Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95b2eccb-7b3a-31f9-9010-5cb3bef067a0.roa
File:                     95b2eccb-7b3a-31f9-9010-5cb3bef067a0.roa (raw, json)
Hash identifier:          VIO6AcbX0IJtI9JY65kkbD3A+OAh2B/X+5l5EeXvir0=
Subject key identifier:   5E:59:85:89:1C:DE:F2:F9:DD:88:8A:0C:1A:2B:8A:F5:61:86:3C:91
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E16E17D73F7E0439035600A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95b2eccb-7b3a-31f9-9010-5cb3bef067a0.roa
Signing time:             Tue 31 May 2022 12:00:00 +0000
ROA not before:           Tue 31 May 2022 12:00:00 +0000
ROA not after:            Wed 06 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        155.38.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:16:e1:7d:73:f7:e0:43:90:35:60:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 31 12:00:00 2022 GMT
            Not After : Jul  6 04:00:00 2022 GMT
        Subject: CN=ea5895c3-aca3-4040-846c-ef3af57a34ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:2e:38:44:c5:1b:5d:eb:5b:e9:03:c9:b4:
                    d8:8d:fa:d6:71:4d:a3:3f:02:f3:bd:e1:5c:90:ae:
                    b2:65:a1:50:f2:bc:b0:b7:f1:cb:33:2e:6f:9d:6e:
                    d4:a2:a5:ac:4d:38:25:13:19:13:bf:8a:01:ad:63:
                    1a:dc:dd:c6:ce:0e:d3:7d:93:eb:fc:f8:d1:0a:a6:
                    d4:73:12:60:7b:86:34:df:0f:b0:97:0a:5b:d1:a8:
                    79:48:89:c0:dc:4c:45:e2:19:96:06:bb:d6:56:d2:
                    ca:9b:c9:91:87:ef:c5:92:36:a9:fe:3b:dc:f6:11:
                    db:70:f3:3b:a6:43:b4:fa:11:61:e8:2c:b6:a1:82:
                    62:82:06:50:2e:85:e2:72:26:35:2b:80:af:1f:3c:
                    2b:5b:1c:a2:51:ac:8d:79:35:e1:13:c5:1f:d1:0b:
                    c0:ba:80:3f:d2:07:fd:cc:ac:3d:22:98:fa:39:5b:
                    82:7a:65:53:d1:77:8d:16:89:8b:a7:0e:31:8d:65:
                    df:2b:1f:b6:6c:07:89:b8:e4:7f:00:2e:da:83:f6:
                    d6:7f:5c:70:67:4a:00:f1:ff:68:e9:de:eb:cd:a2:
                    20:00:f8:f5:9f:ef:6e:6d:16:bf:07:bf:4f:89:4d:
                    ab:38:5a:26:39:52:2a:07:16:94:e4:d3:83:2d:42:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:59:85:89:1C:DE:F2:F9:DD:88:8A:0C:1A:2B:8A:F5:61:86:3C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95b2eccb-7b3a-31f9-9010-5cb3bef067a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:c2:fc:53:96:3c:77:c2:08:b7:e9:61:c6:45:26:88:ed:
         e1:2f:32:c7:b9:be:be:76:ec:0e:2b:14:65:f2:f1:06:ab:c6:
         4f:92:bb:d4:28:af:49:cc:53:b2:b6:26:63:a0:dc:ef:de:f6:
         e0:8b:2f:6e:9c:a5:69:02:5b:18:0e:dc:da:f7:b4:90:9a:19:
         2b:21:31:7f:5b:b7:43:db:24:cf:25:89:b8:14:7c:cc:42:d7:
         0d:3e:ae:90:1e:a3:ea:41:ba:a1:e9:5a:e1:00:8c:65:b7:ac:
         4b:e2:4c:8b:35:2e:fb:a5:4b:15:aa:24:6a:fa:28:f3:03:df:
         66:e4:f9:13:0c:bf:ee:74:06:f1:44:83:42:26:95:73:ef:a8:
         1f:3c:05:a8:ee:1c:4a:5f:cc:2d:62:ab:46:e5:d5:dd:8f:fe:
         09:53:bf:bb:73:8b:f3:41:43:4e:b5:1c:0e:c3:f2:84:92:92:
         fe:bc:46:60:c4:b9:06:e2:d2:c6:fe:11:d1:82:a6:a7:c9:6f:
         00:8a:b4:70:f8:f7:d3:59:74:f2:5c:2a:97:83:9a:3e:76:ce:
         01:0f:9d:12:01:0a:97:fb:36:63:68:bd:b5:7f:90:f2:95:4b:
         f1:8a:e1:4c:82:43:d5:0b:59:9f:02:47:a8:db:75:92:f0:81:
         24:02:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:39 2025 by rpki-client