Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9482ef5f-f513-3178-b26b-953244925d88.roa
File:                     9482ef5f-f513-3178-b26b-953244925d88.roa (raw, json)
Hash identifier:          i20Gh82GPe1tOBNptrD07jP7lnMgKpSq2uT4T9cRN7k=
Subject key identifier:   DA:45:27:93:E3:AB:08:0E:55:7F:2D:A0:C3:39:F6:A4:5B:AA:5F:9F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D192763E0E431593618690000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9482ef5f-f513-3178-b26b-953244925d88.roa
Signing time:             Wed 02 Mar 2022 05:00:00 +0000
ROA not before:           Wed 02 Mar 2022 05:00:00 +0000
ROA not after:            Wed 06 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:19:27:63:e0:e4:31:59:36:18:69:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar  2 05:00:00 2022 GMT
            Not After : Apr  6 04:00:00 2022 GMT
        Subject: CN=15b3c2c8-4743-4e2a-938d-293cded52b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:eb:77:4b:70:9e:cb:c9:e6:41:a4:ed:1f:
                    ce:3b:87:53:c7:ba:e0:82:aa:e8:d0:a4:60:86:4e:
                    7e:6c:6d:7c:9d:92:e8:7b:17:c1:92:aa:14:a0:47:
                    63:60:2b:21:47:51:a8:b1:02:7d:7d:4b:b5:2c:c1:
                    fd:2f:e7:e7:4c:10:8f:4d:40:07:f5:b4:db:f7:8e:
                    1c:d4:27:ad:f8:8c:56:43:03:8e:92:07:6d:d7:0c:
                    34:9d:e5:1e:a5:31:27:b9:95:a0:6e:0f:08:f3:28:
                    90:ba:25:4f:46:d3:50:e6:99:c7:3e:fe:f5:69:dd:
                    6a:a6:af:45:6b:fa:11:22:42:48:44:86:ca:b0:df:
                    54:7f:b1:c3:b1:58:2d:07:54:d4:02:f1:e6:68:1d:
                    23:3e:54:24:c1:dd:87:44:bf:88:4b:c1:ff:1a:a8:
                    e0:8e:6c:07:f0:a3:ff:3e:36:92:65:89:e0:4e:89:
                    e6:d2:7b:a2:ac:e0:b4:ea:48:a2:d2:e9:fb:17:b1:
                    ea:b8:27:2b:cf:a4:84:49:ef:5c:1f:75:5c:a1:6b:
                    a6:01:54:47:b8:70:fb:9b:38:3c:8e:03:92:b8:45:
                    9c:f0:cd:1d:c2:48:32:39:f6:ae:b8:fa:65:53:ef:
                    7b:fd:3b:7d:f9:5f:e5:cc:1b:16:09:95:f1:f6:28:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:27:93:E3:AB:08:0E:55:7F:2D:A0:C3:39:F6:A4:5B:AA:5F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9482ef5f-f513-3178-b26b-953244925d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:90:9a:e9:84:cc:27:45:9d:45:7e:3a:81:48:b8:4c:bd:69:
         7e:58:dd:22:a4:ba:d0:af:df:52:ac:9a:d0:c1:db:ea:d5:2e:
         4a:19:8b:0b:55:8e:fc:4e:6f:70:18:51:79:a6:c4:31:d1:bd:
         2f:a7:f3:18:97:1c:3e:f6:58:4c:0c:e9:52:48:cd:5a:bf:27:
         5f:cc:a8:9e:3c:92:94:e6:1d:9b:78:8b:9b:cf:8b:77:69:37:
         2c:a2:e8:00:d5:f3:66:5a:66:05:ee:16:49:ca:38:39:c7:1e:
         16:c9:dd:e5:29:2b:e2:be:4b:61:ec:7b:af:5d:1a:32:f5:a4:
         45:9f:17:84:c7:0a:dc:44:85:b6:53:e5:24:59:b1:0f:0f:c1:
         9d:ed:6e:8c:37:f6:3d:cd:0a:04:c5:fb:fb:a3:84:7d:fe:1f:
         a6:d4:62:a2:5b:50:36:34:26:58:4a:e4:e2:04:0d:2f:7c:24:
         86:8c:2f:b6:c9:72:d2:15:2c:67:de:3a:3a:66:2f:ea:bd:22:
         d6:3d:de:1b:36:b1:1a:4e:47:ec:81:1f:01:76:c9:84:96:f5:
         b6:9d:50:5b:ee:e6:b9:f9:1c:4c:7d:96:e3:e9:97:36:7c:ae:
         ba:fc:4a:df:ce:f1:f3:e6:35:4e:22:64:ec:2c:90:c1:e4:11:
         f8:9e:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:29:13 2025 by rpki-client