Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fbe35b0-26dc-377f-a986-4c46e649a53d.roa
File:                     9fbe35b0-26dc-377f-a986-4c46e649a53d.roa (raw, json)
Hash identifier:          eMkZbJGa+piX9rvpEq7f/BeSS2Wv/e4t/3T2E7NZ36E=
Subject key identifier:   2B:2E:DD:14:D6:A0:58:26:96:44:96:D5:A9:87:96:5D:DB:E8:CA:B2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CDBF0E09046ED2A7077F0F340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fbe35b0-26dc-377f-a986-4c46e649a53d.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:f0:e0:90:46:ed:2a:70:77:f0:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=4a57d09d-cad8-4bd4-8dc1-ad57d643cd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:be:37:2d:96:49:71:a9:0a:fb:6f:8e:49:
                    dd:ed:d6:88:10:0b:b9:e2:0e:68:25:98:13:1e:b1:
                    2e:b0:66:a0:a0:8b:5c:fd:0d:b7:de:e2:11:cf:11:
                    0e:84:e2:11:83:56:84:9c:01:20:5c:7e:cb:5e:2f:
                    d9:c2:c7:fd:13:69:a7:f8:58:36:84:df:d8:57:59:
                    79:c9:8e:95:49:78:0b:ec:74:6a:4a:93:43:da:3e:
                    14:2d:29:e4:48:8d:8f:8b:1b:46:fb:54:ea:ba:12:
                    f6:9a:70:7f:d6:75:ef:fe:4a:a7:7c:8b:3c:0e:1e:
                    3e:c7:9b:69:5f:67:1c:58:b1:72:4a:66:75:4a:93:
                    ce:40:d6:3d:ba:34:21:f0:d6:ff:06:8f:be:df:d3:
                    9c:3d:67:38:d1:30:e8:df:9f:af:9b:85:84:c7:76:
                    1a:12:04:41:03:10:14:c9:20:2e:cf:9a:c7:81:e5:
                    68:06:0f:83:df:d5:73:cf:c8:25:cd:47:a0:80:68:
                    13:bd:a6:f4:4f:10:7c:c4:55:cd:c1:ac:14:b0:4a:
                    e6:90:7f:73:dc:1e:6f:48:63:65:65:8e:40:e4:d7:
                    eb:56:4c:ef:66:79:4b:1c:28:ae:02:f5:03:56:27:
                    a6:7e:51:d5:fc:59:d7:58:10:1f:89:a9:ce:9e:2f:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:DD:14:D6:A0:58:26:96:44:96:D5:A9:87:96:5D:DB:E8:CA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fbe35b0-26dc-377f-a986-4c46e649a53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:12:c4:97:df:0e:de:ff:b5:38:6f:9d:91:ea:40:c9:33:
         3d:b6:2b:e5:60:e0:7a:45:a9:ad:a8:50:b3:6b:5e:5d:ea:9f:
         36:ab:37:dd:e1:1f:36:27:0d:3a:7c:83:5c:99:84:24:de:c1:
         4b:8f:0b:fc:4a:87:20:38:fc:25:12:27:90:53:f4:f1:fc:30:
         5e:bb:8a:2b:2c:be:ad:7f:0a:16:c5:56:c2:ba:aa:1f:a2:68:
         30:71:1b:b7:61:a6:2c:da:c0:23:91:a8:74:ac:b0:f9:ca:60:
         f4:87:6a:77:97:9e:b1:a2:1e:19:87:c1:66:14:d8:1c:fc:9f:
         68:62:98:fd:9b:6f:6b:f4:55:b2:7a:9d:df:6d:c9:5d:84:cb:
         16:84:05:7c:4f:5f:35:aa:5b:85:b5:58:22:99:46:cd:48:51:
         8e:86:7b:e4:d5:1e:30:11:c3:31:bb:80:1e:95:c6:29:e8:0e:
         90:da:3b:dc:f0:cd:23:12:22:d3:af:c9:9d:2f:85:b0:e0:93:
         6c:c4:30:c7:3c:2f:f9:60:9e:ee:dc:7a:d7:5e:b7:71:1d:1c:
         3e:f6:c1:28:6e:8b:52:fb:b8:97:ea:49:07:e3:b3:47:28:e2:
         aa:46:71:37:58:c1:e2:da:5a:de:f9:21:d2:e0:54:21:a0:4a:
         42:dd:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:41:06 2025 by rpki-client