Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6bd932-c580-3743-add7-38da5b782f67.roa
File:                     9e6bd932-c580-3743-add7-38da5b782f67.roa (raw, json)
Hash identifier:          CoQq0thRwDfdc49FWva2TN94pIMYvz6vmjeANS1vb0o=
Subject key identifier:   10:EB:3C:BC:9E:BC:06:73:B1:DC:B6:4D:DD:D1:D1:77:15:53:0B:94
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D29E78C25C07AB6DCCF388660
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6bd932-c580-3743-add7-38da5b782f67.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:29:e7:8c:25:c0:7a:b6:dc:cf:38:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=736b6ca6-61a0-454f-b1c2-ad7396178e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:37:6d:b5:ec:4c:5c:b1:71:2f:66:8a:b0:
                    c6:c6:77:14:e8:0a:41:e3:9f:3b:b6:a8:b5:c1:d5:
                    59:e0:10:29:8d:32:79:53:58:7c:bb:e3:ea:90:a3:
                    3c:a4:54:70:9e:fd:30:e6:1e:f2:8a:b5:f4:b5:21:
                    21:d7:9e:8e:25:bd:03:ff:f3:d8:6b:39:6c:34:8f:
                    dd:1f:dd:cc:d3:b5:73:fd:31:e5:e8:68:aa:fb:79:
                    db:0e:11:56:3a:87:e2:9f:b5:10:28:b1:de:32:7d:
                    e1:59:a5:8d:68:bf:85:4a:e9:2f:e3:64:1a:ab:fe:
                    f1:66:b3:e6:6b:8c:ff:60:8e:cd:c2:f3:90:96:53:
                    a8:db:ae:13:a5:26:6b:dc:d7:e7:9b:a6:d1:9c:c3:
                    40:ac:f3:10:76:16:f3:81:7a:76:a2:52:56:e8:9d:
                    5f:e7:fe:df:19:95:47:99:4a:b4:ca:e5:c7:ac:5a:
                    dc:2c:31:02:21:6a:3f:da:c7:3a:7a:d1:e2:ea:ad:
                    18:aa:3b:ba:b8:b3:a1:cc:05:bf:e6:ac:ec:eb:f7:
                    53:60:cc:f8:d6:7b:c2:58:2e:19:73:68:7e:57:61:
                    53:4e:84:2f:19:1c:31:9d:24:dc:21:6d:8e:36:1b:
                    d2:25:93:99:bf:26:1f:b8:8a:65:ec:03:36:bb:b8:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:3C:BC:9E:BC:06:73:B1:DC:B6:4D:DD:D1:D1:77:15:53:0B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6bd932-c580-3743-add7-38da5b782f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:93:7c:fb:43:82:db:f0:25:f7:45:bd:16:fa:ed:c1:e9:
         54:44:50:76:90:a1:41:38:fe:61:c6:7b:99:bb:49:70:22:f0:
         c9:0a:6b:38:04:1b:5b:04:94:6b:d7:d0:16:d6:bc:7b:d3:f1:
         77:25:56:26:79:bd:51:38:5a:06:5d:6e:b5:db:99:12:a9:29:
         fc:c2:dd:3c:76:02:c1:e7:f2:bc:93:f2:40:95:7f:90:3e:84:
         16:f7:18:9b:d7:a0:54:1f:d1:9a:25:c1:20:46:91:35:17:92:
         8b:56:21:a2:43:9f:11:f6:2f:df:47:ce:8a:74:34:b9:1e:5c:
         fb:1f:af:1d:18:c6:c0:c0:79:01:3d:fa:ff:3b:48:de:7e:21:
         a1:9d:7e:4f:83:7b:e0:bf:08:a4:e0:f3:7b:5c:ec:6e:3e:dc:
         da:b0:d0:e6:31:95:9d:a7:e5:01:99:14:15:5e:94:2d:b5:6d:
         49:85:85:4d:d0:cd:54:c5:8c:8e:73:aa:9f:69:bc:d6:2a:5c:
         58:89:77:ae:c2:eb:b6:f5:a4:b1:86:96:d7:26:3e:e4:59:d4:
         62:ee:77:9a:22:ad:30:e2:e8:69:44:ff:38:8e:2f:16:95:61:
         6f:bc:f2:4f:24:ff:6f:38:44:50:34:10:99:a1:9c:ba:0b:0e:
         54:08:fe:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0p54wlwHq23M84hmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMwODA1MDAwMFoXDTIyMDQxMjA0MDAwMFowLzEtMCsGA1UEAxMk
NzM2YjZjYTYtNjFhMC00NTRmLWIxYzItYWQ3Mzk2MTc4ZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9w3bbXsTFyxcS9mirDGxncU6ApB4587tqi1
wdVZ4BApjTJ5U1h8u+PqkKM8pFRwnv0w5h7yirX0tSEh156OJb0D//PYazlsNI/d
H93M07Vz/THl6Giq+3nbDhFWOofin7UQKLHeMn3hWaWNaL+FSukv42Qaq/7xZrPm
a4z/YI7NwvOQllOo264TpSZr3Nfnm6bRnMNArPMQdhbzgXp2olJW6J1f5/7fGZVH
mUq0yuXHrFrcLDECIWo/2sc6etHi6q0Yqju6uLOhzAW/5qzs6/dTYMz41nvCWC4Z
c2h+V2FTToQvGRwxnSTcIW2ONhvSJZOZvyYfuIpl7AM2u7ipLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDrPLyevAZzsdy2Td3R0XcVUwuUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWU2YmQ5MzItYzU4MC0z
NzQzLWFkZDctMzhkYTViNzgyZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWdk3z7Q4Lb8CX3Rb0W+u3B6VREUHaQoUE4/mHGe5m7SXAi8MkKazgE
G1sElGvX0BbWvHvT8XclViZ5vVE4WgZdbrXbmRKpKfzC3Tx2AsHn8ryT8kCVf5A+
hBb3GJvXoFQf0ZolwSBGkTUXkotWIaJDnxH2L99Hzop0NLkeXPsfrx0YxsDAeQE9
+v87SN5+IaGdfk+De+C/CKTg83tc7G4+3Nqw0OYxlZ2n5QGZFBVelC21bUmFhU3Q
zVTFjI5zqp9pvNYqXFiJd67C67b1pLGGltcmPuRZ1GLud5oirTDi6GlE/ziOLxaV
YW+88k8k/284RFA0EJmhnLoLDlQI/rY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:13 2025 by rpki-client