Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6cbc176-2c42-37a7-8333-1cdaea3fc4ce.roa
File:                     c6cbc176-2c42-37a7-8333-1cdaea3fc4ce.roa (raw, json)
Hash identifier:          2JYM2F8TbGZNITYe0+qfi6GSkKsCDYri09QFNKAZCHc=
Subject key identifier:   67:83:E6:AB:A0:0D:4D:24:20:5A:D8:F2:E8:5F:87:3C:32:69:1B:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E149CD0DBC4BAAD5761531E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6cbc176-2c42-37a7-8333-1cdaea3fc4ce.roa
Signing time:             Mon 30 May 2022 12:00:00 +0000
ROA not before:           Mon 30 May 2022 12:00:00 +0000
ROA not after:            Tue 05 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:14:9c:d0:db:c4:ba:ad:57:61:53:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 30 12:00:00 2022 GMT
            Not After : Jul  5 04:00:00 2022 GMT
        Subject: CN=c756f1fb-7a51-43c0-91e0-80340707a128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:c6:d3:25:09:11:ef:e0:26:04:90:e5:b0:
                    72:b9:bb:f1:51:da:80:10:42:8f:4a:91:50:5c:bd:
                    e9:24:6a:80:d5:f3:e4:83:75:44:5c:df:7b:93:9a:
                    23:0f:b5:7e:e0:06:73:47:bd:5d:69:55:bf:cf:6d:
                    27:02:83:ff:97:44:d4:c1:f0:33:0c:69:3d:72:73:
                    e4:52:9a:51:8a:fa:4e:30:16:cb:1c:48:87:8d:6d:
                    88:d2:5c:bc:ae:bb:b6:dd:38:ab:b3:dd:ef:88:3b:
                    73:b4:c7:c5:8b:9c:46:15:bb:b9:a3:c5:54:a8:f9:
                    de:63:02:26:fa:a2:a3:98:0e:3c:ac:3d:ce:23:5a:
                    dd:3a:0b:f2:78:41:c9:a9:1d:3a:b3:40:d0:32:87:
                    50:93:51:a0:ab:69:64:06:ec:12:3b:b3:25:4c:e9:
                    67:c0:50:3c:76:98:bf:49:2e:12:55:05:d5:76:5d:
                    64:54:01:7e:8e:01:70:c5:8a:f8:72:04:40:e8:61:
                    fc:3c:da:40:c1:1b:71:09:7d:bc:d4:ea:08:b1:09:
                    19:49:62:78:cd:1e:f7:84:9f:49:86:ae:cd:9c:cf:
                    c9:72:60:84:40:56:50:1c:37:d5:e7:70:ef:f8:01:
                    41:e4:d2:71:1c:e7:07:c7:e3:f6:8b:62:b5:94:b0:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:83:E6:AB:A0:0D:4D:24:20:5A:D8:F2:E8:5F:87:3C:32:69:1B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6cbc176-2c42-37a7-8333-1cdaea3fc4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:9d:7c:20:d0:7e:5c:f6:3b:ea:95:62:cd:6c:22:3e:b6:
         3d:97:df:03:b7:26:b7:73:40:24:20:5b:e8:d1:2b:5f:b8:ed:
         d3:32:eb:a9:69:1c:bf:4c:fe:02:1c:29:7d:8c:7c:09:be:cd:
         f7:57:18:0f:34:be:16:0d:b6:7a:d9:4c:a5:f6:28:ae:9c:47:
         b0:11:dc:75:a9:02:94:fd:4a:b6:65:cf:92:5d:23:a3:6e:02:
         25:20:c1:4b:b1:fe:39:34:82:73:c9:29:99:84:8c:3d:34:ba:
         fa:c9:13:13:5e:13:54:47:ea:52:84:60:ed:56:e2:34:e0:a8:
         fd:29:17:8c:50:08:97:4d:83:73:b5:74:63:89:44:f2:34:17:
         ca:67:07:64:9b:65:11:1e:76:28:ff:07:be:d4:26:c1:f9:fd:
         38:91:3b:47:4e:c6:32:a6:ee:bc:39:65:fd:6b:93:2d:ed:95:
         1e:eb:63:46:5d:ff:f2:44:79:f3:d0:03:6b:2d:ae:ca:53:84:
         66:cb:8f:94:eb:f1:76:40:45:74:fd:73:9f:d9:e8:3c:11:41:
         5b:4d:4c:67:cf:26:f2:84:aa:81:c6:21:dd:4d:7d:e1:28:53:
         be:e9:f6:fb:5b:72:a1:dc:db:8b:57:11:46:d5:e4:01:b9:a0:
         d2:4e:3e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4UnNDbxLqtV2FTHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUzMDEyMDAwMFoXDTIyMDcwNTA0MDAwMFowLzEtMCsGA1UEAxMk
Yzc1NmYxZmItN2E1MS00M2MwLTkxZTAtODAzNDA3MDdhMTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvDG0yUJEe/gJgSQ5bByubvxUdqAEEKPSpFQ
XL3pJGqA1fPkg3VEXN97k5ojD7V+4AZzR71daVW/z20nAoP/l0TUwfAzDGk9cnPk
UppRivpOMBbLHEiHjW2I0ly8rru23Tirs93viDtztMfFi5xGFbu5o8VUqPneYwIm
+qKjmA48rD3OI1rdOgvyeEHJqR06s0DQModQk1Ggq2lkBuwSO7MlTOlnwFA8dpi/
SS4SVQXVdl1kVAF+jgFwxYr4cgRA6GH8PNpAwRtxCX281OoIsQkZSWJ4zR73hJ9J
hq7NnM/JcmCEQFZQHDfV53Dv+AFB5NJxHOcHx+P2i2K1lLCNkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeD5qugDU0kIFrY8uhfhzwyaRuvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzZjYmMxNzYtMmM0Mi0z
N2E3LTgzMzMtMWNkYWVhM2ZjNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHunXwg0H5c9jvqlWLNbCI+tj2X3wO3JrdzQCQgW+jRK1+47dMy66lp
HL9M/gIcKX2MfAm+zfdXGA80vhYNtnrZTKX2KK6cR7AR3HWpApT9SrZlz5JdI6Nu
AiUgwUux/jk0gnPJKZmEjD00uvrJExNeE1RH6lKEYO1W4jTgqP0pF4xQCJdNg3O1
dGOJRPI0F8pnB2SbZREedij/B77UJsH5/TiRO0dOxjKm7rw5Zf1rky3tlR7rY0Zd
//JEefPQA2strspThGbLj5Tr8XZARXT9c5/Z6DwRQVtNTGfPJvKEqoHGId1NfeEo
U77p9vtbcqHc24tXEUbV5AG5oNJOPok=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:13 2025 by rpki-client