-ae4d-719be65105e2.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Wed 20 Apr 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        155.146.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:42:6b:22:43:f6:8a:7a:de:b5:06:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Apr 20 04:00:00 2022 GMT
        Subject: CN=16c27144-4acd-4374-ba40-076bdf8d4ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:05:40:d0:3e:da:10:4a:45:a8:c8:cb:6d:
                    2e:08:9e:60:f1:41:0b:2b:df:48:24:03:91:b4:15:
                    f9:49:fb:26:93:fc:2c:fb:a7:a1:05:ad:a5:f4:6f:
                    93:16:dc:fa:4b:79:52:d4:48:1c:9b:73:f4:2d:58:
                    3b:96:8c:bd:59:17:11:87:ad:97:50:6c:8b:a1:41:
                    29:61:a6:0f:a9:90:90:5c:8d:03:7f:e6:8a:1b:84:
                    50:64:12:64:1d:61:20:52:b1:10:7a:ee:ee:20:4d:
                    20:6c:35:db:d6:0f:fe:50:ae:4b:5a:2a:bc:ea:83:
                    8b:ae:ab:1e:be:df:6d:21:14:af:3c:e0:11:ac:79:
                    ec:9d:4e:a1:fe:d8:c2:a9:f6:7c:95:e2:77:14:11:
                    09:8f:2e:f0:de:e1:e2:b9:1b:a0:9a:b1:77:0a:7c:
                    99:9b:7b:8d:a2:ab:24:cf:c0:d3:00:52:78:5e:92:
                    4e:7d:67:fc:48:ed:b4:c4:00:17:a1:88:7b:02:f6:
                    ff:e1:6f:b8:59:d9:1f:b9:6e:4b:6e:8b:58:d3:59:
                    72:8e:ac:31:ab:55:5e:e2:77:9d:df:3b:4c:b3:26:
                    84:bf:5e:8e:25:26:b3:9d:3c:b3:b8:dd:b0:c0:bb:
                    31:97:28:dd:f3:d6:e7:af:24:ba:8f:80:55:4f:5c:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:20:5C:D8:E7:BC:01:90:C9:5E:74:C9:21:8A:48:9A:AD:1C:CE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8285ef3e-2f43-3b23-ae4d-719be65105e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:0f:5f:6c:3b:c4:b0:25:c6:aa:09:4d:8e:9e:0f:49:86:
         c2:3e:7e:38:23:46:01:90:88:02:ff:9f:4a:9e:78:8d:ce:01:
         b1:f9:e0:e7:3e:c9:51:b7:c4:fc:66:1a:e9:a8:09:a9:b9:fe:
         0f:45:c3:23:d6:fb:24:5e:9f:c4:1b:7d:d8:98:02:d8:72:be:
         70:8e:fc:04:c0:cf:d1:16:be:5d:d7:46:d0:de:70:53:24:a2:
         f5:1d:83:b6:a9:a1:bc:d9:30:f3:aa:0b:da:a6:7e:72:8a:97:
         4a:f9:14:66:47:e4:1e:55:9c:87:3c:03:cb:af:11:0f:cc:17:
         5e:f5:9c:8a:65:cd:04:26:8f:af:b1:97:48:43:eb:7e:6c:db:
         d0:5b:a1:3c:38:24:16:f3:db:c4:63:fa:c0:7d:27:5c:6b:a2:
         11:54:31:ea:58:40:d6:9c:a2:f5:1a:2e:8c:57:60:2d:39:56:
         82:f4:46:50:13:32:45:e5:f2:24:70:e8:86:7a:b7:ec:9f:8a:
         13:79:4c:15:9b:31:40:ff:11:21:6b:63:83:4f:b7:e5:a1:60:
         b4:d4:67:b3:3e:fe:2f:f3:31:8f:39:3b:2e:6a:9f:fc:42:4c:
         48:c0:14:ce:1a:9a:9f:09:00:13:d8:87:fd:72:07:ee:af:55:
         23:7e:a5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:39 2025 by rpki-client