Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7e5a64c-febd-3c7f-a5a6-9bd764b5091a.roa
File:                     e7e5a64c-febd-3c7f-a5a6-9bd764b5091a.roa (raw, json)
Hash identifier:          QturHruub+jO2GWJEcq1fdILBJ9gHZ44HaMVQhJQVMA=
Subject key identifier:   03:C9:C8:D5:1C:9F:C4:CF:DA:68:A5:13:0F:EC:05:70:79:49:28:C4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DE0D1FDA188BDB9299A3CD800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7e5a64c-febd-3c7f-a5a6-9bd764b5091a.roa
Signing time:             Wed 11 May 2022 12:00:00 +0000
ROA not before:           Wed 11 May 2022 12:00:00 +0000
ROA not after:            Thu 16 Jun 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e0:d1:fd:a1:88:bd:b9:29:9a:3c:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 11 12:00:00 2022 GMT
            Not After : Jun 16 04:00:00 2022 GMT
        Subject: CN=46bec341-d60a-4751-83a7-6275fdd27008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c0:3e:68:a8:82:42:81:8c:ca:27:e0:53:c4:
                    41:de:27:21:31:39:f2:6f:4e:0c:3d:f1:d8:d7:bf:
                    86:b7:1c:92:00:da:69:9b:ad:55:03:ba:ea:e2:47:
                    72:51:fa:2b:32:60:06:7c:e3:db:67:10:0c:a3:40:
                    25:fe:a2:53:1e:c4:cc:8d:71:81:36:b7:53:a3:91:
                    74:09:7e:a1:cd:ad:cc:ca:d5:b8:ea:1e:b6:77:83:
                    93:22:c0:4a:a8:0c:d8:8c:78:24:04:05:bf:8c:70:
                    02:50:ca:f5:7a:01:df:d5:6b:33:47:eb:e4:9e:43:
                    51:08:0e:bb:52:81:2f:63:d4:5c:22:14:62:07:47:
                    45:19:c0:15:12:6f:59:97:bd:7a:56:8e:7b:f7:f6:
                    25:86:5c:67:cf:bb:80:65:75:30:85:28:b9:19:e1:
                    a9:11:9c:c2:62:17:82:5f:56:2d:f6:f8:6a:1b:e1:
                    b4:e8:cf:3b:5a:33:5b:f9:31:11:0c:de:5d:dc:f2:
                    90:6d:60:9c:ca:08:ea:7d:e5:df:50:6a:65:47:21:
                    88:0a:78:0f:6d:3c:8a:0c:fa:c3:c3:9e:a7:73:16:
                    df:dc:06:5d:26:b4:d4:90:5e:05:69:e6:86:35:be:
                    f0:80:b1:75:51:c4:0b:ea:ba:4f:dc:15:fa:27:dc:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:C8:D5:1C:9F:C4:CF:DA:68:A5:13:0F:EC:05:70:79:49:28:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7e5a64c-febd-3c7f-a5a6-9bd764b5091a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f8:c5:31:62:78:c7:10:f0:30:af:e9:57:0c:f2:d9:0b:43:
         2b:54:5f:de:d1:38:84:ac:e4:d0:17:ed:44:39:6f:46:bd:da:
         ff:3e:cb:df:0b:4f:21:52:ce:73:26:7f:cb:93:cf:b0:cb:fb:
         ad:05:11:01:da:83:50:86:5a:01:3f:be:d9:86:55:57:8e:7f:
         ac:26:73:45:74:e7:12:88:93:cf:15:60:01:73:c4:c8:1b:ca:
         fa:77:65:0d:02:2c:35:aa:e7:0b:bd:b7:27:d2:b2:c7:85:a7:
         6a:e5:99:ea:0f:28:ab:88:0b:d2:53:d5:55:58:bf:9e:45:9e:
         81:a3:e0:76:65:37:d6:ba:1a:72:83:7f:21:c0:53:5e:19:b2:
         65:6f:f5:7d:97:45:a4:3d:ee:41:2a:92:49:53:89:45:34:58:
         bb:81:36:66:c8:f7:56:3d:92:35:73:0f:ae:f6:c0:e8:02:d2:
         1c:36:36:92:fd:1f:c1:78:c1:11:5b:e1:21:47:7e:e7:31:4e:
         47:1c:7f:34:93:c8:8c:49:29:cd:74:d9:63:c0:75:14:78:0a:
         2b:3d:2f:f1:fe:ef:7f:38:c6:8a:53:2d:77:a7:9c:05:66:1c:
         7f:88:83:4a:b2:22:ec:46:74:91:38:b9:a2:ae:2b:bd:c2:a2:
         60:19:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:56:05 2025 by rpki-client