Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5650a12-d28a-3bcb-81b7-188be9e60126.roa
File:                     c5650a12-d28a-3bcb-81b7-188be9e60126.roa (raw, json)
Hash identifier:          AeDSXOX6A+OVjSlPV5Bp8COwVqunFJPb2KH3iTGf2yw=
Subject key identifier:   8E:14:86:C9:77:45:DD:05:FB:2F:A8:70:0D:71:7B:96:05:4E:18:6C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E7B5336F8679F2C4146F9F800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5650a12-d28a-3bcb-81b7-188be9e60126.roa
Signing time:             Wed 06 Jul 2022 12:00:00 +0000
ROA not before:           Wed 06 Jul 2022 12:00:00 +0000
ROA not after:            Thu 11 Aug 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        155.146.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7b:53:36:f8:67:9f:2c:41:46:f9:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  6 12:00:00 2022 GMT
            Not After : Aug 11 04:00:00 2022 GMT
        Subject: CN=c4ffe9e8-ff4d-4184-8d8f-9694e8fad45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:6d:80:c7:04:24:74:90:43:73:ea:78:ee:
                    b9:65:2e:fd:d5:f6:f4:6b:63:c9:fc:e7:b5:f5:0f:
                    38:29:2f:93:62:0d:ec:de:c5:67:2d:ed:2f:a9:e4:
                    7d:8f:a7:d5:93:e6:e9:8e:58:e9:d2:c2:25:b3:4a:
                    c6:7f:d4:af:63:5a:35:a7:5e:64:e9:4a:4e:f4:ab:
                    03:41:5f:41:2b:cc:3b:3b:af:b7:e4:2b:b9:df:e6:
                    25:c5:38:d3:f4:2d:65:b4:42:fd:c2:71:0e:07:6e:
                    20:6e:96:93:f0:fd:ec:bc:83:f3:f1:c7:6d:0c:9c:
                    0b:0f:11:c0:40:50:27:55:ad:10:9b:23:c2:0c:50:
                    5d:27:6c:39:f0:d1:a5:d9:d9:2c:83:81:ad:54:e7:
                    62:10:c9:2f:0d:c2:47:54:de:b7:6b:9c:c9:4d:20:
                    a0:36:55:ab:6d:7f:b6:27:01:8e:9f:4f:ce:3c:37:
                    09:46:c2:84:43:06:a6:29:b5:f6:fe:49:a6:93:32:
                    35:89:8b:18:ae:6d:c2:2a:7a:09:7d:20:d9:f7:d5:
                    db:c8:6b:fe:f7:47:b4:00:b3:8c:f2:3d:36:ee:25:
                    69:b9:cd:33:51:1d:52:42:63:f6:33:8d:19:5f:7f:
                    ec:dd:d9:5d:e8:47:7c:04:9f:4c:61:49:28:81:52:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:86:C9:77:45:DD:05:FB:2F:A8:70:0D:71:7B:96:05:4E:18:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c5650a12-d28a-3bcb-81b7-188be9e60126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:e1:c1:87:af:9a:1b:53:c5:f6:21:b7:10:2f:c1:69:ed:
         ed:ad:c4:26:d3:a2:43:0f:57:8a:ab:88:93:01:12:86:79:af:
         40:64:91:b4:13:88:77:e9:ae:10:25:cf:9c:05:0b:84:3a:05:
         ff:9d:4e:25:16:0e:1e:02:7a:cd:a8:f7:1c:c3:5d:b5:27:23:
         ef:dc:2f:8a:fb:1f:7c:30:2e:a8:ba:99:54:b7:d5:62:7b:3a:
         5b:e7:ea:81:32:bc:5e:d1:ac:ec:79:00:a9:6e:54:f8:a6:52:
         ec:f6:c7:9c:3f:e6:2e:9f:a2:6e:fd:79:2a:90:59:09:26:25:
         75:0e:70:e5:49:93:ad:be:ac:0a:ad:81:1d:2f:c0:d0:64:e9:
         3d:2d:12:d9:d1:8f:39:b3:62:96:29:0c:27:da:87:4a:3f:91:
         86:60:91:66:c0:d4:c5:d7:46:6b:1b:c6:e9:93:cf:50:78:33:
         c7:10:2d:86:7e:39:56:84:b1:11:35:b7:80:45:97:12:cf:cf:
         60:f9:d5:7a:d7:35:bb:fb:9e:82:7c:ef:7b:c2:e1:64:59:71:
         69:40:eb:77:9d:88:6d:1a:61:53:d2:29:3f:a1:fd:0a:45:54:
         10:44:26:16:24:f3:ae:33:0e:9f:ae:33:da:42:d3:ed:aa:15:
         a3:a7:61:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD57Uzb4Z58sQUb5+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwNjEyMDAwMFoXDTIyMDgxMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzRmZmU5ZTgtZmY0ZC00MTg0LThkOGYtOTY5NGU4ZmFkNDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01ttgMcEJHSQQ3PqeO65ZS791fb0a2PJ/Oe1
9Q84KS+TYg3s3sVnLe0vqeR9j6fVk+bpjljp0sIls0rGf9SvY1o1p15k6UpO9KsD
QV9BK8w7O6+35Cu53+YlxTjT9C1ltEL9wnEOB24gbpaT8P3svIPz8cdtDJwLDxHA
QFAnVa0QmyPCDFBdJ2w58NGl2dksg4GtVOdiEMkvDcJHVN63a5zJTSCgNlWrbX+2
JwGOn0/OPDcJRsKEQwamKbX2/kmmkzI1iYsYrm3CKnoJfSDZ99XbyGv+90e0ALOM
8j027iVpuc0zUR1SQmP2M40ZX3/s3dld6Ed8BJ9MYUkogVJUnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4Uhsl3Rd0F+y+ocA1xe5YFThhsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzU2NTBhMTItZDI4YS0z
YmNiLTgxYjctMTg4YmU5ZTYwMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5KgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZO4cGHr5obU8X2IbcQL8Fp7e2txCbTokMPV4qriJMBEoZ5r0BkkbQT
iHfprhAlz5wFC4Q6Bf+dTiUWDh4Ces2o9xzDXbUnI+/cL4r7H3wwLqi6mVS31WJ7
Olvn6oEyvF7RrOx5AKluVPimUuz2x5w/5i6fom79eSqQWQkmJXUOcOVJk62+rAqt
gR0vwNBk6T0tEtnRjzmzYpYpDCfah0o/kYZgkWbA1MXXRmsbxumTz1B4M8cQLYZ+
OVaEsRE1t4BFlxLPz2D51XrXNbv7noJ873vC4WRZcWlA63ediG0aYVPSKT+h/QpF
VBBEJhYk864zDp+uM9pC0+2qFaOnYaw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:05 2025 by rpki-client