Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bb416ab-c8ac-3865-8ef7-e16e8a1da313.roa
File:                     8bb416ab-c8ac-3865-8ef7-e16e8a1da313.roa (raw, json)
Hash identifier:          NjDe6dlr3R8kbYbV9crUfPKW+wQn/u2/8HK5LSGQ+Ek=
Subject key identifier:   A3:2A:9A:9C:3D:C7:06:E8:3D:C6:19:23:56:0A:4F:D2:28:6C:DC:C4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DDCB0D67663EC84F07BBD7680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bb416ab-c8ac-3865-8ef7-e16e8a1da313.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Wed 15 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:dc:b0:d6:76:63:ec:84:f0:7b:bd:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : Jun 15 04:00:00 2022 GMT
        Subject: CN=8b0dac6c-90f3-430b-b606-a729c1c26c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:98:6a:b4:41:9e:c6:cf:89:39:b9:e9:09:
                    05:14:f7:93:06:bd:ae:e0:56:4d:89:05:83:f3:1c:
                    c0:c5:f7:eb:21:54:0b:63:f6:2e:ac:7b:97:6f:92:
                    aa:6f:e9:8e:15:56:80:06:bd:48:0a:72:ee:b4:72:
                    a0:3c:09:ae:f3:7d:6b:2c:d2:3e:df:74:d7:72:4e:
                    a5:0c:88:b8:66:1c:a9:74:87:38:d1:88:1f:5b:ee:
                    93:e8:fb:74:6e:32:5d:d0:31:33:9f:aa:fe:bd:f4:
                    a4:59:bd:e6:04:d2:cb:cb:4e:70:19:e4:6e:de:72:
                    a7:6a:56:57:c9:14:00:41:d6:4d:7c:3d:d8:f2:1a:
                    e2:91:7f:3b:3a:62:c0:26:26:80:9b:99:35:18:01:
                    be:5c:1c:73:4e:df:4d:a6:f6:cd:7a:2d:93:18:56:
                    d2:e0:e4:c4:62:1e:b6:d4:8b:8b:b0:76:28:76:b5:
                    bc:6e:3f:43:45:e4:d2:6b:c8:a3:ea:2f:c4:c8:13:
                    37:5e:db:e4:64:29:b6:9f:46:fd:1e:3b:58:9b:2c:
                    22:86:b5:c0:9a:ed:b7:5e:f2:e4:6b:71:6f:a4:30:
                    35:bf:dc:a2:4f:72:fb:28:20:ad:1e:c4:b4:23:b7:
                    8e:7e:33:a3:57:7e:2e:91:77:91:00:64:dc:91:84:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2A:9A:9C:3D:C7:06:E8:3D:C6:19:23:56:0A:4F:D2:28:6C:DC:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8bb416ab-c8ac-3865-8ef7-e16e8a1da313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:99:3d:bd:ea:a1:4e:12:59:14:2a:28:d6:e9:d8:d3:84:22:
         d2:b6:c3:3d:df:43:2f:89:e6:66:ba:c1:46:47:9b:ac:37:5c:
         03:b1:f0:70:c3:36:d8:60:49:fe:0a:58:c7:86:04:d4:f4:05:
         bb:6a:03:ba:95:c2:89:6d:20:68:63:2b:92:9a:16:84:76:f1:
         9a:29:50:de:a6:24:fe:58:2f:4d:ef:18:d1:1c:07:a2:7c:71:
         f9:fc:8b:7f:44:cf:f7:67:59:8c:2b:2a:e5:b8:91:7a:0d:12:
         25:70:ad:22:66:cb:b2:0a:3c:76:27:e1:58:f0:d3:a0:4a:da:
         5c:88:24:b2:8d:5b:7d:d7:00:82:ed:a4:6b:70:ff:a3:db:4c:
         17:11:56:00:71:90:b8:31:86:fb:4b:65:5b:58:a4:e3:6b:d5:
         95:29:e1:22:86:1d:75:f6:e2:8a:b8:c2:df:b7:ae:44:ab:b9:
         f1:38:55:b4:53:22:88:20:72:53:ff:d3:81:cf:70:12:8e:c1:
         f0:a9:00:3d:f5:39:d0:1e:9a:a8:38:be:00:f0:1a:c2:98:9d:
         88:10:2e:cd:7a:ef:dc:ab:03:97:52:32:85:a9:af:79:1d:53:
         30:fb:9f:0e:36:09:26:56:c0:0f:23:29:35:79:60:34:7d:e8:
         24:7d:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:02 2025 by rpki-client