Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfcd1b28-26db-34e6-9ff9-f3a4081d6f05.roa
File:                     dfcd1b28-26db-34e6-9ff9-f3a4081d6f05.roa (raw, json)
Hash identifier:          zrAdLck05NjM9eyX0JSW8xZaShY2DCCIffX8fO8LGLM=
Subject key identifier:   20:D5:4E:78:AE:3C:57:09:8F:7D:86:F9:B3:6D:66:3D:E4:CF:1D:9D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E563078646C940E093730A0C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfcd1b28-26db-34e6-9ff9-f3a4081d6f05.roa
Signing time:             Wed 22 Jun 2022 19:36:07 +0000
ROA not before:           Wed 22 Jun 2022 19:36:07 +0000
ROA not after:            Thu 28 Jul 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:56:30:78:64:6c:94:0e:09:37:30:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 22 19:36:07 2022 GMT
            Not After : Jul 28 04:00:00 2022 GMT
        Subject: CN=41f12774-252f-4237-a1d1-12c3bcb19765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:6d:d0:0e:27:25:11:3b:b4:16:78:0f:68:
                    8f:f9:85:9e:be:d6:6b:85:64:77:41:4d:3b:58:c9:
                    01:28:4d:d4:be:1a:d4:db:42:3b:24:ae:a1:26:91:
                    cb:cc:cd:44:a5:1b:f3:90:04:cd:d5:e1:fb:a1:79:
                    54:91:9e:f6:64:af:67:b5:99:7d:09:ce:f5:3f:1a:
                    47:25:30:8f:23:70:f9:2e:df:61:3a:df:c6:a5:e4:
                    7b:91:1c:da:0b:2a:da:65:19:43:63:42:ad:23:e8:
                    16:24:fd:07:eb:79:af:4c:a0:10:8f:dd:70:2d:9e:
                    74:d3:08:6f:53:37:aa:15:f6:ec:83:1f:9f:ce:46:
                    11:02:71:8a:74:73:8b:32:64:d7:0c:01:d2:4b:27:
                    39:f3:a9:15:17:b9:68:1b:63:07:45:be:31:3e:e5:
                    b0:8d:c9:d1:e2:41:7d:1f:0e:c6:b0:29:8b:b8:d0:
                    eb:8b:5f:db:ff:bc:12:c0:24:c2:15:9b:58:7b:7b:
                    c7:0d:64:9b:5d:3e:6a:5c:14:79:29:2b:52:ad:cd:
                    58:5d:43:00:bc:7c:b5:f6:b7:fb:f1:ba:99:79:d8:
                    a2:92:c1:1f:6d:ce:1e:83:1f:d3:13:bc:71:a1:4a:
                    19:51:cf:de:ba:78:2c:96:f6:54:00:c9:dc:27:da:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D5:4E:78:AE:3C:57:09:8F:7D:86:F9:B3:6D:66:3D:E4:CF:1D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfcd1b28-26db-34e6-9ff9-f3a4081d6f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:cb:24:4e:9b:51:b4:5c:6e:18:96:f0:e3:a6:2d:84:bd:
         83:1d:92:4e:c4:65:bf:6b:95:7c:36:cb:3d:37:e0:41:1d:cc:
         8e:f8:81:dd:47:75:18:55:af:af:bd:36:5f:0f:3f:fc:b6:2e:
         c6:88:87:0d:62:1a:ab:02:18:2d:63:92:2e:26:54:90:e1:bb:
         44:29:70:57:90:7f:12:df:c5:06:3d:32:ca:b4:b9:11:bd:a2:
         53:b1:fa:71:f4:42:24:5c:3c:fb:a6:aa:ae:f0:79:ef:75:13:
         84:de:02:14:a9:48:56:92:ac:83:88:50:be:f0:af:bc:36:f8:
         41:d4:f1:b9:ce:eb:a7:13:39:a1:5c:65:de:c6:58:f4:4a:2d:
         28:1c:c1:cc:6d:4f:32:52:48:2f:e9:d1:ef:a1:db:c5:e3:5b:
         aa:40:05:7c:56:97:f0:c1:af:9d:71:45:8d:eb:45:e9:43:90:
         fd:c5:ea:fa:7f:ee:7c:c4:1c:69:a6:ee:68:3b:e6:99:49:d7:
         c1:00:a6:9d:8a:8c:a0:c9:f1:e0:3e:33:fb:26:90:2d:58:98:
         13:8d:85:8a:ca:28:97:a4:01:e9:40:80:d3:0d:35:21:0e:92:
         56:19:eb:ca:1f:35:87:b7:20:19:75:9c:cb:4e:05:89:df:62:
         33:7f:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:32 2025 by rpki-client