Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/910e8841-9cc9-3225-92c6-1c8c49acb65f.roa
File:                     910e8841-9cc9-3225-92c6-1c8c49acb65f.roa (raw, json)
Hash identifier:          U9vY+ll8JuJmvtDjJ1brptAsS8M0rsCJPeIZgyFXk1E=
Subject key identifier:   ED:C3:68:03:4F:56:D2:DB:5A:1F:36:FB:3F:C0:C7:07:6D:8C:30:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F4DB9515E69C7E0607906E9E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/910e8841-9cc9-3225-92c6-1c8c49acb65f.roa
Signing time:             Mon 19 Sep 2022 12:00:00 +0000
ROA not before:           Mon 19 Sep 2022 12:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     701
IP address blocks:        155.146.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4d:b9:51:5e:69:c7:e0:60:79:06:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 19 12:00:00 2022 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=6cf4576e-d22b-48bb-ba95-19b365871851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:5f:49:27:58:a9:4d:b0:95:3d:6e:ce:81:
                    11:47:3f:df:23:13:83:49:1a:06:21:8b:86:92:83:
                    a1:37:26:17:4d:77:da:73:43:f2:58:7c:0a:f7:7d:
                    31:ff:3d:9e:71:1f:2e:cf:a7:b8:ca:ec:3f:89:9d:
                    ef:db:1c:68:75:95:bf:3a:af:de:66:b1:6f:64:a7:
                    c6:fc:86:18:f4:ae:04:93:65:78:b7:a4:b9:ee:ae:
                    a1:8a:4b:27:60:64:0f:5e:0f:07:60:b7:aa:89:35:
                    32:0d:aa:48:0c:dc:4a:cf:63:32:1c:e3:89:2b:59:
                    dc:b3:2a:51:54:01:c1:c9:df:63:94:e1:56:78:13:
                    60:b0:54:83:08:13:0a:1b:d2:06:f9:f2:e6:f4:f6:
                    5c:dd:e3:2c:d0:ec:d4:2d:7d:4f:bd:99:07:38:27:
                    58:a8:c2:55:95:a9:bd:69:7b:16:8e:fc:19:ae:f9:
                    02:c5:fd:32:3b:9c:6c:59:1d:55:c0:83:86:a3:86:
                    97:2a:e7:41:69:ba:ba:ad:24:99:74:0f:31:cf:73:
                    2b:85:62:ef:7a:87:95:a7:88:f7:80:da:67:20:78:
                    02:e5:8c:a3:f0:51:eb:16:ed:c9:08:20:d3:a6:cf:
                    9d:5a:bc:9d:fc:36:5f:a0:3d:df:59:a8:19:51:f2:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C3:68:03:4F:56:D2:DB:5A:1F:36:FB:3F:C0:C7:07:6D:8C:30:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/910e8841-9cc9-3225-92c6-1c8c49acb65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b1:d3:11:3e:dd:eb:c1:51:b6:57:fa:d6:c0:af:ef:f5:ff:
         a1:50:6a:dd:4c:d5:91:c6:68:60:d4:43:c7:74:a3:37:b5:87:
         c9:49:4d:8f:53:23:a2:39:f6:31:00:23:91:d9:60:f3:5f:34:
         13:bc:bc:9c:97:96:be:21:00:2d:d6:2b:74:df:ce:50:5d:6a:
         47:fb:19:85:d0:cd:e2:00:8e:45:f0:32:05:85:45:a3:37:5f:
         2f:c1:17:83:2c:6b:76:0f:ef:f9:e4:99:32:18:8b:a1:5f:9b:
         7f:2b:1f:81:17:35:bc:4f:42:23:d7:71:b3:60:d2:b8:38:3b:
         f1:9a:1c:e9:39:81:ca:d2:16:81:1f:34:de:17:26:27:ab:15:
         62:3f:56:1f:a5:d6:32:61:4e:b6:97:28:f8:45:f4:82:fe:7e:
         4e:3c:c8:a0:e9:8f:5a:d8:ba:77:31:9e:54:f0:f3:0c:82:62:
         65:da:21:db:20:cf:ba:a3:40:da:fb:a7:a7:6b:08:09:df:0c:
         6d:f9:86:42:a1:9e:9e:a3:a7:a1:3b:ae:c2:dc:c7:01:f9:84:
         4f:ca:50:70:56:93:8f:e8:da:58:5d:4c:e4:5d:dd:71:80:99:
         c3:7a:7d:2d:b1:2d:f5:4e:84:5a:0b:ff:97:15:10:ba:28:7a:
         5c:62:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:53 2025 by rpki-client