Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7ff3123-43e5-3714-92ed-9705da975781.roa
File:                     c7ff3123-43e5-3714-92ed-9705da975781.roa (raw, json)
Hash identifier:          bfZlehgYRWwKxp60czEm+fttn4lYRRLifUWhZUObX2I=
Subject key identifier:   83:6E:84:50:04:58:C9:4A:15:AB:9E:ED:32:D9:15:D9:4C:50:B2:B8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DB9CB70D0CE387A84759C3D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7ff3123-43e5-3714-92ed-9705da975781.roa
Signing time:             Wed 27 Apr 2022 12:00:00 +0000
ROA not before:           Wed 27 Apr 2022 12:00:00 +0000
ROA not after:            Thu 02 Jun 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b9:cb:70:d0:ce:38:7a:84:75:9c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 27 12:00:00 2022 GMT
            Not After : Jun  2 04:00:00 2022 GMT
        Subject: CN=02aa1342-0247-47c7-9264-de18e4a25c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:3e:c3:be:4f:4a:d9:bc:da:80:a6:42:a5:
                    2c:67:48:a8:4f:f5:bf:7a:89:c1:53:61:bf:b3:f3:
                    0b:4e:0a:b4:55:fd:0a:f4:30:e0:8e:13:36:76:1a:
                    7d:65:d8:df:1e:76:30:43:4f:15:de:5a:75:12:d9:
                    91:7f:f9:57:a7:08:c6:2a:80:d2:d9:70:b5:f8:85:
                    c1:82:d8:69:28:64:59:4e:7d:81:c8:e6:0a:69:a5:
                    37:fe:67:24:f2:ae:c2:fd:d8:80:91:c1:01:47:f6:
                    61:a8:18:af:cd:fc:c4:fe:d5:35:fd:2c:ef:d0:15:
                    b6:fd:50:f5:8b:9c:ec:16:a3:26:06:6c:e2:a8:7c:
                    34:2f:32:00:69:5c:5d:a3:84:72:ca:02:41:87:a6:
                    5a:0b:a4:34:18:0a:3c:8b:5b:12:76:65:b3:39:d5:
                    85:1a:8f:e5:14:3d:fe:b9:6b:42:0e:49:db:1e:22:
                    cd:d6:cb:e6:74:cd:a3:46:29:53:6e:de:a5:77:cd:
                    b6:94:e1:5c:12:52:fb:85:09:28:d2:14:fd:f1:66:
                    68:5a:2a:04:a8:47:ef:68:3a:ff:ec:62:ee:4d:4c:
                    0c:e8:1a:4a:81:76:0f:61:5c:e5:f8:b4:28:70:9e:
                    1c:64:9e:90:7e:0e:d2:d0:94:f1:e6:96:59:5b:13:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:84:50:04:58:C9:4A:15:AB:9E:ED:32:D9:15:D9:4C:50:B2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7ff3123-43e5-3714-92ed-9705da975781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:20:dc:42:e5:00:5d:f2:e8:57:60:41:5f:e0:96:dc:60:
         fe:ca:ba:23:ba:c5:6a:9a:a3:a2:d8:b6:26:62:df:c3:ff:10:
         74:69:13:27:61:14:fa:1c:61:cd:f2:7d:72:93:24:d1:9f:cd:
         ef:7d:13:c8:64:e6:c9:58:e0:f7:a7:63:97:91:fc:b5:0d:f7:
         64:0e:11:1a:e8:13:be:da:34:a5:fd:d2:91:c7:bd:86:9b:9c:
         c1:35:45:4f:63:cb:23:ac:bc:64:a3:bf:4a:5b:d8:93:16:5b:
         7a:f9:d4:08:eb:08:6e:f1:16:bb:78:27:d5:7f:75:2a:df:4b:
         0d:2a:20:2c:ab:30:08:12:6f:a5:ea:92:21:d0:b3:d1:76:92:
         b7:86:63:46:83:e8:62:0f:4c:5e:b5:da:26:30:f0:85:58:f1:
         2f:dc:bf:e1:97:fd:60:1f:65:1c:d9:91:96:77:58:5e:c6:a5:
         06:ad:e9:24:7e:e1:bb:fb:f6:64:c6:83:43:4c:7d:6f:21:7c:
         da:af:a0:54:51:44:8e:2a:02:f4:37:0e:c3:0f:22:a3:30:25:
         29:69:92:58:bb:f4:a9:ba:9f:71:4a:66:48:70:dc:8b:72:f8:
         ba:89:ec:94:4c:cb:42:92:a9:a0:24:cd:53:88:9d:98:10:d0:
         d3:b4:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:39 2025 by rpki-client